0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) syz_open_dev$vcsu(&(0x7f0000000140), 0x262, 0x80c0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:02 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x840, 0x0) 14:10:02 executing program 5: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c17, 0x0) 14:10:02 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xd900000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:02 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x141400) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 14:10:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) 14:10:02 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) recvmsg$can_raw(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/163, 0xa3}, {&(0x7f0000000100)=""/110, 0x6e}], 0x2, &(0x7f00000001c0)=""/4090, 0xffa}, 0x40012002) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) 14:10:02 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x0) 14:10:02 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xd901000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:02 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) recvmsg$can_raw(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/163, 0xa3}, {&(0x7f0000000100)=""/110, 0x6e}], 0x2, &(0x7f00000001c0)=""/4090, 0xffa}, 0x40012002) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:02 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x2, 0x0) 14:10:02 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 14:10:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) 14:10:02 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:02 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) recvmsg$can_raw(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/163, 0xa3}, {&(0x7f0000000100)=""/110, 0x6e}], 0x2, &(0x7f00000001c0)=""/4090, 0xffa}, 0x40012002) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:02 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xda00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:02 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) 14:10:02 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x141400) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 14:10:02 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:02 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xda01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xdb00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xdb01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:03 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c02, 0x0) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) 14:10:03 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c02, 0x0) 14:10:03 executing program 2: ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xdc00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xdc01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 0: ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c02, 0x0) 14:10:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000040)=0x7) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x8000, 0x4840) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f00000000c0)={"0b419190620660178cb7465ac5f430336ee2e56e3898342b3fd75de08e85", 0x4, 0x7fffffff, 0x1, [0x6a, 0x8, 0x800, 0x40, 0x2, 0x2, 0x7, 0xffffff01, 0xd5e, 0x3, 0x20, 0xffffffec, 0x1, 0xfffffffe, 0x5, 0x1, 0x0, 0x3]}) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x2) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) 14:10:03 executing program 2: ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xdd00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xdd01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) 14:10:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xfffffff8, 0x1, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x7, 0xe4, 0x0, 0x7b, "b322b7fa"}, 0x3f, 0x1, @userptr=0x1, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x118, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/207, 0xcf, 0x1, 0x3f}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x2d}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @exit_looper, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/86, 0x56, 0x2, 0x24}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/227, 0xe3, 0x2, 0x17}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}], 0x9, 0x0, &(0x7f0000000680)="c20c9c70ccdcd28b91"}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c02, 0x0) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xde00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 2: ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c02, 0x0) 14:10:03 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xde01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:03 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x2, 0x54b202) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xbc, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xad2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r2}, {0x8}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r3}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4050}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xda8b}, @NL80211_ATTR_VENDOR_DATA={0x20, 0xc5, "e08b783d012aa41f8a3937c9ceb3bc987a7f154edff100e0abb19a15"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x31}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xc) 14:10:03 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c02, 0x0) 14:10:03 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xdf00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:04 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c02, 0x0) 14:10:04 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xdf01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xfffffff8, 0x1, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x7, 0xe4, 0x0, 0x7b, "b322b7fa"}, 0x3f, 0x1, @userptr=0x1, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x118, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/207, 0xcf, 0x1, 0x3f}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x2d}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @exit_looper, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/86, 0x56, 0x2, 0x24}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/227, 0xe3, 0x2, 0x17}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}], 0x9, 0x0, &(0x7f0000000680)="c20c9c70ccdcd28b91"}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe000000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe001000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:04 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xfffffff8, 0x1, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x7, 0xe4, 0x0, 0x7b, "b322b7fa"}, 0x3f, 0x1, @userptr=0x1, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x118, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/207, 0xcf, 0x1, 0x3f}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x2d}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @exit_looper, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/86, 0x56, 0x2, 0x24}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/227, 0xe3, 0x2, 0x17}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}], 0x9, 0x0, &(0x7f0000000680)="c20c9c70ccdcd28b91"}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:04 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe100000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 14:10:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x60, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8d0b, 0x417}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "6c80c397fc4701949ae596c419813c71"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x104) 14:10:04 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xfffffff8, 0x1, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x7, 0xe4, 0x0, 0x7b, "b322b7fa"}, 0x3f, 0x1, @userptr=0x1, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x118, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/207, 0xcf, 0x1, 0x3f}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x2d}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @exit_looper, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/86, 0x56, 0x2, 0x24}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/227, 0xe3, 0x2, 0x17}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}], 0x9, 0x0, &(0x7f0000000680)="c20c9c70ccdcd28b91"}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe101000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:04 executing program 5: r0 = socket(0x2, 0x3, 0x6) connect$vsock_dgram(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x28, r2, 0x1, 0x70bd2c, 0x25dfdb7d, {{}, {@val={0x8}, @val={0xc, 0x99, {0x421a6c7f, 0x29}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x181300, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x10200, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x4, 0x408000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = syz_open_dev$vcsu(&(0x7f0000000140), 0xfffffffffffeffff, 0x141000) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 14:10:04 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe200000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:04 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0xfffffff8, 0x1, 0x4, 0x4000, 0x1, {0x77359400}, {0x2, 0x2, 0x7, 0xe4, 0x0, 0x7b, "b322b7fa"}, 0x3f, 0x1, @userptr=0x1, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x118, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f0000000180)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/207, 0xcf, 0x1, 0x3f}, @flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x0, 0x1, 0x2d}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}}, @exit_looper, @increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @free_buffer, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/86, 0x56, 0x2, 0x24}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/227, 0xe3, 0x2, 0x17}}, &(0x7f0000000500)={0x0, 0x28, 0x48}}}], 0x9, 0x0, &(0x7f0000000680)="c20c9c70ccdcd28b91"}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe201000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:04 executing program 0: r0 = socket(0x0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x800) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) 14:10:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 14:10:04 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:04 executing program 3: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:04 executing program 5: socket(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) 14:10:04 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe300000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:04 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 14:10:05 executing program 3: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:05 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe301000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x32}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x40) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x800}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 14:10:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 5: socket(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) 14:10:05 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe400000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:05 executing program 3: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r3) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 14:10:05 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe401000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:05 executing program 5: socket(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) 14:10:05 executing program 3: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe500000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:05 executing program 0: socket(0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r1) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) 14:10:05 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101601, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 3: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x32}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x40) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x800}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x1f}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$LOOP_CTL_ADD(r5, 0x4c80, 0x0) 14:10:05 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe501000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:05 executing program 3: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r2, 0x5403) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) connect$vsock_dgram(r4, &(0x7f00000002c0)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$SNDCTL_TMR_CONTINUE(r3, 0x5404) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xc4, r5, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xca78, 0x63}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "b830c1ad21de7545c0bf9c60f48bbb7e"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "95ce75f17b6895783633a32dbebf281b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e3c2961a0d1a65ccada89a686299cf53"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "7527ad1dc77ed08d6b50c87ebfad839e"}, @NL80211_ATTR_PMK={0x14, 0xfe, "67f3611142afaa020ddf62b379d27411"}, @NL80211_ATTR_PMK={0x14, 0xfe, "17d8471ab5c36a35cd59d78592a7ba17"}, @NL80211_ATTR_PMK={0x14, 0xfe, "7b4c42db768da30022c7d0e14ead3a18"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x840}, 0x890) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe600000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101601, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 3: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:05 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x10) socket(0x22, 0x3, 0x0) 14:10:05 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:05 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe601000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:05 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = socket(0x18, 0x4, 0x4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101601, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 5: r0 = socket(0x0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x77}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ba76729823ab029cc73ffbd7e6fe26fb"}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="069582b740d8"}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6115c1cd46110e76c88ec16db5143ff"}, @NL80211_ATTR_PMKID={0x14, 0x55, "fbe9c6fd3886a14d5ac7ae8fa3bb075a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4000014) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$ax25(r0, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default]}, 0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) socket(0x2, 0x1, 0x8) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20440, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000140)=@echo) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x8600, 0x0) ioctl$LOOP_CTL_ADD(r8, 0x4c80, r6) 14:10:05 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) 14:10:05 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe700000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:05 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101601, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:05 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380), 0x101400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) r3 = geteuid() r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x20060010}, 0x1) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000480)={@private0, 0x0}, &(0x7f00000004c0)=0x14) r8 = geteuid() sendmsg$nl_xfrm(r6, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="040100001400040025bd7000fedbdf25ac1414150000000000000000000000007f0000010000000000000000000000004e24001f4e2200080000808004000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="bd1c87405721bb3f66021f00", @ANYRES32=r7, @ANYBLOB="ac000700fe8000000000000000000000000000aafe8000000000000000000000000000bb4e2200024e248000020000201d000000", @ANYRES32=r2, @ANYRES32=r8, @ANYBLOB="0008000000000000010000800000000002000000000000001f0000000000000001040000000000009709000000000000060000000000000003000000000000000010000000000000ffffff7f000000000800000000000000ff0300000000000001800000b16b6e000000010000000000"], 0x104}, 0x1, 0x0, 0x0, 0x40}, 0x80) 14:10:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:06 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe701000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = socket(0x18, 0x4, 0x4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:06 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:10:06 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:10:06 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe800000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:06 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setfsgid(r2) 14:10:06 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:10:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = socket(0x18, 0x4, 0x4) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:06 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:10:06 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe801000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:06 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:10:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:06 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20b000, 0x0) r2 = socket(0x1d, 0x800, 0xf17) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x800, 0x100}) 14:10:06 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe900000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:06 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x2, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 14:10:06 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getresgid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) setfsgid(r2) 14:10:06 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 14:10:06 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) 14:10:06 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xe901000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:06 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) 14:10:06 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:06 executing program 3: socket(0x2, 0x2, 0x6) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000080)={0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x10000}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={r3, 0x0, r0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000024c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002480)={&(0x7f00000001c0)={0x22b4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0xaa, 0xc5, "75d9026b2b53a2ef95b885ab3085461d00386f4f20574c0bb581e912f80397738bc17095cbba75dcd2ba5cb533b3c7e875163306053fd090e04aa9fd5545174de4f41c251de90affd685b85b762797168596c23758e0498ca96be40a72d51ed02eeb5a290e5692ff438dacaad1493204ed71478c6929e3848f80ba427371c89098841c1223fc6e91574e0c2ea58cf29ad38c74ae6df25ab6a90f09a9cd856b0d4041bbf7f179"}, @NL80211_ATTR_VENDOR_DATA={0x6f, 0xc5, "4ad510cf6c93ff2680a763013505f0d24e7b85cf029863b3c194bf299fade20a51e89ddb174d776fee4708e3a77b2f35d8b2b38184647cf13a659cb7e9033e48a09fc1810b25fda7d90bbfa58a3dea5c164b5e1ec01ffde1cc336029b1adf5f770cff5c488d7ae83116176"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "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"/4096}, @NL80211_ATTR_VENDOR_DATA={0x61, 0xc5, "e0c280c68eda2e98776e2cb4b79230b1fd0a52bff71064d5baa9beea2a3ed1f8a693867e03287b8ec6546619a60c4fcdea6dfe5ae555833abd04c1f5fe92e7fcfb3acf58ac30294982397737f911f6a6d59a120363ce5a962d91de7855"}, @NL80211_ATTR_VENDOR_DATA={0x91, 0xc5, "bc7d722118532431638090f1082e3533013088c02c8298fe0044c407785d0658274b215a638698cd48e57b0b2971d6b88d2f0ff42ca714f5885ba311dba5addfa331bb4d97041d6eb407d02e59f533587d1402c851782019f4afe8b5e3e22c2f98b6041ed366cfa2e03e0306f986a53fd9a3702dbad494edf2017b04df248fb4d3619faa34bae2efbb1b0c46cb"}, @NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_DATA={0x1004, 0xc5, "75edab5e7f77af776f8b4f8dc1c21dd991dd8ba241331a931da1b8427a8bfafec8ae26bb595983c0b6841f9b0f723a73fbd8f7c603ab317524900b35a55882d2e3428b21e9d41d39cbd75ddafbfedc227934ab2eba04025675a2acde1dd0798da1d7646a5ac919542a02ea6123fcbee6b9c5d88e4f8211206a82664f0fa6bd4ea87435cc00154b3da6ff6cbdbd2dbd1bf5faabaeba78dc850c6862bb12a3fd52f8396ecf944792a4927a09b1cdb162699740c8594160986d9f4d25fbdb935f52073dbef925b4a708707fa920aae747ac038710a42c5f2f76ea2bdf0e32d01dabcd12449c45b516dd95c328393230b79ceb0538f3f79e339ebabbc4fe0544d564becbe48a4b6afd028226084886d370cd28f00bfaf14871488e76f11566c57818e47be4876c333e52d43e290138443c0e66688c720d5581c547cc00107ee30ae15bbdca1a52000f975bb6c7409b6fc6fcd1d5be2a28e7bd6647d4b8b5325e17447f59f72cf548df31efed10d892d462aa3e9ee2b72a51d97d29e5aca84b4e3a90df5f595f0c53aa8cae30d6cd68b5b20c1c93e23427e56bce7864032eb2bbbfa518f1347a0667a906ce8ea2daf20cb4f3f8ced380d2f716ec3abf0be72a22fcb978a9e05615bed2ba86f272565f5b23505a3672f1fa563c6735f318a820efac4e24618d68cc778189da70c3ac57174c28d53ee9fc2974c50a093dd71dc18ed4c97791b31796285a8036bed833b30d1403beb4fe3d085f6cc653fa46213c36bb26b00a1c3b93a84c901bf44694f6a4c87f116b21236110a46c0da8d217f43abf41ed8bf741456ff42cf901aff0cc99ef50acedc89dbcc5d6528d740f1e931a143bea7c343ea1d85e2cf1966179774f37a8210afc38600fdbfdd3a72f8b638cd32a5965593b10ad128f024880bb1b86c13568d6265d0a3ec8cf1cb9657b26eb87964fa7b4cb08451f37a6d53ffe2c8fde39dac420ee7f08be1ea87b6cc0aa6c9956cb5d382d49eb4c40ef24212fe3e809b67f513730d826df3c3ced4281fd1caaccc5900273074593e366a1b0d5d5de0aa248cf0f48e1a8fc8df23d2bd65054694562430e7d44bc19578412efa5cf24f86c0a40eaf4782f96face5cbab4c6125f1c417cad24f1af68dd45fd1af10883e2bfadc0af499bc21f37bbfb03796514509692550766d977ed3a2f35e10547abd6aa46257eeedf780eaee8be00b434a1feae1b90781407bac7587895bd96f104e83d2bf57626861320eca3e3acc83ff0671c230692686c9e62b03bfca968cfa09a3a93e6d767919273595c0359fe9f25671df332f1785d1ad62485e4fa00ebece7586c0ed1dcb3c5ab670b5f8b715d44d45e92d2f015375f3aad0bb954fe950d16d7f4ad15637f236976269bcd6d7d1d78e816d9b0448383b28d6d12baab37af28c65fa7c42a5973140c4869cf6391958322937d4a15af8bafcb1c95171de30548621335c4e0755aa8531790fa19c8ccde7116ea96ffb34ae91ced40b3190fea63ba53b36ea77a2e179ed15da53be0b5d206203b297bc01c4cf9a77fa85a90b13c25d47b5231db9f82f6770653a3941c754e3cf93d15173af9446dc1f2b3c149a4bd621ace817474801a53bfb7f9ccad2b9947483009ced3a43ce1ea78a36c08707987442af379110a6f580e139ea28fe188c58a271cd685bf6c5b0bf325988e76130abccfae3d336c639895038e1b0028d2d5a04c73b411f29dfe6dd803c195ecf5698f0a5025135d0d553b45b88a6837703d4ee9251092b36bbfa656e9f33f53e0be3c36bb834b52cf47d38ee196bf46786e1373cd6f78abbbe18768fcf36fce5ee6b36cca1e6da957478955c18a7c5b13c04c630eccc29b987838c0de01d1825dc24e1b6f26928726092fc2b035b9b7284a552776ed0e117e3f82337b19eb571ad52f830b24bdaa3f36d356f8affaf69f69e3f896edf4f6070967ab22c78d887f8f26eeb644ad34c8a12775b9c62066e63a103fbf31dd52c5176db0c07dae6cd95af692cbccee0a6037e463ddb7bd9e02ce8fab046b664b39a53a145b4a793928ae44790795e434a72b5bbf28c6963d92a483d0d768058ce5f9562cf492033d54c74cc6d387d5fd9681aa3518f328b110fcfbf877ef88c3990affa3155925a3ca5614b67ab883eb0f6e18a4f60f5b5c4613b0b493d5596fd8b441d479ce7e18b28640f026931bdfb71a6cf9c540c7ce6130d7c9a32a581bb5119b87eacea15450c0d5afe2313538c13346a53dfc7aba983673939ef2d920f538c4daf9605e8016d00f8080ea021a59e70fe5c4109d0deb9820443396d389c6d44ef139fef75d0ad42dc36ef196480e97048073eea6fe9e692626a1012eca2108544185a429dbb99aa8b8b9ee487b2423bda991754fb48d14847253e819e8b2dfe03ff48ff4e2737e20c186a3ed5dc340f8dda877bfc87522eb5991418f29a1681d0f80716b53a0ad7305454ce820dfa4b04ff8a2be9d849df85695a62b11df81f94ea22064a1395526ef7188faf81ca71e9d46a43aad69557d318cff77f0471b613e3d84856f6702e35ef2c742bc086db7cfef79f650ed52d2b3a43785b9dd24f36fba5a2dbd37f03b28eeb7876671f1565312530611919ea9fbbf74e4a1f8688a2f997d4f5b79d46c2e16e944a868c8c7a570b8a6d6ee2a44dceff995befce1500cd934defbf49f05eb63a1402bd04f290f7bb6590a1d56383b90308d2ec14657e282457003c1ed85954c348954d350cb04763f5b52260fc11fa6c7ffc6bba65638c37ccc6a8abc9890961092581f8536d9eeef86934c5677b7af7a9af4662aec1aa535003e579c10a29d3e7557cac9ded6d5a1d8518eb0ec3336229fae374d5570cda70f97f77b2fc42283b18b49c4e4d7055fbe6770c8002a5ad7d4349d56bc79e8bfdd635cadcf85c671341f1ba3db8904d4c21814ebd3bbc6f85327b65e99ac62f3b74b183919a63b7a351c3a885a0b63e30c3db933e8b217767a207071956cad38f6d168a65524b34360f410110d803ef4d9966e298900046f591c5da99d4173efd0585c2e1a6a6f0bd84cd869da154da0023f2bcb68a915bbbdf63d6cd714de1c0ba9cbf2051b6cc6684f6207ec95defc00093a3480238725557e8d972ac464d5bf7222358f4209a8e259aecb8c1b48608ab703ab01cc276a9a582d6d7670d7e54c90687919e5a846c3a88c6aaa60084b349fa87ec2b2a3cc09965f1f0a637afe7d92ec3668a6217e9ec3d1f5f6e7e51c5c9cab7bed82ac3c6c636b2903d967f94231e6918987cd48349774953364f1a7885385470660c6569bd68838b25cfb6f2862c687f01908af1833cc67ae924e21903be8118faf4c668b159d34d6fd2bc8854593df22593b116e96c88e0fdb10e8e65f26e6d7e1242b33a80f714f4a05c463419852877cc8462c628a14798cbb6a40beab2fe2bfa2f5c4b670cbd995707a5d3a2f67f356609c222fe894c0ea67e42d9d4875edc490516761b7ec3785122d5779dea763960dcccebd47553d9b7d0bacad9c66127f3b9e66de3bfed7654f265c7e560896646d67966aa8567df12730ef6ae6a0b5aa15357584eee44d2ca5794ff58c2d130fe72c20dce72b2381a3d651a3a1ad550e6e2145596a282db963b287e758440b84933f948be8a202f1c8ed8d8f875d483901683d9bc260afd99af1e6e0f096eaa49f3bad65a0670f87fdd4c1b612b3ba263ba85d4f8021d77b3a5db888b717d5b233fef2d4d9820cdc5dea30f50e94097c3010450ced8408f79bee4b420cf56b9e53584a4f4beafb541ec7dd772c6c0d4e741c6de2c024c1dc8072b558f8c4d51d39d811ff3fcbd73c787cb8166d17190bcddbbd92a07d006d225db696439d99a108f0457772c46d7679ecc3c6a268a7670566e82b67e496b18b4e6309dcb7d1818a13ea3f47151424055266884abfb1ab202b5ed3d77f6b5b0e33daba5cecbb22707e84d78bda7a2b29a58289290c509b353cabae7412f08857624874d931ef5fb6507bf325f644761aee6a8a92591032ee2d98c1f85f12dad7157ef509a142f07fc510c9066dc0b825ce918e5eb2498d70a8d20c84aaca8a867b66adec7a59dba5da6c2f457608bd9896fa6404a49a82ef9f615dfedc5b73d6a01b1686981bd7c465a7baa120e9f99f2341d18a135631f4ee2fd387fd46f7c44629a3ff1c8516fd8c4f3a496fb70ffd11ae9e6a88742283c5edaf3316c80305fdc24bf68f71551d3c718621b058105508bddc7c1b7fbdcc3b9954e9c20e723bdd2d5c182ae470ae31c97340e071521bcb0d0f38be7674774fca5b0a20aa849f628d96ef3e151148425a47679769d2403bd0222f4ab14c73d8df3cc4c3608d59811f61308da35e6703f9f203b1ad6d930310e4dbebb12afd1d2eb6f2fc5b949d766cc09229be7e9a8598401876503a0ac67f6596be4b5826f449ffae549a663174c31dbc72c230b99084b938a82c6e60d71e085b4288c7fcea34d65872306c701f7e52a810292dc1832a4aff01ce2461632fa373ced11d4001016a1a51fa84eb8503326874b7f56da154cf3a978444cb85fd3c56b942c1be5adccf5c21eaf16db69965b53f3aa720769ac63140f225ed35f2d0e0000ca26562485e0a2aa7f4fea14bcad2e7bad216178ae43fe5162d3a18555ac92678598c1c14899701bdf1c4d12405d30edbb04c894e0a26e15d23015779fbad0849e3ec05d4fbc467048b30f6d114bfc9ebb93db84f51003139da7a1d47c2c9d8f4a8c5502f60d79a6239bcf70cec9bad6d3c3ee75c76cb072161e603feb77f43d4dea9f9586fbf84d15e6de581db5152e0bcd6abcbd5da297fc30cb4fded2a0d0df76c643ff9cb283183d0a84cf73a4ba13f1877de59cc9ce94a5adaa910acb943175a594523a912dba539df593844b6bf50e250cb08d7db091f527c1461e4b101279d40aed97a05210abf3233eab7b094e89b2a8a214664df8387671a9d0a4fc22a4682d398a38db3c8c6094b7968fbd7d1070d1dea7ff42347174072d5de2819afc145ea12e185dcda7464bc54764e3c76e5dc565ef94e11bb03736f8e8d48315f753a388220efe56220c3a36f8a1f5e66205e8bf6ab1d775a94eed34e303f86b8f5d60d39130fa474b7a87a60ecad48a3da8ec36f4148ec7e05ca0645ab1221e48b09436796768bc0c47499edf595551d200440bf062956129a3d07b126029e5494b5e790983ab6d9442b162e7acd6b74fb665742ab7996c487e08d27e3eb759f5d472dd156283086c0c79b3c396b37dd9cf29a5e99fa4ce66cb844f0f6900ee6442b507a5c71423b93169ad0d4a7e1bbb822fae681a67382e2de3b8f2c3f7891d2cf00e29477d14fa205bac3ad337d84ae71ccd39971b1142cf5acbf48391818d30977373b79780fcd1a72da49951e8651151425aa66caa86071a0130eb910fad1c2acb27fe33f7e719cd825cec8ef52d50f0169c21215d2981393836f97c1c4c968bd9620531176fbdfb8a635ea119ccf7fba4c1e2a3ddf8d0d0243876507d5bfef185a71fe3ab14f29cfda5487c26e6dda136a49f4998d183d6f47f63f794222f4ff05270bb587096c52c77a11bbdb0de407e8c2d21431f68ceddf066f7630c42bc62edc0eb352bb94cd29d45028b487babdf9d8778a178abf7e1b800e49e1d7f5615ae26b59b9cbed949643d74ce59110012ba3db344ef09103c4dde19e4e20f71cc60eb22a432a2ed675dace7f9009b028cd7e7dc12c2a4c16677df04bd7def39476e57517eaf4862df175088afb699f114e134499cb8ce17c578b"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x60, 0xc5, "57c3a2a1ab255be4f3175f67c7e68b3ae27491f236d5a9a8a4f676dbdbdbe48cfc7f4769c9d1e6523c8a449b29b66db597cf4e9ad3e1ba929cd2fb05b24349627992c4dbecb2154d11a982b93d24beb85c2286e637a8a65c345a2e57"}]}, 0x22b4}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) connect$vsock_dgram(r7, 0x0, 0xfffffffffffffdf4) 14:10:06 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xea00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:06 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) 14:10:06 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x101020, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:06 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 14:10:06 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0x3801000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:06 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xea01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:06 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) 14:10:06 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 14:10:06 executing program 3: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) 14:10:06 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xeb00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) 14:10:07 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) socket(0x2, 0xa, 0x0) 14:10:07 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20b000, 0x0) r2 = socket(0x1d, 0x800, 0xf17) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x800, 0x100}) 14:10:07 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) socket(0x2, 0xa, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xeb01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) socket(0x2, 0xa, 0x0) 14:10:07 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:07 executing program 3 (fault-call:1 fault-nth:0): r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xec00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:07 executing program 5: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:07 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xec01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xca6e, 0x200500) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0x7fffffff, 0xd0000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, r3}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r4, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x42}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40080) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xed00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) 14:10:07 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, 0x0) 14:10:07 executing program 5: r0 = socket(0x18, 0x3, 0x2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x5d52c1, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xed01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, 0x0) 14:10:07 executing program 5: r0 = socket(0x18, 0x3, 0x2) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:07 executing program 0: r0 = socket(0x18, 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1}) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xee00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x7, 0x400, @l2={'eth', 0x3a, 'caif0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x40000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 5: connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) 14:10:07 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, 0x0) 14:10:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 5: connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) 14:10:07 executing program 0: r0 = socket(0x18, 0x3, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xee01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, 0x0) 14:10:07 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)) 14:10:07 executing program 5: connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xef00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:07 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2d980, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x26a300, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:07 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, 0x0) 14:10:07 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)) 14:10:07 executing program 5: r0 = socket(0x0, 0x3, 0x2) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:07 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xef01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)) 14:10:08 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, 0x0) 14:10:08 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0001, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r5) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r5) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r2) 14:10:08 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf000000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0x0, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:08 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, 0x0) 14:10:08 executing program 5: r0 = socket(0x0, 0x3, 0x2) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:08 executing program 0: r0 = socket(0x0, 0x3, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)) 14:10:08 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf001000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 5: r0 = socket(0x0, 0x3, 0x2) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:08 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8902, 0x0) 14:10:08 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:08 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf100000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 5: r0 = socket(0x18, 0x0, 0x2) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0x0, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:08 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, 0x0) 14:10:08 executing program 0: r0 = socket(0x0, 0x3, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)) 14:10:08 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x2}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x64015) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:10:08 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf101000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 5: r0 = socket(0x18, 0x0, 0x0) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:08 executing program 0: r0 = socket(0x0, 0x3, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)) 14:10:08 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, 0x0) 14:10:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0x0, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:08 executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x68}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x88c}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "c31e9f8b8284c4b5b96725ba1eea944e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a8e0289a4a7a2b1f1b80ab19fc9a620c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4801}, 0x44000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x24800, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 14:10:08 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf200000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 5: r0 = socket(0x18, 0x0, 0x0) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:08 executing program 0: r0 = socket(0x18, 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)) 14:10:08 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, 0x0) 14:10:08 executing program 5: r0 = socket(0x18, 0x0, 0x0) connect$vsock_dgram(r0, 0x0, 0x0) 14:10:08 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf201000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0xa10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3b3d4e8dfbc5f66f9e050a8738481e0f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:08 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)) 14:10:08 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x0, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:08 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, 0x0) 14:10:08 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf300000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 5: socket(0x18, 0x0, 0x2) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) 14:10:08 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)) 14:10:08 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, 0x0) 14:10:08 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf301000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:08 executing program 0: r0 = socket(0x18, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)) 14:10:09 executing program 5: socket(0x18, 0x0, 0x2) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) 14:10:09 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, 0x0) 14:10:09 executing program 0: socket(0x18, 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)) 14:10:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x783940, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000001c0)={0x78c7, 0xa, 0x4, 0x100, 0x7e6, {0x0, 0xea60}, {0x2, 0xb, 0x3, 0x0, 0xeb, 0x3, "f897408c"}, 0x61d, 0x4, @planes=&(0x7f0000000140)={0x5, 0x40, @fd, 0x10001}, 0x9, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40080) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000240)={0x6, 0x2, 0x4, 0x2, 0xb5, {}, {0x2, 0x8, 0x5, 0x3f, 0x5, 0x5, "d2d10de2"}, 0x800007, 0x2, @userptr=0xffffffff, 0x89ff, 0x0, r2}) getrusage(0x1, &(0x7f0000000080)) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x1c219fde28801d38, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = socket(0x23, 0x2, 0x8001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) 14:10:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x0, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf400000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:09 executing program 5: socket(0x18, 0x0, 0x2) connect$vsock_dgram(0xffffffffffffffff, 0x0, 0x0) 14:10:09 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, 0x0) 14:10:09 executing program 0: socket(0x18, 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)) 14:10:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0xa10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x4d}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3b3d4e8dfbc5f66f9e050a8738481e0f"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}}, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf401000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x3cfdc3, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 14:10:09 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf500000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x0, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 0: socket(0x18, 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)) 14:10:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x0, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, 0x0) 14:10:09 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf501000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$media(&(0x7f00000000c0), 0x4, 0x290300) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4240, 0x0) 14:10:09 executing program 0: r0 = socket(0x18, 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, 0x0) 14:10:09 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, 0x0) 14:10:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x0, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf600000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:09 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x7c, r0, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x68}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x88c}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "c31e9f8b8284c4b5b96725ba1eea944e"}, @NL80211_ATTR_PMKID={0x14, 0x55, "a8e0289a4a7a2b1f1b80ab19fc9a620c"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4801}, 0x44000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x24800, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) 14:10:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) 14:10:09 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, 0x0) 14:10:09 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf601000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:09 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf700000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:09 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r4) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) r6 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$media(&(0x7f00000000c0), 0x4, 0x290300) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r6) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x4240, 0x0) 14:10:09 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) 14:10:09 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0x0, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf701000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:09 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x10}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x1, 0xa, 0x4, 0xe840, 0x0, {0x77359400}, {0x2, 0xc, 0x7f, 0x9, 0x8, 0x4, "56c141b7"}, 0x1, 0x4, @offset=0x5, 0x10000}) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:09 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) 14:10:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:10 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0x0, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf800000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:10 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:10 executing program 4: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r0}) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 14:10:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf801000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:10 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x3eb081, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf900000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:10 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:10 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xf901000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:10 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:10 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:10:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x8402, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000740)=ANY=[@ANYBLOB="ff88f7cebe679466f53c1ddd5dd66c7ea7c42ad6baa22c2f45f0b848f89f7e077b4811b6d169cf291a7069ae2befc0374ae1167a9c6c2a291e3dec8b87b796e0de287b82b8aa6b6261772de2a402f2a5018388aa2f495a106bea156331ba9204eda06c97820021d77d054b815c24fdcde4215a502aac02b9027bef30f3ccc2b552517c2f3fdd15f11e4d", @ANYRES16=r3, @ANYBLOB="010001000000000000007b00820008000300bbf389e8fe7fd15494c2d1257d71cd86e4eeb1c55dfd4f2ca71d862a2285978eccaa618d79c0aa19", @ANYRES32=r6, @ANYBLOB="139989a6ffb0b5e69b21c63cf0ba12abd864bbb1ce27e8d3075eb2120234b67f4e5fd20b4af545044aa6ef891eee882a9ee441b37b9e896edfd55a46935895ab62ad562775a6cc537b4d95c1f487f6733a25105196aa200bf9dcc21a6a31763dcfccb51e08731ae8b5f68e70f0d7bdac624bb1e996bd865d87c33b7ea26c199883eb6b15c1688b5d3fa8f2657c8482e8ab5a70a726dfa84e8b21a078d3f9a605a608804572d8a3a865941dbfd96bc622a05058dbb165560f71806068eb8ed6d868770e46ee4e38c16abeb1f863ef5754d992a2912299093056695ab122b090e8048391680000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x1cc, r3, 0x537, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x49}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "de9207bcdc74d5fe580e933a8ffe1398756e1d76f8d4db53"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d19ba117ebab2203f01b81f0807fafcca410d846b9bc1c06"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d38c26efb96143ebf08812b1ea8568bff82ba4abe3904578"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f716ae8269434123544c80feae0b13b9245cbcae93c4599"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "81af2e3d5cd5a16df0366e6adce2536ad9679e356c97f601"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8dd5f9d94ce44e63d4f2a3e9c63b600fd5986fe0579f90e9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b4c0c175e495384a4253f3d48dc05a3446a634f5215edf3d"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "22ccdab622486940bf160693700bd65561abd48a403c37f7"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 14:10:10 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044943, 0x0) 14:10:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfa00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:10 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:10:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044943, 0x0) 14:10:10 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfa01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:10 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, 0x0) 14:10:10 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:10 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) getitimer(0x0, &(0x7f0000000040)) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0x8402, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000740)=ANY=[@ANYBLOB="ff88f7cebe679466f53c1ddd5dd66c7ea7c42ad6baa22c2f45f0b848f89f7e077b4811b6d169cf291a7069ae2befc0374ae1167a9c6c2a291e3dec8b87b796e0de287b82b8aa6b6261772de2a402f2a5018388aa2f495a106bea156331ba9204eda06c97820021d77d054b815c24fdcde4215a502aac02b9027bef30f3ccc2b552517c2f3fdd15f11e4d", @ANYRES16=r3, @ANYBLOB="010001000000000000007b00820008000300bbf389e8fe7fd15494c2d1257d71cd86e4eeb1c55dfd4f2ca71d862a2285978eccaa618d79c0aa19", @ANYRES32=r6, @ANYBLOB="139989a6ffb0b5e69b21c63cf0ba12abd864bbb1ce27e8d3075eb2120234b67f4e5fd20b4af545044aa6ef891eee882a9ee441b37b9e896edfd55a46935895ab62ad562775a6cc537b4d95c1f487f6733a25105196aa200bf9dcc21a6a31763dcfccb51e08731ae8b5f68e70f0d7bdac624bb1e996bd865d87c33b7ea26c199883eb6b15c1688b5d3fa8f2657c8482e8ab5a70a726dfa84e8b21a078d3f9a605a608804572d8a3a865941dbfd96bc622a05058dbb165560f71806068eb8ed6d868770e46ee4e38c16abeb1f863ef5754d992a2912299093056695ab122b090e8048391680000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x1cc, r3, 0x537, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x49}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "de9207bcdc74d5fe580e933a8ffe1398756e1d76f8d4db53"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d19ba117ebab2203f01b81f0807fafcca410d846b9bc1c06"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d38c26efb96143ebf08812b1ea8568bff82ba4abe3904578"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8f716ae8269434123544c80feae0b13b9245cbcae93c4599"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "81af2e3d5cd5a16df0366e6adce2536ad9679e356c97f601"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8dd5f9d94ce44e63d4f2a3e9c63b600fd5986fe0579f90e9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b4c0c175e495384a4253f3d48dc05a3446a634f5215edf3d"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "22ccdab622486940bf160693700bd65561abd48a403c37f7"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) 14:10:10 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc020660b, 0x0) 14:10:10 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfb00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:10 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044943, 0x0) 14:10:10 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 5: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:11 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="04002bbd78ed4c6dd6012a7000fba4df150600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x880) 14:10:11 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfb01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfc00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:11 executing program 5: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:11 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000280), 0x1, 0x200001) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r0) socket(0x2, 0xa, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc0c20211}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf257f00000008000340983c68d71ecf73704a91e64b8b84bc740197a78a297745ed17a8cf53e43a7660fa848a0554a3d6471f267c57b812cd99491bd22e3542145037cc54989438912815e11abb44b567e22d56de09", @ANYRES32=0x0, @ANYBLOB="06004800160000001b0034003cff2ada89a8d8da6b63bb0cc8f2fe68eccd6f520f688b000a00f500505050505050000006004800670000001400550033d3226dd1701f20d9dbf49acff6786a1400550043580cf56c80b49ecc340c44710b40bc0a00f50008021100000100000600480068000000140055005f68afaddc0bcb14948f3f6d3a5d3686"], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_init_net_socket$ax25(0x3, 0x5, 0xca) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) accept4$ax25(r5, &(0x7f0000000000)={{0x3, @rose}, [@rose, @default, @null, @rose, @bcast, @netrom, @netrom, @rose]}, &(0x7f0000000080)=0x48, 0x80800) r6 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) 14:10:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfc01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:11 executing program 5: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:11 executing program 4: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x164, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) 14:10:11 executing program 3: r0 = socket(0x28, 0x3, 0x70) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket(0x0, 0x5, 0x4) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000040)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x50}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x44051) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r6, 0x29, 0x6, 0x0, &(0x7f0000000200)) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000280)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="11030045ed0000b1b8648bdd043a369c9b4f6d7e0653e170d4051630da4b4ce726483eedc42abf92767f97cdc36764523f4651b4ab66f8ab5ddb698e4ad232c83974522ec6946d58f9d7", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) 14:10:11 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfd00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) 14:10:11 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfd01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:11 executing program 5: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:11 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000040)={"38524ad6a8fdc6fdf81b262c07bc4754e04846519e2d8340ac31205afb21", 0x9, 0x0, 0x0, 0x6, 0x3, 0x1a, 0xfffffff7, 0x6, [0x1b, 0xb498, 0x8, 0x6, 0x2, 0x100, 0x5, 0x8, 0x5, 0x3, 0x300000, 0x401, 0x2, 0xffff, 0x5, 0x75b3, 0x100, 0x8, 0x3]}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r1, 0xc004510e, &(0x7f0000000140)=0x6) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0) 14:10:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 5: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:11 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfe00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x351c82, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r3, 0x0, r4, 0x200}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r2) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 14:10:11 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xfe01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:11 executing program 5: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:11 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xff00000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:11 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:11 executing program 5: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044943, 0x0) 14:10:11 executing program 3: r0 = socket(0x1f, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0], 0x8000, 0x1, 0x2, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, r2], &(0x7f00000002c0)=[0x0, r3, r4, r5, 0x0, 0x0], 0x2}) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r6, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$l2tp(0x2, 0x2, 0x73) 14:10:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xff01000000000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:12 executing program 3: r0 = socket(0x22, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x587000, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fddbdf25770000000c009900ffffffff580000000800ef0004000000"], 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x840) 14:10:12 executing program 5: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044943, 0x0) 14:10:12 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0, 0xffffffff00000000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:12 executing program 5: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044943, 0x0) 14:10:12 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x210000, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r2) 14:10:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 3: r0 = socket(0x22, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x105840) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e725dfde3a8521d6572063bd913607ee1bec95171af00234"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b99e8d55a748262e99938d7b13c4249364dc8571cce8c998"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b99d058c5528b85de7ad7f056cb4132a4a38d04fd3b0c9e"}]]}, 0x98}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:12 executing program 5: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044943, 0x0) 14:10:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 3: ioctl$SNDCTL_SEQ_GETINCOUNT(0xffffffffffffffff, 0x80045105, &(0x7f0000000140)) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf00002700"/26], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x24004850) r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDCTL_MIDI_INFO(r1, 0xc074510c, &(0x7f0000000180)={"f010f8a3984e3fee37b5ed243aae6a83124b59b3db18556a9ec5c5a636ef", 0x7fffffff, 0x60000, 0x7, [0x9, 0x7f, 0x6, 0x9, 0x499, 0x400, 0x0, 0xa16b75bb, 0x2, 0x9, 0xfff, 0x7, 0x101, 0x7fffffff, 0x4, 0x5, 0x9, 0x1f]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x3eb081, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x3}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:12 executing program 3: r0 = socket(0x22, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044811}, 0xd0) 14:10:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x3eb081, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x4}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 3: prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_open_dev$dri(&(0x7f0000000200), 0xffffffff, 0x10080) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3000400074049a98d730fdc6bc509cf8508cfc0fbbcc024d42d4ee4c83d0a151e5019b7889311036817060c4da7b43703a686839e61496f9a8f76a4a08a9ceafd9501ee3", @ANYRES16=0x0, @ANYBLOB="000429bd7000fcdbdf2501000000000000000b0000000014001462726f6164636173742d6c696e6b0000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000400)={&(0x7f0000000140), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x20, 0x2e}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000}, 0x851) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0xac}}, 0x8050) 14:10:12 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x3eb081, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x109000, 0x0) r2 = socket(0x1, 0x3, 0xb7c2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x5}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:12 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:12 executing program 3: r0 = socket(0x22, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:13 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:13 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x4d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:13 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:13 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x6}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:13 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:13 executing program 3: r0 = socket(0x22, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:13 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:13 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80002, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:13 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x8}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:13 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:13 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) 14:10:13 executing program 3: r0 = socket(0x22, 0x800, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:13 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:13 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x9}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:13 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:13 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) 14:10:13 executing program 3: r0 = socket(0x22, 0x3, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@mcast1}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:13 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:13 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0xa}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:13 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:13 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) 14:10:13 executing program 5: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:13 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044944, 0x0) 14:10:13 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0xb}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:13 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:13 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xb5a079da0d8b28f3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x9}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1d3}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x25, 0xac, "ef4306b933090bb6229ba7b064e189216dd4328fc50e50bde9dae60fb8bc2bcfb3"}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040008}, 0x404c801) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r6, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x7, 0x8, 0x6, 0x6}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000081) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r2, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2d8, 0x4f}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xffc1}, @NL80211_ATTR_PMK={0x14, 0xfe, "05bd3fdcb90662e0bc204c530570d84f"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x24}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x400c014) r8 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) 14:10:13 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044944, 0x0) 14:10:13 executing program 5: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:13 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:13 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0xc}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:13 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:13 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044944, 0x0) 14:10:13 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd035, 0x78}}}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x94a68771fd42faf5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x4810) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 14:10:13 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0xd}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:13 executing program 4: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:13 executing program 5: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:13 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:14 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="40022bbd7000fbdbdf251700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900090000002e0000000a0006000802110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c040}, 0x940) 14:10:14 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0xe}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:14 executing program 4: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:14 executing program 5: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:14 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:14 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 14:10:14 executing program 0: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:14 executing program 5: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:14 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0xf}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:14 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0xbc, 0x0, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x34}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x40}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc0}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2f0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x70}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x81}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x2429dbb2c722a208}, 0x80) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 14:10:14 executing program 4: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:14 executing program 5: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:14 executing program 3: socket(0x22, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 14:10:14 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x10}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:14 executing program 0: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:14 executing program 4: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:14 executing program 5: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) 14:10:14 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 14:10:14 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x9, 0xfea, 0x4, 0x3}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000100)) 14:10:14 executing program 4: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:14 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x11}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:14 executing program 0: r0 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:14 executing program 5: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) 14:10:14 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x201000, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x3}, @increfs={0x40046304, 0x1}], 0x8c, 0x0, &(0x7f0000000080)="bd39d297e97adcc74b6e51b5bdeb7c63a8eeecb0bf4a66a8e0e1949a516acc9698f0715dedeea870b623a31c37d24cbbc8611fe0c9e7f9837dd50bc8d171c4ad918011485fed2865a638532c696b4641b392c7e4b6913262cb8f67617ab5fb1abd36258a154d6fb9aadee690fa92ae33f880e2f97e87937e8229367071e6244e7f0cd2ee5338063b588a8b8b"}) ioctl$SNDCTL_TMR_START(r0, 0x5402) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) 14:10:14 executing program 4: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:14 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 14:10:14 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x12}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:14 executing program 5: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) 14:10:14 executing program 0: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:14 executing program 4: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044944, 0x0) 14:10:14 executing program 3: r0 = socket(0x22, 0x3, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x4044005) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bind$ax25(r1, &(0x7f0000000140)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) 14:10:14 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x13}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:14 executing program 0: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:14 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:14 executing program 4: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044944, 0x0) 14:10:14 executing program 0: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:14 executing program 3: r0 = socket(0x22, 0x6, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000000)={@ipv4={""/10, ""/2, @private}}, &(0x7f0000000040)=0x14) 14:10:14 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x14}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:14 executing program 4: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044944, 0x0) 14:10:14 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x15}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:14 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:14 executing program 0: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:14 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = socket(0x10, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000400}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="240929bd7000fedbdf253000000008000300ddca7f3716814d6baba75c8aa82233e60e2e75cdd25f34aef9", @ANYRES32=0x0, @ANYBLOB="0c009900110000007a000000060036001400000006003600240000000600360042000000060036003b000000060036002800000006003600180000000600360016000000060036003a000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008084}, 0x4) ioctl$SNDCTL_TMR_METRONOME(r1, 0x40045407) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, &(0x7f00000001c0)=0x6a38) 14:10:14 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:15 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x16}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:15 executing program 0: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:15 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) 14:10:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x7, 0x400, @l2={'eth', 0x3a, 'caif0\x00'}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x34}}, 0x40000) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:15 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) socket(0x2c, 0x2, 0x401) socket$bt_cmtp(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 14:10:15 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:15 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x17}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:15 executing program 0: socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:15 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x18}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:15 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:15 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:15 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:15 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x19}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:15 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) 14:10:15 executing program 3: r0 = socket(0xb, 0x3, 0x0) bind$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:15 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:15 executing program 0 (fault-call:1 fault-nth:0): r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:15 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x1a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:15 executing program 3: socket(0x4, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000890}, 0x20000024) socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) 14:10:15 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:15 executing program 5 (fault-call:1 fault-nth:0): r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:15 executing program 4 (fault-call:1 fault-nth:0): r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:15 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x1b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:15 executing program 2 (fault-call:10 fault-nth:0): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:15 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x488d5}, 0x1) 14:10:15 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:15 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, 0x0) 14:10:15 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:15 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x1c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:15 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00012cbd7000fcdbdf253600000008000300", @ANYRES32=r6, @ANYBLOB="0000000000000092c317b5e9632be308640000000000000000a36b27e2a8780b771c6c393d2124381f99ea6590196fa336f8edde042d8d55c99db72fa47969b4a08c780b8806f8604276e5c3ef26f2502500fda045cb74bb357e799eb1b04ad80bb8f6dba526c526373e14f78f9e1b08e6e847f852e8cb6e40fd57f545f3b637f021d3eb2ebb0bf93112562bbca18696d43b913ba07672d867dfacb728a6c815fea70b"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r7, 0x800443d2, &(0x7f0000000200)={0x6, &(0x7f0000000180)=[{@fixed}, {}, {@none}, {@fixed}, {@fixed}, {}]}) 14:10:15 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, 0x0) 14:10:15 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, 0x0) [ 2449.115088] FAULT_INJECTION: forcing a failure. [ 2449.115088] name failslab, interval 1, probability 0, space 0, times 0 14:10:15 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x1d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x1e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2449.163172] CPU: 0 PID: 7776 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2449.170994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.180347] Call Trace: [ 2449.182948] dump_stack+0x1fc/0x2ef [ 2449.186584] should_fail.cold+0xa/0xf [ 2449.190394] ? setup_fault_attr+0x200/0x200 [ 2449.194739] ? lock_acquire+0x170/0x3c0 [ 2449.198729] __should_failslab+0x115/0x180 [ 2449.202967] should_failslab+0x5/0x10 [ 2449.206771] kmem_cache_alloc_trace+0x284/0x380 [ 2449.211448] ? loop_queue_work+0x20c0/0x20c0 [ 2449.215869] loop_add+0x4e/0x8a0 [ 2449.219244] loop_control_ioctl+0x16c/0x480 [ 2449.223571] ? loop_lookup+0x1d0/0x1d0 [ 2449.227464] ? ksys_write+0x241/0x2a0 [ 2449.227478] ? loop_lookup+0x1d0/0x1d0 [ 2449.227493] do_vfs_ioctl+0xcdb/0x12e0 [ 2449.235153] ? lock_downgrade+0x720/0x720 [ 2449.235168] ? check_preemption_disabled+0x41/0x280 [ 2449.235184] ? ioctl_preallocate+0x200/0x200 [ 2449.252582] ? __fget+0x356/0x510 [ 2449.256043] ? do_dup2+0x450/0x450 [ 2449.259577] ? vfs_write+0x393/0x540 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x21}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2449.259593] ? fput+0x2b/0x190 [ 2449.259612] ksys_ioctl+0x9b/0xc0 [ 2449.269931] __x64_sys_ioctl+0x6f/0xb0 [ 2449.273847] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2449.278430] do_syscall_64+0xf9/0x620 [ 2449.282243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.287696] RIP: 0033:0x4665e9 [ 2449.290895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:16 executing program 2 (fault-call:10 fault-nth:1): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:16 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x2, 0x0) 14:10:16 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, 0x0) [ 2449.309802] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2449.309817] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2449.309823] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2449.309829] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2449.309836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2449.309843] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:16 executing program 3: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000200d7c80c3b30d1fbe388ff1702349c4fe5776c180755b7e25d6e2ab1b9111ffec2a2a0dfa9e8ff0fecee5f276d9316c1a21c7837433d19f088c314232a1754", @ANYRES16=0x0, @ANYBLOB="080027bd7000fbdbdf250300000008000100000000000c00080003000000000000000c00050021000000000000001c00078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08040100", @ANYRES32=r2, @ANYBLOB="c2ce13c5b661a40b2877382110d78563c0a22ef1683bd1d9dd7a68f23f99fb36f404201276ef"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x4010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:16 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, 0x0) 14:10:16 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, 0x0) 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x22}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:16 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5421, 0x0) [ 2449.498320] FAULT_INJECTION: forcing a failure. [ 2449.498320] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.512052] CPU: 1 PID: 7808 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2449.519863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.529211] Call Trace: [ 2449.531813] dump_stack+0x1fc/0x2ef [ 2449.535446] should_fail.cold+0xa/0xf [ 2449.539252] ? setup_fault_attr+0x200/0x200 [ 2449.539269] ? lock_acquire+0x170/0x3c0 [ 2449.547547] __should_failslab+0x115/0x180 [ 2449.551791] should_failslab+0x5/0x10 [ 2449.555594] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2449.560704] __kmalloc_node+0x38/0x70 [ 2449.564504] blk_mq_alloc_tag_set+0x330/0xa30 [ 2449.569002] loop_add+0x26d/0x8a0 [ 2449.572466] loop_control_ioctl+0x16c/0x480 [ 2449.576785] ? loop_lookup+0x1d0/0x1d0 [ 2449.580681] ? ksys_write+0x241/0x2a0 [ 2449.584484] ? loop_lookup+0x1d0/0x1d0 [ 2449.588374] do_vfs_ioctl+0xcdb/0x12e0 [ 2449.592268] ? lock_downgrade+0x720/0x720 [ 2449.596423] ? check_preemption_disabled+0x41/0x280 [ 2449.601446] ? ioctl_preallocate+0x200/0x200 [ 2449.605864] ? __fget+0x356/0x510 [ 2449.609332] ? do_dup2+0x450/0x450 [ 2449.612876] ? vfs_write+0x393/0x540 [ 2449.616592] ? fput+0x2b/0x190 [ 2449.619792] ksys_ioctl+0x9b/0xc0 [ 2449.623248] __x64_sys_ioctl+0x6f/0xb0 [ 2449.627135] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2449.631719] do_syscall_64+0xf9/0x620 [ 2449.635526] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.640721] RIP: 0033:0x4665e9 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x23}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:16 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x811) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000001ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000000240)={0x181c, r4, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x584, 0x5, 0x0, 0x1, [{0x31c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2b4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfaef}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}]}, {0x21c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x178, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x170, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8c5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x190, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x170, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x154, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}, @NL80211_PMSR_ATTR_PEERS={0x738, 0x5, 0x0, 0x1, [{0x4c4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2f7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x286}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x330, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x96}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfbff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf8f9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xad}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x372}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x6bf7aee723ddfbd5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x18, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x7c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x38}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34e}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1720}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x237}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x279}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6137}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}]}, {0x74, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x64, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x5c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xac25}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x960, 0x5, 0x0, 0x1, [{0x39c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xdb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xcd6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x298, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd244}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x45}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x384, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7ff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x72570fb3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x220, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x88, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x130, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4ff9}]}]}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x525}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x219}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2754}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x13c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa847}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbab}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}]}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x40, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x85}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8c02}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xad1e}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x5c, 0x5, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x305}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}]}]}]}]}, 0x181c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23, 0x5}}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x42}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) [ 2449.643916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.662812] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2449.662827] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2449.662834] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2449.662841] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x24}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:16 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, 0x0) 14:10:16 executing program 2 (fault-call:10 fault-nth:2): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:16 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, 0x0) 14:10:16 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5450, 0x0) [ 2449.662848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2449.662856] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x25}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:16 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, 0x0) 14:10:16 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, 0x0) 14:10:16 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5451, 0x0) 14:10:16 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, 0x0) 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x26}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2449.824516] FAULT_INJECTION: forcing a failure. [ 2449.824516] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.883973] CPU: 1 PID: 7832 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2449.891793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2449.891799] Call Trace: [ 2449.891821] dump_stack+0x1fc/0x2ef [ 2449.891841] should_fail.cold+0xa/0xf [ 2449.891861] ? setup_fault_attr+0x200/0x200 [ 2449.891877] ? lock_acquire+0x170/0x3c0 [ 2449.891897] __should_failslab+0x115/0x180 [ 2449.891915] should_failslab+0x5/0x10 [ 2449.891931] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2449.891949] __kmalloc_node+0x38/0x70 [ 2449.891967] blk_mq_alloc_tag_set+0x3c2/0xa30 [ 2449.891990] loop_add+0x26d/0x8a0 [ 2449.892009] loop_control_ioctl+0x16c/0x480 [ 2449.915633] ? loop_lookup+0x1d0/0x1d0 [ 2449.915655] ? ksys_write+0x241/0x2a0 [ 2449.923823] ? loop_lookup+0x1d0/0x1d0 [ 2449.923839] do_vfs_ioctl+0xcdb/0x12e0 [ 2449.923855] ? lock_downgrade+0x720/0x720 [ 2449.923870] ? check_preemption_disabled+0x41/0x280 [ 2449.923885] ? ioctl_preallocate+0x200/0x200 [ 2449.923901] ? __fget+0x356/0x510 [ 2449.923917] ? do_dup2+0x450/0x450 [ 2449.923929] ? vfs_write+0x393/0x540 [ 2449.923948] ? fput+0x2b/0x190 [ 2449.973348] ksys_ioctl+0x9b/0xc0 [ 2449.973364] __x64_sys_ioctl+0x6f/0xb0 [ 2449.973379] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2449.973393] do_syscall_64+0xf9/0x620 [ 2449.973412] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2449.973422] RIP: 0033:0x4665e9 14:10:16 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x54}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x800) 14:10:16 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5452, 0x0) 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x27}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2449.973436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2449.973442] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2449.973454] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2449.973462] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2449.973469] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2449.973475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2449.973482] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:16 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, 0x0) 14:10:16 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x103040, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa4, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1f, 0x7c}}}}, [@NL80211_ATTR_REKEY_DATA={0x38, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d85b3436f4444d42"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "940e9a22bb50deb2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52cdcadef7e5276074f8337041d9756b"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="422bf0ca3126e82dc96794acb54bc3f3"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6bd5e1dda930b7ca2dfff9795e54673d721aa37b4d56e1cb13303908d9a1578d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24006090}, 0x10) 14:10:16 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x5460, 0x0) 14:10:16 executing program 2 (fault-call:10 fault-nth:3): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:16 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, 0x0) 14:10:16 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x28}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:17 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, 0x0) 14:10:17 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8901, 0x0) 14:10:17 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r3, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xdd, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000c1}, 0x10) [ 2450.262791] FAULT_INJECTION: forcing a failure. [ 2450.262791] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.299177] CPU: 0 PID: 7865 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2450.307004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.316355] Call Trace: [ 2450.316377] dump_stack+0x1fc/0x2ef [ 2450.316397] should_fail.cold+0xa/0xf [ 2450.316416] ? setup_fault_attr+0x200/0x200 [ 2450.330684] ? lock_acquire+0x170/0x3c0 [ 2450.330711] __should_failslab+0x115/0x180 [ 2450.330727] should_failslab+0x5/0x10 [ 2450.330742] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2450.330758] blk_mq_init_tags+0x6a/0x2b0 [ 2450.330776] blk_mq_alloc_rq_map+0x9d/0x230 [ 2450.351866] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2450.351887] blk_mq_alloc_tag_set+0x589/0xa30 [ 2450.351907] loop_add+0x26d/0x8a0 [ 2450.351925] loop_control_ioctl+0x16c/0x480 [ 2450.372921] ? loop_lookup+0x1d0/0x1d0 [ 2450.372943] ? ksys_write+0x241/0x2a0 [ 2450.372958] ? loop_lookup+0x1d0/0x1d0 [ 2450.372971] do_vfs_ioctl+0xcdb/0x12e0 [ 2450.372988] ? lock_downgrade+0x720/0x720 [ 2450.380643] ? check_preemption_disabled+0x41/0x280 [ 2450.380660] ? ioctl_preallocate+0x200/0x200 [ 2450.380678] ? __fget+0x356/0x510 [ 2450.380700] ? do_dup2+0x450/0x450 [ 2450.380711] ? vfs_write+0x393/0x540 14:10:17 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8902, 0x0) 14:10:17 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8902, 0x0) 14:10:17 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8902, 0x0) [ 2450.380727] ? fput+0x2b/0x190 [ 2450.412655] ksys_ioctl+0x9b/0xc0 [ 2450.412695] __x64_sys_ioctl+0x6f/0xb0 [ 2450.419300] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2450.419316] do_syscall_64+0xf9/0x620 [ 2450.419339] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2450.436726] RIP: 0033:0x4665e9 [ 2450.439919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.458825] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2450.458838] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2450.458847] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2450.458855] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2450.458863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2450.458870] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 [ 2450.526439] blk-mq: reduced tag depth (128 -> 64) 14:10:17 executing program 2 (fault-call:10 fault-nth:4): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:17 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x29}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:17 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, 0x0) 14:10:17 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, 0x0) 14:10:17 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:17 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8903, 0x0) 14:10:17 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, 0x0) 14:10:17 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x2a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:17 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, 0x0) 14:10:17 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8904, 0x0) 14:10:17 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r3, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffffffc0, 0x70}}}}, [@NL80211_ATTR_KEY_SEQ={0x8, 0xa, "7b0de632"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000880) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r6, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options, @NL80211_ATTR_4ADDR={0x0, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) 14:10:17 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, 0x0) [ 2450.751743] FAULT_INJECTION: forcing a failure. [ 2450.751743] name failslab, interval 1, probability 0, space 0, times 0 [ 2450.799740] CPU: 0 PID: 7908 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2450.807558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2450.807564] Call Trace: [ 2450.807589] dump_stack+0x1fc/0x2ef [ 2450.807609] should_fail.cold+0xa/0xf [ 2450.826915] ? setup_fault_attr+0x200/0x200 [ 2450.826930] ? lock_acquire+0x170/0x3c0 [ 2450.826950] __should_failslab+0x115/0x180 [ 2450.839440] should_failslab+0x5/0x10 [ 2450.843248] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2450.848354] __kmalloc_node+0x38/0x70 [ 2450.848371] sbitmap_init_node+0x123/0x440 [ 2450.848387] sbitmap_queue_init_node+0x37/0x6c0 [ 2450.856385] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2450.856405] blk_mq_init_tags+0x10d/0x2b0 [ 2450.856424] blk_mq_alloc_rq_map+0x9d/0x230 [ 2450.874514] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2450.879029] blk_mq_alloc_tag_set+0x589/0xa30 [ 2450.883536] loop_add+0x26d/0x8a0 [ 2450.886995] loop_control_ioctl+0x16c/0x480 [ 2450.891312] ? loop_lookup+0x1d0/0x1d0 [ 2450.891332] ? ksys_write+0x241/0x2a0 [ 2450.891346] ? loop_lookup+0x1d0/0x1d0 [ 2450.891364] do_vfs_ioctl+0xcdb/0x12e0 [ 2450.906735] ? lock_downgrade+0x720/0x720 [ 2450.910865] ? check_preemption_disabled+0x41/0x280 [ 2450.915862] ? ioctl_preallocate+0x200/0x200 [ 2450.920253] ? __fget+0x356/0x510 [ 2450.923689] ? do_dup2+0x450/0x450 [ 2450.927210] ? vfs_write+0x393/0x540 [ 2450.930901] ? fput+0x2b/0x190 [ 2450.934090] ksys_ioctl+0x9b/0xc0 [ 2450.937523] __x64_sys_ioctl+0x6f/0xb0 [ 2450.941482] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2450.946047] do_syscall_64+0xf9/0x620 [ 2450.949843] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2450.955055] RIP: 0033:0x4665e9 [ 2450.958229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2450.977111] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2450.984798] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2450.992046] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2450.999294] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.006584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.013830] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 [ 2451.031618] blk-mq: reduced tag depth (128 -> 64) 14:10:17 executing program 2 (fault-call:10 fault-nth:5): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:17 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, 0x0) 14:10:17 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, 0x0) 14:10:17 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x2b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:17 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8940, 0x0) 14:10:17 executing program 3: r0 = socket(0x22, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x168, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x168}, 0x1, 0x0, 0x0, 0x20}, 0x4000801) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 14:10:17 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, 0x0) 14:10:17 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x2c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:17 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, 0x0) 14:10:17 executing program 3: r0 = socket(0x1d, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xa255d900, 0x3d}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:18 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8941, 0x0) 14:10:18 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x2d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2451.251676] FAULT_INJECTION: forcing a failure. [ 2451.251676] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.285249] CPU: 1 PID: 7934 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2451.293078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2451.302433] Call Trace: [ 2451.305024] dump_stack+0x1fc/0x2ef [ 2451.308662] should_fail.cold+0xa/0xf [ 2451.312470] ? setup_fault_attr+0x200/0x200 [ 2451.316804] ? lock_acquire+0x170/0x3c0 [ 2451.320794] __should_failslab+0x115/0x180 [ 2451.325033] should_failslab+0x5/0x10 [ 2451.328838] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2451.333951] sbitmap_queue_init_node+0x240/0x6c0 [ 2451.338718] blk_mq_init_tags+0x10d/0x2b0 [ 2451.342874] blk_mq_alloc_rq_map+0x9d/0x230 [ 2451.347210] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2451.351720] blk_mq_alloc_tag_set+0x589/0xa30 [ 2451.356224] loop_add+0x26d/0x8a0 [ 2451.359678] loop_control_ioctl+0x16c/0x480 [ 2451.359692] ? loop_lookup+0x1d0/0x1d0 [ 2451.359711] ? ksys_write+0x241/0x2a0 [ 2451.371675] ? loop_lookup+0x1d0/0x1d0 [ 2451.373558] can: request_module (can-proto-0) failed. [ 2451.375570] do_vfs_ioctl+0xcdb/0x12e0 [ 2451.375587] ? lock_downgrade+0x720/0x720 [ 2451.375605] ? check_preemption_disabled+0x41/0x280 [ 2451.393779] ? ioctl_preallocate+0x200/0x200 [ 2451.398198] ? __fget+0x356/0x510 [ 2451.401661] ? do_dup2+0x450/0x450 [ 2451.405204] ? vfs_write+0x393/0x540 [ 2451.408918] ? fput+0x2b/0x190 [ 2451.412124] ksys_ioctl+0x9b/0xc0 [ 2451.415582] __x64_sys_ioctl+0x6f/0xb0 [ 2451.419479] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2451.424069] do_syscall_64+0xf9/0x620 [ 2451.427880] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2451.431347] can: request_module (can-proto-0) failed. [ 2451.433070] RIP: 0033:0x4665e9 [ 2451.433083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.433094] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2451.468028] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2451.475280] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2451.482541] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2451.489799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 14:10:18 executing program 2 (fault-call:10 fault-nth:6): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:18 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, 0x0) 14:10:18 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x2e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:18 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x894c, 0x0) 14:10:18 executing program 3: r0 = socket(0x2b, 0x80000, 0x800006) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:18 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, 0x0) [ 2451.497054] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 [ 2451.509696] blk-mq: reduced tag depth (128 -> 64) 14:10:18 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, 0x0) 14:10:18 executing program 3: r0 = socket(0x22, 0x4, 0xe79) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20800ac}, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 14:10:18 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, 0x0) 14:10:18 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8980, 0x0) 14:10:18 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x2f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:18 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) [ 2451.726371] FAULT_INJECTION: forcing a failure. [ 2451.726371] name failslab, interval 1, probability 0, space 0, times 0 [ 2451.791389] CPU: 0 PID: 7981 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2451.799209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2451.808562] Call Trace: [ 2451.811159] dump_stack+0x1fc/0x2ef [ 2451.814795] should_fail.cold+0xa/0xf [ 2451.818599] ? setup_fault_attr+0x200/0x200 [ 2451.822922] ? lock_acquire+0x170/0x3c0 [ 2451.826904] __should_failslab+0x115/0x180 [ 2451.831132] should_failslab+0x5/0x10 [ 2451.834915] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2451.840002] sbitmap_queue_init_node+0x240/0x6c0 [ 2451.845177] blk_mq_init_tags+0x16f/0x2b0 [ 2451.849308] blk_mq_alloc_rq_map+0x9d/0x230 [ 2451.853686] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2451.858186] blk_mq_alloc_tag_set+0x589/0xa30 [ 2451.862672] loop_add+0x26d/0x8a0 [ 2451.866111] loop_control_ioctl+0x16c/0x480 [ 2451.870414] ? loop_lookup+0x1d0/0x1d0 [ 2451.874286] ? ksys_write+0x241/0x2a0 [ 2451.878076] ? loop_lookup+0x1d0/0x1d0 [ 2451.881954] do_vfs_ioctl+0xcdb/0x12e0 [ 2451.885835] ? lock_downgrade+0x720/0x720 [ 2451.889966] ? check_preemption_disabled+0x41/0x280 [ 2451.894965] ? ioctl_preallocate+0x200/0x200 [ 2451.899357] ? __fget+0x356/0x510 [ 2451.902792] ? do_dup2+0x450/0x450 [ 2451.906310] ? vfs_write+0x393/0x540 [ 2451.910008] ? fput+0x2b/0x190 [ 2451.913201] ksys_ioctl+0x9b/0xc0 [ 2451.916645] __x64_sys_ioctl+0x6f/0xb0 [ 2451.920618] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2451.925183] do_syscall_64+0xf9/0x620 [ 2451.928969] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2451.934137] RIP: 0033:0x4665e9 [ 2451.937309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2451.956237] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2451.963924] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2451.971175] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2451.978424] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 14:10:18 executing program 2 (fault-call:10 fault-nth:7): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:18 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x30}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:18 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, 0x0) 14:10:18 executing program 3: setfsgid(0x0) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:18 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8981, 0x0) 14:10:18 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, 0x0) [ 2451.985710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2451.992960] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 [ 2452.003384] blk-mq: reduced tag depth (128 -> 64) 14:10:18 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0xfffffff7, 0x73}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000084) 14:10:18 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 14:10:18 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, 0x0) 14:10:18 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8982, 0x0) 14:10:18 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x31}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2452.200908] FAULT_INJECTION: forcing a failure. [ 2452.200908] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.236223] CPU: 0 PID: 8018 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2452.244038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.244044] Call Trace: [ 2452.244071] dump_stack+0x1fc/0x2ef [ 2452.244093] should_fail.cold+0xa/0xf [ 2452.244113] ? setup_fault_attr+0x200/0x200 [ 2452.244129] ? __lockdep_init_map+0x100/0x5a0 [ 2452.244151] __should_failslab+0x115/0x180 [ 2452.244167] should_failslab+0x5/0x10 [ 2452.244183] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2452.244201] __kmalloc_node+0x38/0x70 [ 2452.256121] blk_mq_alloc_rq_map+0xdf/0x230 [ 2452.256142] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2452.298099] blk_mq_alloc_tag_set+0x589/0xa30 [ 2452.298126] loop_add+0x26d/0x8a0 [ 2452.306042] loop_control_ioctl+0x16c/0x480 [ 2452.306056] ? loop_lookup+0x1d0/0x1d0 [ 2452.306075] ? ksys_write+0x241/0x2a0 [ 2452.314246] ? loop_lookup+0x1d0/0x1d0 [ 2452.314262] do_vfs_ioctl+0xcdb/0x12e0 [ 2452.314280] ? lock_downgrade+0x720/0x720 [ 2452.321931] ? check_preemption_disabled+0x41/0x280 [ 2452.321947] ? ioctl_preallocate+0x200/0x200 [ 2452.321964] ? __fget+0x356/0x510 [ 2452.321979] ? do_dup2+0x450/0x450 [ 2452.321994] ? vfs_write+0x393/0x540 [ 2452.350053] ? fput+0x2b/0x190 [ 2452.353259] ksys_ioctl+0x9b/0xc0 [ 2452.356712] __x64_sys_ioctl+0x6f/0xb0 [ 2452.360586] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2452.365154] do_syscall_64+0xf9/0x620 [ 2452.368942] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2452.374115] RIP: 0033:0x4665e9 [ 2452.377289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:19 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x32}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2452.396172] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2452.403859] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2452.411108] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2452.418358] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.425608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2452.432857] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 [ 2452.446372] blk-mq: reduced tag depth (128 -> 64) 14:10:19 executing program 2 (fault-call:10 fault-nth:8): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:19 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, 0x0) 14:10:19 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, 0x0) 14:10:19 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8983, 0x0) 14:10:19 executing program 3: sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbcc, 0x7d}}}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="f01976"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x61}, @NL80211_ATTR_SSID={0x22, 0x34, @random="543f85845ed3cc52121f88645964458e8312be29d2909c3761c2947e0020"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000002) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 14:10:19 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x33}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:19 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) 14:10:19 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, 0x0) 14:10:19 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a0, 0x0) 14:10:19 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, 0x0) 14:10:19 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x34}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:19 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x89a1, 0x0) [ 2452.719925] FAULT_INJECTION: forcing a failure. [ 2452.719925] name failslab, interval 1, probability 0, space 0, times 0 [ 2452.742278] CPU: 1 PID: 8047 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2452.750101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2452.759459] Call Trace: [ 2452.759480] dump_stack+0x1fc/0x2ef [ 2452.759499] should_fail.cold+0xa/0xf [ 2452.765680] ? setup_fault_attr+0x200/0x200 [ 2452.765699] ? __lockdep_init_map+0x100/0x5a0 [ 2452.778276] __should_failslab+0x115/0x180 [ 2452.782521] should_failslab+0x5/0x10 [ 2452.786325] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2452.791439] __kmalloc_node+0x38/0x70 [ 2452.795248] blk_mq_alloc_rq_map+0x120/0x230 [ 2452.799678] __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2452.804183] blk_mq_alloc_tag_set+0x589/0xa30 [ 2452.808691] loop_add+0x26d/0x8a0 [ 2452.812153] loop_control_ioctl+0x16c/0x480 [ 2452.816474] ? loop_lookup+0x1d0/0x1d0 [ 2452.820367] ? rcu_nmi_exit+0xb3/0x180 [ 2452.824259] ? ksys_write+0x241/0x2a0 [ 2452.828062] ? loop_lookup+0x1d0/0x1d0 [ 2452.831947] do_vfs_ioctl+0xcdb/0x12e0 [ 2452.835834] ? lock_downgrade+0x720/0x720 [ 2452.835850] ? check_preemption_disabled+0x41/0x280 [ 2452.835866] ? ioctl_preallocate+0x200/0x200 [ 2452.844997] ? __fget+0x356/0x510 [ 2452.845013] ? do_dup2+0x450/0x450 [ 2452.845028] ? vfs_write+0x393/0x540 [ 2452.860084] ? fput+0x2b/0x190 [ 2452.863287] ksys_ioctl+0x9b/0xc0 [ 2452.866742] __x64_sys_ioctl+0x6f/0xb0 [ 2452.870635] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2452.875224] do_syscall_64+0xf9/0x620 [ 2452.879123] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2452.884302] RIP: 0033:0x4665e9 [ 2452.887483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2452.906376] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:10:19 executing program 2 (fault-call:10 fault-nth:9): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:19 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) 14:10:19 executing program 3: r0 = socket(0x11, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:19 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) 14:10:19 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x40049409, 0x0) 14:10:19 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x35}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2452.914065] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2452.921319] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2452.928569] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2452.935817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2452.943066] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 [ 2452.958693] blk-mq: reduced tag depth (128 -> 64) 14:10:19 executing program 3: socket(0x22, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000"], 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20088800}, 0x4000000) 14:10:19 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) 14:10:19 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:19 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x36}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:19 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x4020940d, 0x0) 14:10:20 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2453.168355] FAULT_INJECTION: forcing a failure. [ 2453.168355] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2453.204922] CPU: 1 PID: 8106 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2453.212741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.222091] Call Trace: [ 2453.222111] dump_stack+0x1fc/0x2ef [ 2453.222130] should_fail.cold+0xa/0xf [ 2453.222148] ? setup_fault_attr+0x200/0x200 [ 2453.222171] __alloc_pages_nodemask+0x239/0x2890 [ 2453.222186] ? kasan_kmalloc+0x139/0x160 [ 2453.222201] ? __kmalloc_node+0x4c/0x70 [ 2453.236468] ? blk_mq_alloc_rq_map+0x120/0x230 [ 2453.236481] ? __blk_mq_alloc_rq_map+0xa3/0x3b0 [ 2453.236497] ? blk_mq_alloc_tag_set+0x589/0xa30 [ 2453.263369] ? loop_add+0x26d/0x8a0 [ 2453.267003] ? loop_control_ioctl+0x16c/0x480 [ 2453.271504] ? do_vfs_ioctl+0xcdb/0x12e0 [ 2453.275571] ? do_syscall_64+0xf9/0x620 [ 2453.279546] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2453.279564] ? should_fail+0x142/0x7b0 [ 2453.288777] ? fs_reclaim_release+0xd0/0x110 [ 2453.288793] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2453.288805] ? setup_fault_attr+0x200/0x200 [ 2453.288819] ? lock_acquire+0x170/0x3c0 [ 2453.288836] ? check_preemption_disabled+0x41/0x280 [ 2453.288851] ? should_fail+0x142/0x7b0 [ 2453.288866] ? setup_fault_attr+0x200/0x200 [ 2453.288881] ? __lockdep_init_map+0x100/0x5a0 [ 2453.288893] ? find_next_bit+0x105/0x130 [ 2453.288907] ? __cpu_to_node+0x7b/0xa0 [ 2453.288922] ? blk_mq_hw_queue_to_node+0xc1/0x100 [ 2453.288941] blk_mq_alloc_rqs+0x242/0x800 [ 2453.288969] ? blk_mq_alloc_rq_map+0xaa/0x230 [ 2453.288988] __blk_mq_alloc_rq_map+0x15b/0x3b0 [ 2453.289009] blk_mq_alloc_tag_set+0x589/0xa30 [ 2453.289032] loop_add+0x26d/0x8a0 [ 2453.289051] loop_control_ioctl+0x16c/0x480 [ 2453.289065] ? loop_lookup+0x1d0/0x1d0 [ 2453.289085] ? ksys_write+0x241/0x2a0 [ 2453.289101] ? loop_lookup+0x1d0/0x1d0 [ 2453.289116] do_vfs_ioctl+0xcdb/0x12e0 [ 2453.289131] ? lock_downgrade+0x720/0x720 [ 2453.289144] ? check_preemption_disabled+0x41/0x280 [ 2453.289159] ? ioctl_preallocate+0x200/0x200 [ 2453.391671] ? __fget+0x356/0x510 [ 2453.395109] ? do_dup2+0x450/0x450 [ 2453.398631] ? vfs_write+0x393/0x540 [ 2453.402339] ? fput+0x2b/0x190 [ 2453.405522] ksys_ioctl+0x9b/0xc0 [ 2453.408967] __x64_sys_ioctl+0x6f/0xb0 [ 2453.412842] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2453.417413] do_syscall_64+0xf9/0x620 [ 2453.421211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2453.426430] RIP: 0033:0x4665e9 [ 2453.429602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.448658] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2453.456343] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2453.463591] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2453.470886] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.478132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2453.485380] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:20 executing program 2 (fault-call:10 fault-nth:10): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:20 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xe4, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb0, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa5, 0x2, "f4457027633df6fa9bb91e011b394287822dcb0611582db0f5429031cb1684166ad8254be2875b1a2294e99b50217ca42dd2ea2d44132d9619507cd6281fd6e9a0515c4ea5c2aa9c6d826411eaa43ccd64066b0f0dbe34697550f332ed0065735bcf6b8a48bf12637129fcf3b4c47dea9a042d265c69233749e06b895ded071f56904ab502cfbec2081ef2ffec2729912fd6ab73159d918da9f450ce03b74cb360"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='!7_\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25030000000c00040000100000000000000c0005000a000000000000000c000200ffffffff000000000c00040005000000000000000c00020000000080000000000c00060001000000000000002400078008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c000300ff01000000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000040) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_SOCKETS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000000) r4 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) 14:10:20 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:20 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:20 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x37}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:20 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:20 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:20 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x38}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:20 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044943, 0x0) 14:10:20 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r3, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x190}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c010) bind$ax25(r1, &(0x7f00000000c0)={{0x3, @bcast, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @bcast]}, 0x48) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000080)=0x7ff) r4 = socket(0xe, 0x80000, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) r5 = socket(0x22, 0x3, 0x282) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) 14:10:20 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) [ 2453.726796] FAULT_INJECTION: forcing a failure. [ 2453.726796] name failslab, interval 1, probability 0, space 0, times 0 [ 2453.767873] CPU: 1 PID: 8125 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2453.775707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2453.785066] Call Trace: [ 2453.787667] dump_stack+0x1fc/0x2ef [ 2453.791306] should_fail.cold+0xa/0xf [ 2453.795115] ? setup_fault_attr+0x200/0x200 [ 2453.799444] ? lock_acquire+0x170/0x3c0 [ 2453.803424] __should_failslab+0x115/0x180 [ 2453.803445] should_failslab+0x5/0x10 [ 2453.811445] kmem_cache_alloc_node+0x245/0x3b0 [ 2453.811465] blk_alloc_queue_node+0x32/0xbf0 [ 2453.811484] blk_mq_init_queue+0x44/0xa0 [ 2453.811500] loop_add+0x2cb/0x8a0 [ 2453.811517] loop_control_ioctl+0x16c/0x480 [ 2453.811530] ? loop_lookup+0x1d0/0x1d0 [ 2453.811549] ? ksys_write+0x241/0x2a0 [ 2453.839938] ? loop_lookup+0x1d0/0x1d0 [ 2453.843836] do_vfs_ioctl+0xcdb/0x12e0 [ 2453.847736] ? lock_downgrade+0x720/0x720 [ 2453.851889] ? check_preemption_disabled+0x41/0x280 [ 2453.856912] ? ioctl_preallocate+0x200/0x200 [ 2453.861330] ? __fget+0x356/0x510 [ 2453.864789] ? do_dup2+0x450/0x450 [ 2453.868368] ? vfs_write+0x393/0x540 [ 2453.872141] ? fput+0x2b/0x190 [ 2453.875317] ksys_ioctl+0x9b/0xc0 [ 2453.878750] __x64_sys_ioctl+0x6f/0xb0 [ 2453.882670] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2453.887231] do_syscall_64+0xf9/0x620 [ 2453.891018] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2453.896189] RIP: 0033:0x4665e9 [ 2453.899418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2453.918298] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2453.925987] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2453.933243] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2453.940489] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2453.947746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2453.955003] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:20 executing program 2 (fault-call:10 fault-nth:11): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:20 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:10:20 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:10:20 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x39}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:20 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:20 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x7}) 14:10:20 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:10:20 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:10:20 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, 0x0) 14:10:20 executing program 3: r0 = socket(0x22, 0x3, 0xfffffffc) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:21 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x3a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:21 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, 0x0) [ 2454.249158] FAULT_INJECTION: forcing a failure. [ 2454.249158] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.288936] CPU: 1 PID: 8200 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2454.296772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.306135] Call Trace: [ 2454.308747] dump_stack+0x1fc/0x2ef [ 2454.312388] should_fail.cold+0xa/0xf [ 2454.316196] ? setup_fault_attr+0x200/0x200 [ 2454.316211] ? lock_acquire+0x170/0x3c0 [ 2454.316230] __should_failslab+0x115/0x180 [ 2454.324494] should_failslab+0x5/0x10 [ 2454.324509] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2454.324525] __kmalloc_node+0x38/0x70 [ 2454.341419] ? mempool_free+0x370/0x370 [ 2454.345395] mempool_init_node+0x137/0x6c0 [ 2454.349643] ? mempool_alloc+0x350/0x350 [ 2454.353709] ? mempool_free+0x370/0x370 [ 2454.357687] mempool_init+0x38/0x50 [ 2454.361317] bioset_init+0x327/0x810 [ 2454.365024] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2454.369780] blk_alloc_queue_node+0x189/0xbf0 [ 2454.374271] blk_mq_init_queue+0x44/0xa0 [ 2454.378313] loop_add+0x2cb/0x8a0 [ 2454.381761] loop_control_ioctl+0x16c/0x480 [ 2454.386074] ? loop_lookup+0x1d0/0x1d0 [ 2454.389960] ? ksys_write+0x241/0x2a0 [ 2454.393754] ? loop_lookup+0x1d0/0x1d0 [ 2454.397623] do_vfs_ioctl+0xcdb/0x12e0 [ 2454.401503] ? lock_downgrade+0x720/0x720 [ 2454.405682] ? check_preemption_disabled+0x41/0x280 [ 2454.410689] ? ioctl_preallocate+0x200/0x200 [ 2454.415087] ? __fget+0x356/0x510 [ 2454.418522] ? do_dup2+0x450/0x450 [ 2454.422052] ? vfs_write+0x393/0x540 [ 2454.425756] ? fput+0x2b/0x190 [ 2454.428986] ksys_ioctl+0x9b/0xc0 [ 2454.432424] __x64_sys_ioctl+0x6f/0xb0 [ 2454.436337] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2454.440909] do_syscall_64+0xf9/0x620 [ 2454.444703] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2454.449900] RIP: 0033:0x4665e9 [ 2454.453106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.472067] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2454.479861] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2454.487118] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 14:10:21 executing program 2 (fault-call:10 fault-nth:12): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:21 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc020660b, 0x0) 14:10:21 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0045878, 0x0) 14:10:21 executing program 3: socket(0x22, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:21 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc020660b, 0x0) 14:10:21 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x3b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2454.494366] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2454.501622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.508878] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:21 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc0189436, 0x0) 14:10:21 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x3c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:21 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x430901) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket(0x2, 0xa, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000007b00000008000300", @ANYRES32=r9, @ANYBLOB="01c1fe112035382237c486ab0aca73794bafbe8cc7290af30195d2e79379a24639dab3349e8cf97fc5f00bd36f8edbd8b41727632fcfd0a5d53f4bce5348f3eed2238e31d09b10a2394de2bcfabd2222f8ab5a99e1fd5516a0b84c15e10c3f05b01a7ed8e391894aa2bc2d31dc71c29cac107f2cf284851b14368abb4e5378a1ac2b088f581d57b080b414e70b7d870879fc5bb6"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x8000) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x57}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 14:10:21 executing program 0: sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x9b620cd661eb8e13, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044942, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x13, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}}, ["", ""]}, 0x30}}, 0x28008041) [ 2454.649795] FAULT_INJECTION: forcing a failure. [ 2454.649795] name failslab, interval 1, probability 0, space 0, times 0 [ 2454.702139] CPU: 0 PID: 8218 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2454.709961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2454.719311] Call Trace: [ 2454.721908] dump_stack+0x1fc/0x2ef [ 2454.725543] should_fail.cold+0xa/0xf [ 2454.725566] ? setup_fault_attr+0x200/0x200 [ 2454.733664] ? lock_acquire+0x170/0x3c0 [ 2454.737641] ? mempool_free+0x370/0x370 [ 2454.741617] ? mempool_free+0x370/0x370 [ 2454.745591] __should_failslab+0x115/0x180 [ 2454.749826] should_failslab+0x5/0x10 [ 2454.753648] kmem_cache_alloc+0x277/0x370 [ 2454.757799] ? mempool_alloc+0x350/0x350 [ 2454.761861] ? mempool_free+0x370/0x370 [ 2454.765839] mempool_init_node+0x2d0/0x6c0 [ 2454.770083] ? mempool_alloc+0x350/0x350 [ 2454.774145] ? mempool_free+0x370/0x370 [ 2454.778123] mempool_init+0x38/0x50 [ 2454.781758] bioset_init+0x327/0x810 [ 2454.785479] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2454.790246] blk_alloc_queue_node+0x189/0xbf0 [ 2454.794752] blk_mq_init_queue+0x44/0xa0 [ 2454.798822] loop_add+0x2cb/0x8a0 14:10:21 executing program 5: r0 = socket(0x22, 0x6, 0x6) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x40, 0x200) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000180)) socket(0x1a, 0x80000, 0xfffffffb) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200100ef51aea02d92a2569edd2b4206000900000000000036f2000000000000", @ANYRES16=r2, @ANYBLOB="000425bd7000fddbdf25030000000c000500be219296e59e6387"], 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x20008004) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x191002, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r3, 0xc0046d00, &(0x7f0000000200)=0x7f) 14:10:21 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x3d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2454.802284] loop_control_ioctl+0x16c/0x480 [ 2454.806611] ? loop_lookup+0x1d0/0x1d0 [ 2454.810509] ? ksys_write+0x241/0x2a0 [ 2454.814313] ? loop_lookup+0x1d0/0x1d0 [ 2454.818209] do_vfs_ioctl+0xcdb/0x12e0 [ 2454.822104] ? lock_downgrade+0x720/0x720 [ 2454.826253] ? check_preemption_disabled+0x41/0x280 [ 2454.831274] ? ioctl_preallocate+0x200/0x200 [ 2454.835688] ? __fget+0x356/0x510 [ 2454.839137] ? do_dup2+0x450/0x450 [ 2454.842656] ? vfs_write+0x393/0x540 [ 2454.846350] ? fput+0x2b/0x190 [ 2454.849527] ksys_ioctl+0x9b/0xc0 [ 2454.852963] __x64_sys_ioctl+0x6f/0xb0 [ 2454.856874] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2454.861438] do_syscall_64+0xf9/0x620 [ 2454.865227] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2454.870399] RIP: 0033:0x4665e9 [ 2454.873579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2454.892471] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2454.900159] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2454.907408] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2454.914659] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2454.921960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2454.929225] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:21 executing program 2 (fault-call:10 fault-nth:13): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:21 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r2, 0x20, 0x70bd27, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xbfd, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20048004}, 0x4040) 14:10:21 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0xc020660b, 0x0) 14:10:21 executing program 3: r0 = socket(0x22, 0x3, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz0\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:21 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x3e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:21 executing program 0: r0 = socket(0x22, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x800, 0x51c) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000001100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)=@in, 0x80, &(0x7f0000000640)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/225, 0xe1}, {&(0x7f0000000440)=""/244, 0xf4}, {&(0x7f0000000540)=""/244, 0xf4}], 0x5, &(0x7f00000006c0)=""/91, 0x5b}, 0x40002000) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000180)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0], 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000001c0)={0x0, 0x0, 0x0, r2, 0x5}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r4, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="d9b9559004b2"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x24000001) 14:10:21 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdffd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20048090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = socket(0x2, 0xa, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x20}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0xa04e29425895e410) 14:10:21 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x41}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2455.143702] FAULT_INJECTION: forcing a failure. [ 2455.143702] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.156662] CPU: 1 PID: 8250 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2455.164471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.173828] Call Trace: [ 2455.176418] dump_stack+0x1fc/0x2ef [ 2455.180054] should_fail.cold+0xa/0xf [ 2455.183869] ? setup_fault_attr+0x200/0x200 [ 2455.188196] ? lock_acquire+0x170/0x3c0 [ 2455.192187] __should_failslab+0x115/0x180 [ 2455.196433] should_failslab+0x5/0x10 [ 2455.200236] kmem_cache_alloc+0x277/0x370 [ 2455.204390] ? mempool_alloc+0x350/0x350 [ 2455.208453] mempool_init_node+0x2d0/0x6c0 [ 2455.212698] ? mempool_alloc+0x350/0x350 [ 2455.216758] ? mempool_free+0x370/0x370 [ 2455.220731] mempool_init+0x38/0x50 [ 2455.224373] bioset_init+0x327/0x810 [ 2455.228100] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2455.232863] blk_alloc_queue_node+0x189/0xbf0 [ 2455.237373] blk_mq_init_queue+0x44/0xa0 [ 2455.241441] loop_add+0x2cb/0x8a0 [ 2455.244899] loop_control_ioctl+0x16c/0x480 [ 2455.249216] ? loop_lookup+0x1d0/0x1d0 [ 2455.253110] ? ksys_write+0x241/0x2a0 [ 2455.256916] ? loop_lookup+0x1d0/0x1d0 [ 2455.260810] do_vfs_ioctl+0xcdb/0x12e0 [ 2455.265014] ? lock_downgrade+0x720/0x720 [ 2455.265032] ? check_preemption_disabled+0x41/0x280 [ 2455.274171] ? ioctl_preallocate+0x200/0x200 [ 2455.274191] ? __fget+0x356/0x510 [ 2455.274206] ? do_dup2+0x450/0x450 [ 2455.285558] ? vfs_write+0x393/0x540 [ 2455.289277] ? fput+0x2b/0x190 14:10:21 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) bind$vsock_dgram(r2, &(0x7f0000000180)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000100)={0x7, &(0x7f0000000040)=[{}, {@fixed}, {@fixed}, {@fixed}, {@fixed}, {@fixed}, {}]}) 14:10:22 executing program 4: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r1, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0xb4, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x4, 0x102, "e50b55eafd4cba726087f39007380052"}, @NL80211_ATTR_PMKR0_NAME={0x0, 0x102, "ef41936d406ce8a275bc1fcca7c7a3a1"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "49523445a405c74f6103e8062d071ece"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b0bb72c4cf6ce682ed337d863685bc86"}, @NL80211_ATTR_PMK={0x14, 0xfe, "ac5b82621de22c7a06eeccd09a90c33c"}, @NL80211_ATTR_PMKR0_NAME={0x0, 0x102, "b153d3e907dd93da0f43ea83e236b238"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4048090}, 0x4000c90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000001140), 0xec46, 0x141000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001280)={&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000009622f7e9d7eab20ecd3b773020daab8830d14b32875fcbdf9da686ac9fd8221e47e3d6bf6b501b671bfdd33682f6940b30da197d0b383b9985834f727d3408", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf252100000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000720000000c002c80080000008100000085002a000301ab8262430800640e0000ffffffffffffa7090000080211000000200000006a4700000604ffffffffffff0200000000ffffffffffff070000000408021100000091010000050802110000005f8c000004ffffffffffff7fffffff01ffffffffffff0600000065125050505050500802110000000802110000013c0400073003000000"], 0xbc}, 0x1, 0x0, 0x0, 0x80}, 0x24044014) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r5, 0xc01064c1, &(0x7f0000000140)={r6, 0x1, r4}) 14:10:22 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x42}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2455.292485] ksys_ioctl+0x9b/0xc0 [ 2455.295957] __x64_sys_ioctl+0x6f/0xb0 14:10:22 executing program 0: r0 = socket(0x22, 0x2, 0x9) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = socket(0x3, 0x6, 0xc181) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x60}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xb5}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x81}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000845}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r7, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x64}, 0x1, 0x0, 0x0, 0x448c4}, 0x10) r8 = socket(0x5, 0x800, 0x7) sendmsg$NL80211_CMD_JOIN_OCB(r8, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001600)={&(0x7f0000001580)={0x48, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8985, 0xd}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xe3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}]}, 0x48}}, 0x20044000) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x84) [ 2455.295974] ? lockdep_hardirqs_on+0x3a8/0x5c0 14:10:22 executing program 2 (fault-call:10 fault-nth:14): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:22 executing program 3: r0 = socket(0x22, 0x3, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 2455.295989] do_syscall_64+0xf9/0x620 14:10:22 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000080)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@decrefs, @dead_binder_done], 0xda, 0x0, &(0x7f0000000140)="b68153c6518e066c2949912acb2f72f0b37dafdf646bd849a653f25a7012a59d0557c827811b0daad74f2bbbb2c9a85e94e73f4e58e9f89a47a823cd5bf15c14e6f2297d7ac1b8b158098d76b583b2812602de088847dd32bdf00c2237f1ed43ce73bc668615b0a57ee9aca246ae404ea465f3c7ed42fcc89452aa003f942f7289d8d57307175c9422b8107649d9c5325eae0e37e935bf1a16880a21e0d33452dc9a36fcb7fcb5f976758e9b54886bf9e6aca377a995291bbf7d58b9871f945aff84c6bbba46540dc1a86a8f007ee4259ed46b79ba5300027150"}) [ 2455.296007] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2455.296018] RIP: 0033:0x4665e9 14:10:22 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x43}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2455.296033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:22 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x44}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:22 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x2e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x4004086}, 0x8000) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044942, 0x0) 14:10:22 executing program 5: ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) [ 2455.296040] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2455.296053] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:10:22 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fcdbdf250500000008000100000000002400078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08010900", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x10000041) r3 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) 14:10:22 executing program 2 (fault-call:10 fault-nth:15): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 2455.296061] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2455.296069] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2455.296077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2455.296089] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 [ 2455.512171] FAULT_INJECTION: forcing a failure. [ 2455.512171] name failslab, interval 1, probability 0, space 0, times 0 14:10:22 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002ba55baac90000000000d1790c009900010000004829000068fd908e7feda5103a97c25297c4323207825889ff4d1800276ba4b06fcd477f4365c2644a4880b52a122fa12b71cd8ab7e3583b777b3e0d234df4f898c7f607a69aac3ba875670ae054ee40c84c"], 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x4000080) 14:10:22 executing program 0: r0 = socket(0x2b, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:22 executing program 5: r0 = socket(0x22, 0x3, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:22 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x45}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:22 executing program 3: r0 = socket(0x15, 0x800, 0x2c9e3ab1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x1a, 0x1, 0x20) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = socket(0x2, 0xa, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x214, r5, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x9}}}, @NL80211_ATTR_FRAME={0x1b4, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x4}, @broadcast, @device_b, @from_mac, {0x8, 0x527}}, {0x0, 0x0, 0x2, 0x0, 0x6}}, {@type10={{0x0, 0x2, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x2}, @random="ba789100e079", @broadcast, @from_mac, {0x0, 0x4}}, {0x4, 0x1, 0x2, 0x1, 0x4}}}, @ver_80211n={0x0, 0x4, 0x3, 0x3, 0x0, 0x3, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0xe5, "5980a471b872f1c0e45d4abdbdabd706aa7969801de1fed626d45fae583cb3b3ae47a2f2a95e44d9ccd7244a0fd4a162f07812d9b575cd6fb2f4d8205c30c37e9434c6cf52be8da5b2be7bc1b116f6012f278dc2c452edca78dc17c811435db389fc5c6124c66bff57c4f9a4d965d9b7f74f5cd5505f83ff4301665ac42bb56d1c429f731594e61e223c952937735e926c58a0b7ed661280dcc12d557d0021944740115c955461a717ff6fcd17600995d93c4b63975881fcfb5498fef023e8590f9db59ccfff3dd4191ab21671235afebb00071bf068d1e6b989450b78d711733fa6b6571b"}, {@broadcast, @broadcast, 0x76, "8e40fdf798c47b59f2e1338675cc9b55f2b2ab4817cac270135f2c73d3972edb096cd42ae87d2b2bc88924f10cc0d100d9dc6dc9a25f01d5697dcc2989dff23f29f0c4c95593e8c5e3805db73c5fc80c5ec3f5d6c1635ea0df25132e155140d1ebc4a6abe94acf330b8dfd3f81e72274a278fdca8b1c"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x214}, 0x1, 0x0, 0x0, 0x20000001}, 0x4804) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r2) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) [ 2455.512189] CPU: 1 PID: 8287 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2455.512198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.512202] Call Trace: [ 2455.512223] dump_stack+0x1fc/0x2ef [ 2455.512244] should_fail.cold+0xa/0xf [ 2455.512263] ? setup_fault_attr+0x200/0x200 [ 2455.512279] ? lock_acquire+0x170/0x3c0 [ 2455.512301] __should_failslab+0x115/0x180 [ 2455.512326] should_failslab+0x5/0x10 [ 2455.512342] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2455.512361] __kmalloc_node+0x38/0x70 [ 2455.512375] ? mempool_free+0x370/0x370 [ 2455.512387] mempool_init_node+0x137/0x6c0 [ 2455.512406] ? mempool_alloc+0x350/0x350 [ 2455.512417] ? mempool_free+0x370/0x370 [ 2455.512428] mempool_init+0x38/0x50 [ 2455.512444] bioset_init+0x532/0x810 [ 2455.512458] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2455.512477] blk_alloc_queue_node+0x189/0xbf0 [ 2455.512497] blk_mq_init_queue+0x44/0xa0 [ 2455.512513] loop_add+0x2cb/0x8a0 [ 2455.512534] loop_control_ioctl+0x16c/0x480 [ 2455.512549] ? loop_lookup+0x1d0/0x1d0 14:10:22 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x46}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2455.512568] ? ksys_write+0x241/0x2a0 [ 2455.512582] ? loop_lookup+0x1d0/0x1d0 [ 2455.512598] do_vfs_ioctl+0xcdb/0x12e0 [ 2455.512614] ? lock_downgrade+0x720/0x720 [ 2455.512629] ? check_preemption_disabled+0x41/0x280 [ 2455.512642] ? ioctl_preallocate+0x200/0x200 [ 2455.512659] ? __fget+0x356/0x510 [ 2455.512673] ? do_dup2+0x450/0x450 [ 2455.512682] ? vfs_write+0x393/0x540 [ 2455.512695] ? fput+0x2b/0x190 [ 2455.512713] ksys_ioctl+0x9b/0xc0 [ 2455.512727] __x64_sys_ioctl+0x6f/0xb0 14:10:22 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x5}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe04c, 0x6f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x4840}, 0x4005) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{}, {@none}, {@none}]}) [ 2455.512740] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2455.512754] do_syscall_64+0xf9/0x620 [ 2455.512771] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2455.512780] RIP: 0033:0x4665e9 [ 2455.512794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2455.512801] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2455.512813] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2455.512820] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2455.512829] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2455.512836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2455.512845] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 [ 2455.709523] FAULT_INJECTION: forcing a failure. [ 2455.709523] name failslab, interval 1, probability 0, space 0, times 0 [ 2455.825507] CPU: 0 PID: 8300 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 14:10:22 executing program 4: r0 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:22 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r0, 0x1}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000003c0), 0xc0040, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x35a}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r0}]}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}, {0x8, 0x1, r7}, {0x8, 0x1, r0}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8001}, 0x0) [ 2455.873331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2455.873338] Call Trace: [ 2455.873360] dump_stack+0x1fc/0x2ef [ 2455.873380] should_fail.cold+0xa/0xf [ 2455.873397] ? setup_fault_attr+0x200/0x200 [ 2455.873414] ? lock_acquire+0x170/0x3c0 [ 2455.888365] ? mempool_free+0x370/0x370 [ 2455.888381] ? mempool_free+0x370/0x370 [ 2455.888395] __should_failslab+0x115/0x180 [ 2455.888411] should_failslab+0x5/0x10 [ 2455.888427] kmem_cache_alloc+0x277/0x370 [ 2455.910203] ? mempool_alloc+0x350/0x350 [ 2455.910216] ? mempool_free+0x370/0x370 14:10:22 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x4d}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="cea6c181e02f"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x7}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20044814}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) [ 2455.910229] mempool_init_node+0x2d0/0x6c0 [ 2455.910249] ? mempool_alloc+0x350/0x350 [ 2455.910259] ? mempool_free+0x370/0x370 [ 2455.910269] mempool_init+0x38/0x50 [ 2455.910285] bioset_init+0x532/0x810 [ 2455.910302] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2455.996385] blk_alloc_queue_node+0x189/0xbf0 [ 2455.996408] blk_mq_init_queue+0x44/0xa0 [ 2455.996424] loop_add+0x2cb/0x8a0 [ 2455.996441] loop_control_ioctl+0x16c/0x480 [ 2456.011749] ? loop_lookup+0x1d0/0x1d0 [ 2456.011771] ? ksys_write+0x241/0x2a0 [ 2456.011791] ? loop_lookup+0x1d0/0x1d0 [ 2456.011805] do_vfs_ioctl+0xcdb/0x12e0 [ 2456.011822] ? lock_downgrade+0x720/0x720 [ 2456.011837] ? check_preemption_disabled+0x41/0x280 [ 2456.011852] ? ioctl_preallocate+0x200/0x200 [ 2456.061784] ? __fget+0x356/0x510 [ 2456.065283] ? do_dup2+0x450/0x450 [ 2456.068920] ? vfs_write+0x393/0x540 [ 2456.072641] ? fput+0x2b/0x190 [ 2456.075848] ksys_ioctl+0x9b/0xc0 [ 2456.079310] __x64_sys_ioctl+0x6f/0xb0 [ 2456.083195] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2456.083211] do_syscall_64+0xf9/0x620 [ 2456.083231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2456.083243] RIP: 0033:0x4665e9 [ 2456.083255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.083266] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.096814] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2456.096822] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 14:10:22 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x0, 0x80}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x80040}, 0x40) 14:10:22 executing program 2 (fault-call:10 fault-nth:16): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:22 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x47}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2456.096830] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.096838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.096847] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:23 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfff, 0xc}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40013}, 0x10) 14:10:23 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) [ 2456.278218] FAULT_INJECTION: forcing a failure. [ 2456.278218] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.296415] CPU: 1 PID: 8339 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2456.304236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.313593] Call Trace: [ 2456.316186] dump_stack+0x1fc/0x2ef [ 2456.319822] should_fail.cold+0xa/0xf [ 2456.323640] ? setup_fault_attr+0x200/0x200 [ 2456.327969] ? lock_acquire+0x170/0x3c0 [ 2456.331960] __should_failslab+0x115/0x180 [ 2456.336201] should_failslab+0x5/0x10 [ 2456.340002] kmem_cache_alloc+0x277/0x370 [ 2456.344156] ? mempool_alloc+0x350/0x350 [ 2456.348218] mempool_init_node+0x2d0/0x6c0 [ 2456.352454] ? mempool_alloc+0x350/0x350 [ 2456.356510] ? mempool_free+0x370/0x370 [ 2456.356523] mempool_init+0x38/0x50 [ 2456.356539] bioset_init+0x532/0x810 [ 2456.356556] ? kmem_cache_alloc_node+0x351/0x3b0 [ 2456.372563] blk_alloc_queue_node+0x189/0xbf0 [ 2456.377152] blk_mq_init_queue+0x44/0xa0 [ 2456.377168] loop_add+0x2cb/0x8a0 [ 2456.377185] loop_control_ioctl+0x16c/0x480 [ 2456.388972] ? loop_lookup+0x1d0/0x1d0 [ 2456.392861] ? ksys_write+0x241/0x2a0 [ 2456.396663] ? loop_lookup+0x1d0/0x1d0 [ 2456.400552] do_vfs_ioctl+0xcdb/0x12e0 [ 2456.404447] ? lock_downgrade+0x720/0x720 [ 2456.408609] ? check_preemption_disabled+0x41/0x280 [ 2456.413622] ? ioctl_preallocate+0x200/0x200 [ 2456.418037] ? __fget+0x356/0x510 [ 2456.421492] ? do_dup2+0x450/0x450 [ 2456.425031] ? vfs_write+0x393/0x540 [ 2456.428745] ? fput+0x2b/0x190 [ 2456.431945] ksys_ioctl+0x9b/0xc0 [ 2456.435402] __x64_sys_ioctl+0x6f/0xb0 [ 2456.439301] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2456.443884] do_syscall_64+0xf9/0x620 [ 2456.447686] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2456.452874] RIP: 0033:0x4665e9 [ 2456.456075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:23 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x48}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:23 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000003fc0)={&(0x7f0000000000), 0xc, &(0x7f0000003f80)={&(0x7f0000000040)={0x3f40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0xc8, 0x5, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x73}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9686}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x46}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bd}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0xc18, 0x5, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x48, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xa1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x382}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffb5a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1699}]}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x40}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0x328, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x26f8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x88}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4b}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xa8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8cb5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xfc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x100}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x99}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ee}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x60, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]}]}, {0x320, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x2f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x616e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x400}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf801}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xe4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}]}]}, {0x188, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xee}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x18}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25d}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}, @NL80211_PMSR_ATTR_PEERS={0x784, 0x5, 0x0, 0x1, [{0x704, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd81}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x520, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x94}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3161}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f8a}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x124, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc5b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x168, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4d57}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x7c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x34, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}]}]}, @NL80211_PMSR_ATTR_PEERS={0x914, 0x5, 0x0, 0x1, [{0x3d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x3b8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x14c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xb8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xe0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xd1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x96}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x250}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}]}, {0x164, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x37}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x31}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x315}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3e0}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20d}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x38c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffd6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5794}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xeb}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x338, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x13c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x12c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x7e0, 0x5, 0x0, 0x1, [{0x5ac, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x118, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfe01}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xaca}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x254, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x22c0}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffb4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x266}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x224, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc916}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x80, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x4}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x32}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x337}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}]}, {0x4}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}, @NL80211_PMSR_ATTR_PEERS={0xbe8, 0x5, 0x0, 0x1, [{0x3bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x35b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4a}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xfb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x398}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x189}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0xe8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x320}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7fff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x54, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x209}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x200}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x336}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x330}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}, {0x740, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x38, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x18c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x16}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd512}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x60}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2aba3482}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xce9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb8b}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xefa5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfeff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xd8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x44, 0x5, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffeff}]}]}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x370, 0x5, 0x0, 0x1, [{0x36c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x420}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000000}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x44, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x11}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x288, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xc0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x35}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0xa30, 0x5, 0x0, 0x1, [{0x478, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x544}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1f0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x65c}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xac, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x291}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x2e0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x2c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x38b0}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x795a}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3c}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1d0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa3}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x78, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1608}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5e}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x28, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}]}, 0x3f40}, 0x1, 0x0, 0x0, 0x4040}, 0x40001) syz_genetlink_get_family_id$nl80211(&(0x7f0000004000), r0) [ 2456.474974] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.482689] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2456.489958] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2456.497229] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.504504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.511773] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:23 executing program 4: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x5, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x200, 0x8, 0x4, 0x70000, 0x81, {r0, r1/1000+10000}, {0x5, 0x2, 0x5, 0x9, 0x9e, 0x6, "6f266201"}, 0x9e, 0x4, @planes=&(0x7f0000000040)={0x7fa, 0x9, @mem_offset=0x8, 0x80000001}, 0x28, 0x0, r2}) r3 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80184947, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x0, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1c}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xe6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x409}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8010) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 14:10:23 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x20, 0x131f, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x40}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8840}, 0x4020000) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, r3, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x75}}}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "061364daf2"}, @NL80211_ATTR_KEY={0x7c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "f740c1113b4bc6881c62b974da"}, @NL80211_KEY_SEQ={0x14, 0x4, "5a7291632316e7bf15181bb2be08bfa8"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "affc8b36badf9a4738781ed89c"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x12, 0x4, "f194903e70d0c4cd724a8743847b"}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x10) 14:10:23 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x368, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x338, 0x5, 0x0, 0x1, [{0x27c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x172}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6ff1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xf8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xb8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xb4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x101}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7a00}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x14, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket(0x22, 0x3, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="50020000324e2e5a252679d0922cadc5994d7f1a14ec080f5698ab692aec9474a17c1e0b013b8e8fe3246e89b17377", @ANYRES16=r4, @ANYBLOB="200004000000fddbdf25170000000c00990002000000080000000a001a0008021100000000000a00060008021100000000000a00060008021100000100000a001a000802110000000000"], 0x50}, 0x1, 0x0, 0x0, 0x8094}, 0x11) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_TMR_SELECT(r5, 0x40045408) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf250f0000000c00990059eb0000040000000400460014003400592eb8da2126016432fd310b3b9ed1c00800350002000000213643dbee1d1da3a43959a048fcc793cfcf1cc6de47df0ecd9a0fb192596ee19b91f06e08e28d793d2913bb332b2daf13f2df4086c084e3326d9fdca0a19f47"], 0x40}}, 0x400c080) accept4$ax25(r0, &(0x7f00000007c0)={{}, [@rose, @netrom, @remote, @bcast, @remote, @remote, @default, @bcast]}, &(0x7f0000000840)=0x48, 0x80800) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x80044944, 0x0) 14:10:23 executing program 2 (fault-call:10 fault-nth:17): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:23 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x49}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:23 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x764dcd7613afa3d2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x4704a51f, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48840}, 0x10) 14:10:23 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xd2a, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1ba4, 0x61}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x400c010) 14:10:23 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x4a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2456.753982] FAULT_INJECTION: forcing a failure. [ 2456.753982] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.813579] CPU: 1 PID: 8368 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2456.821404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2456.830754] Call Trace: [ 2456.833349] dump_stack+0x1fc/0x2ef [ 2456.836984] should_fail.cold+0xa/0xf [ 2456.840790] ? setup_fault_attr+0x200/0x200 [ 2456.845112] ? lock_acquire+0x170/0x3c0 [ 2456.849099] __should_failslab+0x115/0x180 [ 2456.853340] should_failslab+0x5/0x10 [ 2456.857142] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2456.862257] bdi_alloc_node+0x5c/0xd0 [ 2456.866063] blk_alloc_queue_node+0x1af/0xbf0 [ 2456.870569] blk_mq_init_queue+0x44/0xa0 [ 2456.874632] loop_add+0x2cb/0x8a0 [ 2456.878094] loop_control_ioctl+0x16c/0x480 [ 2456.882415] ? loop_lookup+0x1d0/0x1d0 [ 2456.882437] ? ksys_write+0x241/0x2a0 [ 2456.882452] ? loop_lookup+0x1d0/0x1d0 [ 2456.882466] do_vfs_ioctl+0xcdb/0x12e0 [ 2456.882481] ? lock_downgrade+0x720/0x720 [ 2456.882495] ? check_preemption_disabled+0x41/0x280 [ 2456.882509] ? ioctl_preallocate+0x200/0x200 [ 2456.911474] ? __fget+0x356/0x510 [ 2456.914934] ? do_dup2+0x450/0x450 [ 2456.918472] ? vfs_write+0x393/0x540 [ 2456.922192] ? fput+0x2b/0x190 [ 2456.925398] ksys_ioctl+0x9b/0xc0 [ 2456.928854] __x64_sys_ioctl+0x6f/0xb0 [ 2456.932767] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2456.932785] do_syscall_64+0xf9/0x620 [ 2456.941143] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2456.946325] RIP: 0033:0x4665e9 14:10:23 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x37}}}}, [@NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9ea8e26c4ecfdd4bb5edc973b422cd0d0b0bc2114dc0f63c"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x4000010) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044942, 0x0) 14:10:23 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket(0x2, 0xa, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01daa922b35e2d7a7b00000300e5b81356c7c3f20e36f6cbca4a6de49e", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3716ef41b37f2f6c76720c6385"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "929c65b248"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "3ba42ff180"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4040800) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x800, 0x21}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000105) 14:10:23 executing program 4: r0 = socket(0x21, 0x4, 0x5011) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:23 executing program 5: ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000200)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x9, 0x3, 0x0}) r1 = socket(0x22, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000040), 0x9, 0x208002) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f0000000300)={&(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[r0], 0x7, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044944, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x140, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x5, 0x22}}}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x43}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xe4, 0xac, "cb7fb2547dce9e810fc779e96faa46053303e7338640a4f310ad2c9d0066e18e8c9b8a120c15624a52a66fb62e34d05dba62e32fdb320f7846c94ae688b145b4d16fcf0b570fd9e54a393f7db74854ff5f7484b368bb12808ea51605b20a4119cb6c4391e165918323afacf5dea0776add6f103bf18bd348eaebb0cc56188c6ed025c00d01927c3aa6f50c925d83116f7debc841b854cad83b6d366e8b0e0bea5563c272f07f4e14f8e6c20edcc2b1df20d457b48c0fbc7e5a8cc954dff8e0c86c2483a5a9c9aed6d5f93a03281802d962416654624023ff4804af96409e35d4"}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x890}, 0x80) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x16) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r3, @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf25650000000800020000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 14:10:23 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x4b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:23 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x74}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44080}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r3, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xa, 0x2}}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x7}}, @NL80211_ATTR_SCAN_SSIDS={0x3c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0x20, 0x0, @random="d87ba6d2bd22c7db6f5d9be3699935b48eb94fa2f3583e4164b7802e"}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000810}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2, 0xa, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1e0, r8, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x5, 0x0, 0x6, 0x1, 0x931, 0xfffa, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x8, 0x3ff, 0x1000, 0x1, 0x4, 0x8]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x4}, {0x7, 0x6}, {0x7, 0x5}, {0x6, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x4, 0x9}, {}, {0x1, 0x4}, {0x6, 0x5}, {0x6, 0x2}, {0x5, 0x8}, {0x1, 0x1}, {}, {0x6, 0x6}, {0x1, 0x3}, {0x0, 0x1}, {0x4, 0x6}, {0x6, 0x7}, {0x5, 0x3}, {0x2, 0x6}, {0x3, 0x1}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0xa}, {0x2, 0x1}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x5}, {0x7, 0x8}, {0x3}, {0x2}, {0x7, 0x2}, {0x6, 0x1}, {0x6, 0x2}, {0x6, 0x8}, {0x2, 0x8}, {0x4, 0x3}, {0x4, 0x2}, {0x5, 0x3}, {0x0, 0x4}, {}, {0x5, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x5, 0x5}, {0x1, 0x9}, {0x1, 0x9}, {0x6, 0x8}, {0x0, 0x8}, {0x4, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x0, 0x7}, {0x3, 0x2}, {0x7, 0x3}, {0x5, 0x8}, {}, {0x2, 0x1}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x8}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0x9}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x0, 0x7}, {0x5}, {0x2, 0x1c}, {0x7, 0x8}, {0x1, 0x9}, {0x4, 0xa}, {0x4, 0x2}, {0x0, 0x3}, {0x4, 0x8}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x9}, {0x7, 0x2}, {0x2, 0x7}, {0x6, 0x8}, {0x1}, {0x3, 0x8}, {0x1, 0xa}, {0x6, 0x2}, {0x3, 0x12}, {0x4, 0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x4, 0x8}, {0x5, 0x8}, {0x6, 0x2}, {0x7, 0x3}, {0x7, 0x5}, {0x5, 0x1}, {0x4, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x1}, {0x0, 0x6}, {0x2, 0x4}, {0x6, 0x6}, {0x3, 0x3}, {0x4, 0x9}, {0x6, 0x9}, {0x6, 0x2}, {0x4, 0x9}, {0x6}, {0x7, 0x3}, {0x6, 0xa}, {0x5, 0x9}, {0x0, 0x9}, {0x5, 0x8}, {0x7, 0xa}, {0x1, 0x1}, {0x6, 0x8}, {0x6, 0x1}, {0x3, 0xa}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {0x7, 0x8}, {0x4, 0xa}, {0x2, 0x3}, {0x0, 0x4}, {0x3, 0xa}, {0x7, 0x6}, {0x4, 0x1}, {0x2, 0x2}, {0x7, 0x7}, {0x5, 0x9}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x0, 0x9, 0x8000, 0x5, 0x3f, 0x101]}}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x2, 0x5, 0x3, 0x6b0, 0x5, 0x40]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0xa}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x5}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0x1}, {0x3, 0x2}, {0x4, 0x9}, {0x7}, {0x2, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0x5}, {0x3, 0x3}, {0x4, 0x5}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x2, 0x9}, {0x7, 0x7}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x3}, {0x6, 0x7}, {0x6, 0x4}, {0x5, 0x8}]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1b, 0x4, 0x9, 0x60, 0x4, 0x1, 0x3, 0x5, 0x0, 0xc, 0x4, 0x24, 0x8b, 0x4, 0x3, 0x48, 0x12, 0x6, 0x6, 0xa, 0x3, 0x28, 0x60, 0x12, 0x1b, 0xb, 0x65, 0xc]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1, 0x4, 0x21, 0x36, 0x1, 0x2]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x6c, 0x1b, 0xc, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe86f, 0xfff9, 0x6, 0x3f, 0x200, 0x4, 0x0, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xe49d, 0x3, 0x9, 0x9, 0x7, 0x81, 0x8]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x9, 0x3, 0x3, 0x24, 0x60, 0x36, 0x30, 0x24, 0x24, 0x9, 0x2]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1b}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x800) [ 2456.946340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2456.946348] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2456.946361] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2456.946368] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2456.946380] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2456.976130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2456.976139] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:23 executing program 2 (fault-call:10 fault-nth:18): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:23 executing program 3: socket(0x5, 0x3, 0x4f) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 14:10:23 executing program 4: socket(0x22, 0x3, 0x1) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80184947, 0x0) 14:10:23 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x4c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2457.131113] FAULT_INJECTION: forcing a failure. [ 2457.131113] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.150880] CPU: 1 PID: 8390 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2457.158693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.168049] Call Trace: [ 2457.170646] dump_stack+0x1fc/0x2ef [ 2457.174285] should_fail.cold+0xa/0xf [ 2457.178092] ? setup_fault_attr+0x200/0x200 [ 2457.182419] ? lock_acquire+0x170/0x3c0 [ 2457.186402] __should_failslab+0x115/0x180 [ 2457.190644] should_failslab+0x5/0x10 [ 2457.194449] kmem_cache_alloc_trace+0x284/0x380 [ 2457.199125] wb_congested_get_create+0x180/0x3a0 [ 2457.203888] wb_init+0x4a7/0x770 [ 2457.207258] ? __raw_spin_lock_init+0x28/0x100 [ 2457.211849] bdi_init+0x29c/0x410 [ 2457.215307] bdi_alloc_node+0x76/0xd0 [ 2457.219115] blk_alloc_queue_node+0x1af/0xbf0 [ 2457.223618] blk_mq_init_queue+0x44/0xa0 [ 2457.227687] loop_add+0x2cb/0x8a0 [ 2457.231147] loop_control_ioctl+0x16c/0x480 [ 2457.231164] ? loop_lookup+0x1d0/0x1d0 [ 2457.231182] ? ksys_write+0x241/0x2a0 [ 2457.231202] ? loop_lookup+0x1d0/0x1d0 [ 2457.239379] do_vfs_ioctl+0xcdb/0x12e0 [ 2457.239397] ? lock_downgrade+0x720/0x720 [ 2457.239412] ? check_preemption_disabled+0x41/0x280 [ 2457.239428] ? ioctl_preallocate+0x200/0x200 [ 2457.264479] ? __fget+0x356/0x510 [ 2457.267941] ? do_dup2+0x450/0x450 [ 2457.271488] ? vfs_write+0x393/0x540 [ 2457.275224] ? fput+0x2b/0x190 [ 2457.275247] ksys_ioctl+0x9b/0xc0 [ 2457.275262] __x64_sys_ioctl+0x6f/0xb0 [ 2457.275280] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2457.290338] do_syscall_64+0xf9/0x620 [ 2457.294147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2457.299342] RIP: 0033:0x4665e9 [ 2457.302540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.321443] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:10:23 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000000)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:24 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x4d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:24 executing program 0: r0 = socket(0x22, 0x3, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r1, 0x1f, 0xff3}) 14:10:24 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x4e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2457.329165] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2457.336447] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2457.343713] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.350983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.358255] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:24 executing program 5: r0 = socket(0x2, 0xa, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket(0x2, 0xa, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xf15, 0x27}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @random="1d67b7ca42bd"}]}, 0x34}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x5a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x20000800) r12 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x80044944, 0x0) 14:10:24 executing program 2 (fault-call:10 fault-nth:19): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:24 executing program 0: r0 = socket(0x26, 0x5, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:24 executing program 4: socket(0x22, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80184947, 0x0) 14:10:24 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x4f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:24 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) 14:10:24 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x3a}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x2, 0xa, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r9, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xc4, r8, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xd}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ab16e72e2435c66c82c660d819d864e375d4e60bfabef43a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f045b2108525c6840ada00f769eae0a9e7a02f4258c61be2"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x8000000) [ 2457.525612] FAULT_INJECTION: forcing a failure. [ 2457.525612] name failslab, interval 1, probability 0, space 0, times 0 [ 2457.550132] CPU: 1 PID: 8424 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2457.557957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2457.567305] Call Trace: [ 2457.569892] dump_stack+0x1fc/0x2ef [ 2457.569914] should_fail.cold+0xa/0xf [ 2457.569930] ? setup_fault_attr+0x200/0x200 [ 2457.569944] ? lock_acquire+0x170/0x3c0 [ 2457.569965] __should_failslab+0x115/0x180 [ 2457.569982] should_failslab+0x5/0x10 [ 2457.569996] kmem_cache_alloc_trace+0x284/0x380 [ 2457.570012] blk_alloc_queue_stats+0x3c/0x100 [ 2457.581716] blk_alloc_queue_node+0x1eb/0xbf0 [ 2457.581739] blk_mq_init_queue+0x44/0xa0 [ 2457.581753] loop_add+0x2cb/0x8a0 [ 2457.581771] loop_control_ioctl+0x16c/0x480 [ 2457.581785] ? loop_lookup+0x1d0/0x1d0 [ 2457.581803] ? ksys_write+0x241/0x2a0 [ 2457.581817] ? loop_lookup+0x1d0/0x1d0 [ 2457.581831] do_vfs_ioctl+0xcdb/0x12e0 [ 2457.581846] ? lock_downgrade+0x720/0x720 [ 2457.581863] ? check_preemption_disabled+0x41/0x280 [ 2457.638713] ? ioctl_preallocate+0x200/0x200 [ 2457.638732] ? __fget+0x356/0x510 [ 2457.638747] ? do_dup2+0x450/0x450 [ 2457.655105] ? vfs_write+0x393/0x540 [ 2457.658826] ? fput+0x2b/0x190 [ 2457.662030] ksys_ioctl+0x9b/0xc0 [ 2457.665489] __x64_sys_ioctl+0x6f/0xb0 [ 2457.669382] ? lockdep_hardirqs_on+0x3a8/0x5c0 14:10:24 executing program 3: r0 = socket(0x8, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) accept$ax25(r1, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @null, @default, @default, @null, @netrom, @netrom, @rose]}, &(0x7f0000000200)=0x48) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000000400)={&(0x7f0000000340)=[r2, r2], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x100, 0x2, 0x2, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000380)={&(0x7f00000004c0)=[0x0, r2, 0x0, 0x0], &(0x7f0000000440)=[0x0, r3, r3], 0x4, 0x1}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_init_net_socket$ax25(0x3, 0x2, 0xc3) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000240)={@mcast1}, &(0x7f0000000280)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_HE_BSS_COLOR={0x38, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3a}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x23}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1b}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}, @NL80211_ATTR_SMPS_MODE={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000008}, 0x400c020) 14:10:24 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) [ 2457.673974] do_syscall_64+0xf9/0x620 [ 2457.677785] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2457.682970] RIP: 0033:0x4665e9 [ 2457.686158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2457.705057] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2457.705071] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 14:10:24 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000140)={@any, 0x7, 0x4, 0x1}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bf95bc3a635b2ae416424346bf157f5863f9824e498691c4b1951518bae42b07937ee82f1943137dd58039fadd1ca6e58a7ecdcd369221017e44cc0c37a307fbabd3cdb287b0d85b8ff66b2f75122deefa237e8b7159c59b5eb7f19ca7cf42", @ANYRES16=0x0, @ANYBLOB="a10a2cbd7000fbdbdf256c0000000c00990000008000150000000500180104000000080026008c1400000800270001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004010}, 0x4000041) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000440)=0x6) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r1}, {0x8, 0x1, r1}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xcf65}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffff00}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xcf}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x6d}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) 14:10:24 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x50}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2457.705080] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2457.705088] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2457.705095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2457.705102] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:24 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$SNDCTL_SYNTH_INFO(r0, 0xc08c5102, &(0x7f0000000000)={"dc94d8aa1caa28a4346774e0aaeb2f139a9dd8c89f2ff1a2637c77b73741", 0x2, 0x1, 0x1, 0x6, 0x0, 0x8100000, 0x5, 0x1, [0x1, 0xfffffffe, 0x7, 0x1, 0xf481, 0x2, 0x6, 0x1, 0xfffffff7, 0x5, 0x7, 0x6, 0x8, 0x0, 0x8f, 0x6, 0x1, 0x1000, 0x7]}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000001c0)) r3 = socket(0x22, 0x3, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80044944, 0x0) 14:10:24 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x51}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:24 executing program 2 (fault-call:10 fault-nth:20): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:24 executing program 0: r0 = socket(0x22, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x4, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 14:10:24 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x4b4999fe9cac1e77, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c642c9738c51"}]}, 0x44}, 0x1, 0x0, 0x0, 0x8011}, 0x40) 14:10:24 executing program 4: r0 = socket(0x22, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0736bac14b571a7}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff030000", @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf25150000000a00060008021100000000000a001a0008021100000000000a001a0008021100000100000a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x11) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xecd3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@private0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001900)={'vxcan0\x00', 0x0}) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000001b80)={@mcast1, 0x0}, &(0x7f0000001bc0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c00)={0x180, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x180}}, 0x20008000) 14:10:24 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x52}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:24 executing program 5: r0 = socket(0x4, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:24 executing program 4: socket$inet6(0xa, 0x3, 0x5) r0 = socket(0x22, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 14:10:24 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 14:10:24 executing program 0: r0 = socket(0x26, 0x3, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4c050) ioctl$SNDCTL_SEQ_RESET(0xffffffffffffffff, 0x5100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:24 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = socket(0x27, 0x7323a1626fb18edc, 0x5) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000086e94b3e0b7f0985f76516e9bb91da1fe812de9ef57b5955877349d929f90b0d55a7354b9a280de0a58dce59ca6158e8d85fb0152d69659d240b9a7c676e3a2d2089c4c85aa5729c9a421c0a06b2d7b11dc2360ba128d70700e4d096d75cb726fb0c807fd299ea5291ef7af36e0d2da7af8f7e2bb1045b8cc84300db6058db80b4d665cfd53dbd38b29b", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25060000000c009900030000002700000008000500000000000500530001000000"], 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) 14:10:24 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x53}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2458.043764] FAULT_INJECTION: forcing a failure. [ 2458.043764] name failslab, interval 1, probability 0, space 0, times 0 14:10:24 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}}, 0x4005) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}}, 0x40005) [ 2458.095635] CPU: 0 PID: 8479 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2458.103463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.112809] Call Trace: [ 2458.112832] dump_stack+0x1fc/0x2ef [ 2458.112851] should_fail.cold+0xa/0xf [ 2458.112868] ? setup_fault_attr+0x200/0x200 [ 2458.119063] ? lock_acquire+0x170/0x3c0 [ 2458.131200] __should_failslab+0x115/0x180 [ 2458.135443] should_failslab+0x5/0x10 [ 2458.139249] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2458.144362] blkg_alloc+0x92/0x630 [ 2458.147910] blkcg_init_queue+0x24/0x540 [ 2458.151983] blk_alloc_queue_node+0x7d0/0xbf0 [ 2458.156487] blk_mq_init_queue+0x44/0xa0 [ 2458.160553] loop_add+0x2cb/0x8a0 [ 2458.164014] loop_control_ioctl+0x16c/0x480 [ 2458.168339] ? loop_lookup+0x1d0/0x1d0 [ 2458.172235] ? ksys_write+0x241/0x2a0 [ 2458.176036] ? loop_lookup+0x1d0/0x1d0 [ 2458.176052] do_vfs_ioctl+0xcdb/0x12e0 [ 2458.176069] ? lock_downgrade+0x720/0x720 [ 2458.183814] ? check_preemption_disabled+0x41/0x280 [ 2458.183829] ? ioctl_preallocate+0x200/0x200 [ 2458.183846] ? __fget+0x356/0x510 [ 2458.200812] ? do_dup2+0x450/0x450 [ 2458.204354] ? vfs_write+0x393/0x540 [ 2458.208070] ? fput+0x2b/0x190 [ 2458.211283] ksys_ioctl+0x9b/0xc0 [ 2458.214734] __x64_sys_ioctl+0x6f/0xb0 [ 2458.218603] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2458.223166] do_syscall_64+0xf9/0x620 [ 2458.226954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2458.232120] RIP: 0033:0x4665e9 [ 2458.235295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.254288] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.261981] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2458.269230] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2458.276478] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.283728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:10:25 executing program 2 (fault-call:10 fault-nth:21): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:25 executing program 5: ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000000)=0x1f) r0 = socket(0x5, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:25 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x80) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf83, 0x79}}}}}, 0x20}}, 0x10) 14:10:25 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x54}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:25 executing program 3: r0 = socket(0x22, 0x80000, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 2458.290977] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:25 executing program 4: r0 = socket(0x2b, 0x5, 0x1fffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x900, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x82}, 0xd0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x23}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4) 14:10:25 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x55}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2458.454460] FAULT_INJECTION: forcing a failure. [ 2458.454460] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.476118] CPU: 1 PID: 8511 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2458.483934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.493287] Call Trace: [ 2458.495887] dump_stack+0x1fc/0x2ef [ 2458.499525] should_fail.cold+0xa/0xf [ 2458.503331] ? setup_fault_attr+0x200/0x200 [ 2458.507656] ? lock_acquire+0x170/0x3c0 [ 2458.511644] __should_failslab+0x115/0x180 [ 2458.515891] should_failslab+0x5/0x10 [ 2458.519697] kmem_cache_alloc_trace+0x284/0x380 [ 2458.524369] blk_iolatency_init+0x47/0x2d0 [ 2458.528616] blkcg_init_queue+0x1c1/0x540 [ 2458.532771] blk_alloc_queue_node+0x7d0/0xbf0 [ 2458.532794] blk_mq_init_queue+0x44/0xa0 [ 2458.532809] loop_add+0x2cb/0x8a0 [ 2458.532826] loop_control_ioctl+0x16c/0x480 [ 2458.549225] ? loop_lookup+0x1d0/0x1d0 [ 2458.549247] ? ksys_write+0x241/0x2a0 [ 2458.549262] ? loop_lookup+0x1d0/0x1d0 [ 2458.549278] do_vfs_ioctl+0xcdb/0x12e0 [ 2458.564687] ? lock_downgrade+0x720/0x720 [ 2458.568843] ? check_preemption_disabled+0x41/0x280 [ 2458.573870] ? ioctl_preallocate+0x200/0x200 [ 2458.578294] ? __fget+0x356/0x510 [ 2458.581754] ? do_dup2+0x450/0x450 [ 2458.585292] ? vfs_write+0x393/0x540 [ 2458.589013] ? fput+0x2b/0x190 [ 2458.592223] ksys_ioctl+0x9b/0xc0 [ 2458.595679] __x64_sys_ioctl+0x6f/0xb0 [ 2458.599569] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2458.604153] do_syscall_64+0xf9/0x620 [ 2458.607965] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2458.613153] RIP: 0033:0x4665e9 [ 2458.616347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2458.635252] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2458.642970] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2458.650249] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 14:10:25 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000840)={&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/252, 0xfc}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/244, 0xf4}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)=""/76, 0x4c}], 0xa, &(0x7f0000000740)=""/217, 0xd9}, 0x2000) 14:10:25 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400200, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x40040}, 0x800) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r3 = syz_open_dev$vcsu(&(0x7f0000000300), 0x6, 0x1) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0x60, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x6, 0x6, 0xbec5, 0x80000000}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2404c040}, 0x1) socket(0x4, 0x800, 0x3) 14:10:25 executing program 0: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @null}, [@default, @bcast, @default, @bcast, @default, @default, @remote, @netrom]}, &(0x7f00000005c0)=0x48) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000127bd7000fddbdf25010000000000000007410000004c001800000005657468000c0b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7f}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x841) syz_open_dev$media(&(0x7f00000003c0), 0x7, 0x511440) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r2, 0x300, 0x70bd27, 0x25dfdbff, {{}, {}, {0x18, 0x18, {0x7, @bearer=@l2={'ib', 0x3a, 'bond_slave_1\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x200440d4}, 0x5) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf250700000014000180080003000000000008000100", @ANYRES32=r4, @ANYBLOB="340001801400020076657468305f6d616376746170000000140002006970366772657461703000000000000008000100", @ANYRES32=0x0, @ANYBLOB="58000180140002007369743000000000000000000000000014000200626f6e6430000000000000000000000008000300020000001400020065727370616e3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB='\b\x00#\b', @ANYRES32=0x0, @ANYBLOB="2c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000"], 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) r5 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x80044942, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000980)={0x98, 0x0, &(0x7f00000008c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000640)={@fd={0x66642a85, 0x0, r6}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/45, 0x2d, 0x2, 0x34}}, &(0x7f00000006c0)={0x0, 0x18, 0x30}}, 0x400}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/199, 0xc7, 0x1, 0x6}, @flat=@handle={0x73682a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000880)={0x0, 0x28, 0x40}}, 0x40}], 0x1000, 0x0, &(0x7f0000000b40)="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"}) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000500)={0x0, 0x1ff, 0x7}) 14:10:25 executing program 5: socket(0x22, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:25 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x56}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2458.657523] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2458.664790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2458.664799] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:25 executing program 2 (fault-call:10 fault-nth:22): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:25 executing program 5: r0 = socket(0x22, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x201004}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:25 executing program 0: r0 = socket(0x2, 0xa, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x60, r1, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xa1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7fffffff, 0x9}}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x6}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x40040}, 0x800) r4 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x80044942, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="0500f600050000000a00f5007ebb21bb7f5b00000800dc00eb0e000008007700010000000600f7000a0100000a000600ffffff000002020202020200000d000000265c0dfe7f2440e8a10000000600980055280000"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) socket$l2tp6(0xa, 0x2, 0x73) 14:10:25 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x57}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:25 executing program 4: r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) r2 = socket(0x22, 0xd, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x80184947, 0x0) 14:10:25 executing program 4: r0 = socket(0x22, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:25 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x68, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0xfffffffa, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}}, 0x4040810) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r6 = socket(0x2, 0xa, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20008080) r10 = socket(0x22, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, 0x0) 14:10:25 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x58}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:25 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000000)=[{}, {@fixed}, {@fixed}, {@fixed}, {@fixed}, {@fixed}, {}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:25 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fcdbdf25010000000000000002410000001800136574683a76657468305f746f5f627269646765002a50ab136adefe954a35700b2035e1d6170303a75ef44a6edacdba287374f32162c4b29a81471956eadebb5cd63a37fd0670960a2d94f1422a62a5257bbb60a6e71856b01943c9312c953858127d88b05f86996e67f662d91576bf015552d280803cbc3903e774e446eb"], 0x34}, 0x1, 0x0, 0x0, 0x6004c895}, 0x4) [ 2458.927027] FAULT_INJECTION: forcing a failure. [ 2458.927027] name failslab, interval 1, probability 0, space 0, times 0 [ 2458.962825] CPU: 0 PID: 8552 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2458.970650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2458.980008] Call Trace: [ 2458.982608] dump_stack+0x1fc/0x2ef [ 2458.986238] should_fail.cold+0xa/0xf [ 2458.986255] ? setup_fault_attr+0x200/0x200 [ 2458.986272] ? lock_acquire+0x170/0x3c0 [ 2458.994363] __should_failslab+0x115/0x180 [ 2458.994381] should_failslab+0x5/0x10 [ 2459.006353] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2459.011458] ? iolatency_pd_init+0x6f0/0x6f0 [ 2459.015875] iolatency_pd_alloc+0x6e/0x120 [ 2459.020120] blkcg_activate_policy+0x120/0x5d0 [ 2459.024708] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2459.029732] blk_iolatency_init+0x123/0x2d0 [ 2459.034061] blkcg_init_queue+0x1c1/0x540 [ 2459.038222] blk_alloc_queue_node+0x7d0/0xbf0 [ 2459.042724] blk_mq_init_queue+0x44/0xa0 [ 2459.042739] loop_add+0x2cb/0x8a0 [ 2459.042756] loop_control_ioctl+0x16c/0x480 [ 2459.042771] ? loop_lookup+0x1d0/0x1d0 [ 2459.050259] ? ksys_write+0x241/0x2a0 [ 2459.050275] ? loop_lookup+0x1d0/0x1d0 [ 2459.050290] do_vfs_ioctl+0xcdb/0x12e0 [ 2459.050305] ? lock_downgrade+0x720/0x720 14:10:25 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x55, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2e0db64d39e1"}]}, 0x34}, 0x1, 0x0, 0x0, 0x30000000}, 0x800) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x74, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x400c000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) [ 2459.050325] ? check_preemption_disabled+0x41/0x280 [ 2459.079163] ? ioctl_preallocate+0x200/0x200 [ 2459.083585] ? __fget+0x356/0x510 [ 2459.087054] ? do_dup2+0x450/0x450 [ 2459.090775] ? vfs_write+0x393/0x540 [ 2459.094493] ? fput+0x2b/0x190 [ 2459.097688] ksys_ioctl+0x9b/0xc0 [ 2459.101135] __x64_sys_ioctl+0x6f/0xb0 [ 2459.105006] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2459.109579] do_syscall_64+0xf9/0x620 [ 2459.113461] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2459.118630] RIP: 0033:0x4665e9 [ 2459.121804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.140750] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.148456] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2459.155726] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2459.162980] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.170253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:10:25 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket(0x2, 0xa, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) [ 2459.177511] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:26 executing program 2 (fault-call:10 fault-nth:23): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:26 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x59}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:26 executing program 3: syz_init_net_socket$ax25(0x3, 0x0, 0x1) socket(0x22, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$vcsu(&(0x7f0000000000), 0x32, 0x400) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="f648edba", @ANYRES16=0x0, @ANYBLOB="00082abd7000ffdbdf250100000000000000024100000010001369623a776c616e3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) 14:10:26 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_START_P2P_DEVICE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000044}, 0x4004) 14:10:26 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf0, r2, 0x401, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1ff, 0x6a}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x51}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ee}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x57}, @NL80211_ATTR_CSA_IES={0x4c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x1ff, 0x6, 0x6, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x4}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x1, 0xffc1, 0x1, 0x4, 0x4, 0x5, 0x0, 0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x2, 0x69]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x3]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x6ae, 0x3, 0x1, 0x3f, 0x8, 0x6, 0x7f, 0x4]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x4a045) 14:10:26 executing program 0: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000140)={r1}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) accept$ax25(r0, &(0x7f0000000000)={{0x3, @default}, [@null, @remote, @null, @null, @null, @null, @rose, @default]}, &(0x7f0000000080)=0xfffffffffffffcca) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x806) r3 = socket(0xf, 0x1, 0x3a) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$L2TP_CMD_SESSION_CREATE(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r3) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000404}, 0x7, &(0x7f0000000480)={&(0x7f0000000440)={0xfffffffffffffefc, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8854}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x80044942, 0x0) 14:10:26 executing program 5: r0 = socket(0x22, 0x3, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) [ 2459.413823] FAULT_INJECTION: forcing a failure. [ 2459.413823] name failslab, interval 1, probability 0, space 0, times 0 [ 2459.425315] CPU: 1 PID: 8586 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2459.433150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2459.442509] Call Trace: [ 2459.445110] dump_stack+0x1fc/0x2ef [ 2459.448759] should_fail.cold+0xa/0xf [ 2459.452575] ? setup_fault_attr+0x200/0x200 [ 2459.456906] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2459.461923] __should_failslab+0x115/0x180 [ 2459.461952] should_failslab+0x5/0x10 [ 2459.461966] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 2459.461986] iolatency_pd_alloc+0x6e/0x120 [ 2459.462000] ? iolatency_pd_init+0x6f0/0x6f0 [ 2459.462013] blkcg_activate_policy+0x249/0x5d0 [ 2459.462037] blk_iolatency_init+0x123/0x2d0 [ 2459.462052] blkcg_init_queue+0x1c1/0x540 [ 2459.462067] blk_alloc_queue_node+0x7d0/0xbf0 [ 2459.462086] blk_mq_init_queue+0x44/0xa0 [ 2459.505466] loop_add+0x2cb/0x8a0 [ 2459.508930] loop_control_ioctl+0x16c/0x480 [ 2459.513261] ? loop_lookup+0x1d0/0x1d0 [ 2459.517159] ? ksys_write+0x241/0x2a0 [ 2459.520967] ? loop_lookup+0x1d0/0x1d0 [ 2459.524853] do_vfs_ioctl+0xcdb/0x12e0 [ 2459.524870] ? lock_downgrade+0x720/0x720 [ 2459.524888] ? check_preemption_disabled+0x41/0x280 [ 2459.537906] ? ioctl_preallocate+0x200/0x200 [ 2459.542319] ? __fget+0x356/0x510 [ 2459.545802] ? do_dup2+0x450/0x450 [ 2459.549341] ? vfs_write+0x393/0x540 [ 2459.553058] ? fput+0x2b/0x190 [ 2459.556260] ksys_ioctl+0x9b/0xc0 [ 2459.559720] __x64_sys_ioctl+0x6f/0xb0 [ 2459.563615] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2459.568201] do_syscall_64+0xf9/0x620 [ 2459.572012] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2459.577205] RIP: 0033:0x4665e9 [ 2459.580397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2459.599298] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2459.607009] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 14:10:26 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x3}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x60) 14:10:26 executing program 0: socket(0x8, 0x800, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:26 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x28000) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000006940)=0xee) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000007b00000008000304", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000006900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x204d1506}, 0xc, &(0x7f00000068c0)={&(0x7f0000013900)={0x6730, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xd0}, @NL80211_ATTR_CSA_IES={0x2c, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x5, 0x3, 0xfff8]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xa, 0xbb, [0x1, 0xffc0, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x6, 0x9, 0x5, 0x81, 0x4, 0xfffb]}]}, @NL80211_ATTR_CSA_IES={0x62d8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0xc73f, 0x7, 0x7fff, 0x1]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0xbc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xb2, 0x3, "88028dee424745489122e0e73d23913c197cca7dc938395ee7bfe48948a09165f4bedf6659a0b538fa98af08f5c49f934e5db2a35a424ac24cf0330c9cde572f1af6d2fd9bcfdeb0f57b94aed898f1ed84bd0a222dfba24557a5c288e2ff04ed138997dd2c2c7b85f1107acaf3476fed56256347128035a380c4fc3f2ae648f1052b7e647dd0b4a176c8858e989111284717cc877012a5987e5591c7052c332724b219f5da089088893c7bfeb087"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0xa8, 0x7f, [@sec_chan_ofs={0x3e, 0x1, 0x3}, @random_vendor={0xdd, 0x24, "b6620258e8c4b2e9b8df3551156a9469eae2f06bfcf6e6d3fdfb91c3cfc90f1397f7edfc"}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x5, 0x49}}, @random_vendor={0xdd, 0x17, "9e628130435b370249b14fcabf69fda17a86ebc7ccd9df"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x30, 0x20}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @link_id={0x65, 0x12, {@random="63ea4af1668e"}}, @sec_chan_ofs={0x3e, 0x1}, @mic={0x8c, 0x10, {0x8f1, "25f36e23b996", @short="313a3babc9815072"}}, @prep={0x83, 0x25, @ext={{}, 0x9, 0x94, @broadcast, 0x1, @device_a, 0x0, 0x9, @device_b, 0x4}}]}, @NL80211_ATTR_IE={0x4b, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x40}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x7c, 0x8}}, @measure_req={0x26, 0x1f, {0x0, 0x7, 0x1f, "c89a905387f4372bef56bc9eac8bf12c6d8597b5430e1086cd1d2186"}}, @random_vendor={0xdd, 0x12, "854aac649e22e323bb77fc8f833a96994791"}]}, @NL80211_ATTR_BEACON_TAIL={0x18, 0xf, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x112c, 0x80, [@ssid, @measure_req={0x26, 0x1003, {0x1, 0x8, 0x1, "27cdd3c2678230c4ffe9ad8ef463d42d1330945638f87e31e6621f664c752b0df2ea1a2c1d00627f5d380e2df883b5f7f5b20b8e5522c95b3877033d2f6de66af36be88a7685360fe23efbd06cf9216242a9b00b2cdbd2cbaa2c80087a60706f9ffd5cbd0e97d9bcd52a543149200e8d488983dbe96edb1ec27bde5b40d9d286b45f3e7cb414a0db8220bec4f5ec669352463182a4395c5dcce14d4d6acc77aee18219ea9119c3860edb978ad834cbbcd05597813fa36019ee6f4a61cd11bfacbc88e34fdee6659dbb7d8d9e631f1200b15601d7c6e5bb9e5724734bbea820888197603a35a8e5c2297fa98a5ea7cb24dc294461e81b158be19b743788aede2074324b58f529fc30818728bd90b072f19cf44fe5195c5e29f0c34e827b7683227ebf01d573ce4166c0934424eeca74fe01eff68af5a311854e3172144e4e6f4481f068c9b248f2fff621e1cb90fac7db5e66eb1e425b8bbdc85c5fc85ad64fc3fec195f1c5aefb8f091a3811dd5ed318533df333bca2aa20647434e0159682657b6925d0075ac6df1f4d733faa6afe187cd0b20a1b3f895ae821517d398fadbfd1829fe212c62356e5f165bfd200efad2f4241f52369d8c64f61c569cb0f3ae71ffb549f69d8a5d7dd69735314c3f0dd9fcf5602fba9097f8453cbbed638a67c535878c702221cb20b302163a4b9b154d7d8ea3a50842bdcb4a748fbedd041fdbb05596f85b88d32537c2cc7bf7ce50a0fcbeeea05811a299d061edd019fc1f9beba15d5680192e8ae3a6fb2219d59a6def5bb9058ad64daad527c49a44e7b6aa902d76a92cb811594fbf94b7df1d49f2f43ed67392605829f8fabc41ace8deea9322852a173208aa775eb532b2f0462f49318ceea43e0e1f129808587096bc6036e6a10331e21085872a22d63ca8e781787f77bf3d1b6fe56228aa2ac91d5f283645b288f514f6c98e3f2bd775bf1ef69818eccbde492cd8365f9df1f42708faa8bff4f8dfd25aef0a4930e8ad99d8370a3d73d0e45f76753bbc5b42de74aa43cde4b0a169c858b9f4317c1aa3ccbf8c285db1c015f7fe994587d8b301b6892d7f1c37c54130b39b74b312030b98d115352869812e5d17ba29dddf9d97e29a293f31bcdd16b1ed6a72aa482fd13a0724fbf91dbbb239fe90d22852e5b4126da3e3e30f1383e708e5956dcdbf16f725794ee63c085a75663b0083381f95c1249d17b9be3903556860ac74d3c748cbf2ae2f81742afff9d104ef6f866c9af528221f6688b9c2caaa175364e6e4ffb076db5faf85fb445a36f3aca86f07bd20f10687f50aac3e6d0ad2037ee1b9d746c33586e829e831b0f17c9f8ab4c94c61ef0b1ff73537bb8749ce7bb77d63df35bc4cd9ebebbf2381d89222485a8a40d3e19ec9674de98d42416b4c6fb6f1e2bffc675eee96749a0f76dacf0c0515157fc9d7b6267ede324b664daf917508c20c897d418e7e6e52cda5b9b7cb5fc306aa0ad0da7f1f070b8bdafe515f1f2bcc95cc971e9f61677daeaa32973e97bbaa38ff4cac78794fdd8d6aa1a2e8529e70c96fdb328788176641a2435a152caac336c2d5ded5de97912d9aadfddd0f2fedf662214c065a164ab5ff48c28a44edc35857de4f8ce7f4341e84c4abea9190323553078dd86c139010657f4f17ff2bdca66b1708d648b2b355a386b341504e14f723e5356e789d0c969703ccbfc08e92a63166681c12412a3a6b78db44cd77c98291383cace5e975b9a65c66840fee0a9ba5e3337aff2da144176fbc551e872338656a0e41168af4ed27b393f69a700f31d822ad11778b9990d90509fae37ac4247651e092f24d275f239cad4d83792fdaf7323d36874e40bdbca002e8b40d6cded1150e4e4ff35681f116baaca1ed9076e98a7bcf30cb3fc6689e6413593b8869c5279a5e488f47dc16a0298bab645509e6def76a5cc94829ed27067c282833945bf80e48670cf4b8e7b47bdd6a9712881fa152f8d360c8382061f31aba1617da8d43c75d48aa3e22bf56ed0ec045a29fe936fa9cebfffaa9060aed0cd70622f22fba0d34eea3281980b409eb50f61f49843b9ef3977bf274f73378a087195a954450f7ec37023afb4f5ad851a1586ce1a4a09ec566a8a41fd0f9b14d790f9e81770582c9763377e847b4182b5cdbb8143eed6f18ed44e80fbf2b3275a061b6d2776f1ad6f9b94c8b0d688fceb42fecb33f965925daadc4612d9f541ab162bedc17c12e28f5aad0295feef85d62f4d14e6daa7c5c27dd4597ed3d7661ae84ad8cde48791233dadab69127aa79286ebb42317b5e093c7adaae29c631ae947d60de77386d65d8af96edd394f2664f2ed24e6526671d4f6288dfa749139af9373cdf1f3e30b460511f726ac7908ac6645f171729cc40ad2627a8d4523f4fad410f027b1bce72a45241acec602009b79a4ce5d7fe9fdbdc8fd0c2b78e81090b4efc816ad041f909d231f1bdc9cdcd8e5a71a26393eddfd06b10bfcffb3569f1e39dcff932890ae906c9099f1011b07945a609a87fdbcb7c29992b6efaf5687971c2dc09644bd7b5f9db8f038beaf3044317e838df7b2d1813f3a803d8bd4d468db27deb7c333f0f40677acd842363f8bbfe54cf5b4c1d56a6fee7891c3416e4963d46b87beb82d72cba7d4b712400e1bdc685bf7b59e0adcd6ba3bbab129df3fc9331a4221e404663d9fe4ad703c517b4485810b47ee4b4196d539de67da663bc0db3536364b71095f479e661e5b58899ae16699b0d718fa0177810dedaf9b64ede143ea18804cfe5024e490dedeaa3f24af5e162761b4bfc7c2ed3f2ec5831eb2e98edd646f6e8d138b877335bfb902dd71c22bdc92569d20a5253b0d487e3a624fef63af1368a1e9dc016acfa05bfa4837706e3cf750ae3afcf147c2ce8c69c47c5b3a5b4ca7e944329df78d6566e88bb57179857e353a86ed2b28c2c721c5ed86c4920cba23f531f32f2ec3a5ea5a37f672e8a31a9d7a36038748ec19c63973d655a5214c250de8f36ab913780e29caa6c341784d8d7cf2c79987de6d472a8803de4da524399ea58790c4b79d6cdd0bfc2c7fd47e8ee1ad4f79daee1b527d69050293edd649f8432bd329643d0ab44fa6b5ddfcf9c94663dd1b76cc3944a26267c6ed2ad315c5a56b8afcb48035871911f9f9cbac48faa832c048aac725814c0c22e4ed84ecae2da5fb3c6592b77043983bf54f3866961a0eff19ade5532ccfce64a6372297679547519f43b9aec32bd4c28b27b9e5cb1b7722255fc9746cea70e82d56663c74c809c3f4485d47303821fc45371814a4f670aa85071e1a55b0a1627699161b595aa2c9c7059bacc8df14bf037009c1d4012df2e38462c4233736899a7852aa0a0bcff58863f4ae219a0d5d5361d80fbe9f9fe319109b102b578b3d07fff3ad2b34e3ff58370fb179a90c91d60077a678d926c51b988b064705e9b3f0b2c57394595928bb102ea71262b6fab655c340b8e7bcbc966bd2876d88bb2e74962a6b94ed38942eb7da54200abe5f7b8c34b0ec80e0263c2693c0feba33531bded01286998ddf3184fc436906ce1769d238c6838367836217cccd774b79cf7241c142c5deb8741e74056eed0e3667147d4f1d99df16543f4edf1e9ca56fbfda0c74b735ef000701030a08981b4987108f0a250336b649f1b9cb7cf919c7fe60b4a6a5272f7de4e045c120f7c773cd3f08efb43cff80ddd71083d50f18cf786f16d9ababb10298c283e05c0d5ba7a5c591c800e407fd16b757ef5d729df647b89f09c253f03c96707f77849be1c905c386342e3318600cc22058d49eff6d9f9d91236dd76c095488c183e63e3d78d2570a5040a998e0a115d5d7681ae8b85b1c027ad029ac5176d00f7afc51144bfca6c123a65e5b87bf739bfe04dd24e90b05a0c5d2567311a5ddda9271cbfae7b328996cb1c0d61267ce4dd779ad6f096205401c310aae5691e7a022801d1e0056cb6b0a07a6a3f92e4158b9a8d155d52391e89215c204691308bf846637ad9e688a86556e6068b048b1c8298b55a43e2d74957cb953a831f2ae84713bbf9255bc4d981b3cc0362f9792c598eef0c52b190462a0574983501f2191be4600e4da5a9f28fca4c722d327f78bf74c477d44d5fb2ccd3dc9eecaf15e159e2095939a3b7fd1b3adb8c49bc29e8f99cd343d443f9ed9a18e88d6e228115dcc21b4b2bf7110a752f76e045fecd9ea86a71e75c7124aa9b55b4b788d68050983f90228460bbdf411396fc88f6a866b20a554dd5253fc996e4edb425bdff7824c78ade9b6bf0b7c463eac7d382c3e69e0da77b4add765ee0d010b1afece78fcf4e9dc636abfb7c881d418c66bedfcba279008d84d75edf5d79ff4de3727e61cacd9b38fb551afc5997e96a32ba5399c7f82216b01b9465a99dc08ed48e1cdad0c929224bca800ad5bff3cbb2c940a7a52e9863961c7fe0fdbe01b79aa4e0b983486fd262d4096547f39365fd8906e00af5beb6fa3b46714e03194c729d42b02949068900454640651d1737f37bcaa299198395c92faef2577dbdc36a97b0860b09094a70a83478e8dde8d08b4b9389432dc39832a2e88e953fea9719c216fb9479302c61a8ca413aa9962488f45bff567f697f870ffabc6b7652aac5f00e9fef0bc871de215d931c8a2673b4e1dff4f56ea771b8953502ee91eabb5d1c1eec1501e18ef8605e2b62eb699ebbc14a34f650fd295be86c23298aa806a3d3bfd76b679a454d5f336109c36fa7b9dabc3e4218afe9c9abaf17598f0f2a748087fcb0e4b7c081e2953b30c59b21a54162ea527ba029b86c2e91cde65ae934c14352cfa7008878f2d330816818315a8eca6c54005dbd24abe29296a413ea073e150f266e7088ad82d3bbc83409a4510db9d548eea35a7be79eae0bfa57aa572e6401b65512b8e19e0930b6237110ccd3b41a04ea156c0c10fe5e7e6d762de28d54af7db33c013ddca57848e1a207c9994ad67058e10469b16b9725073882d39ed5a5e15fc893133efd05f736f2ac56ffd8f83cb24f9cb5c80ef7bbf507949645f7bcc700b9d368d99fba32658220aa1abab74696e93df02d1ae9711792f2754c11d2648673718a17c7bd46b087310d5c4a71d1c0a56f7a7d18da55f7778565b942e0f5ccf73b45ca63738b4446d2bd4867260a686ff2ae0841860b41773b1e9cc13238e041d6d5b3d8b6bf1f72c198048ce5cbc034855fc7d230ba80b5fbb3d8e08539ff4949123fa84c3a800e46945ac7ed075885209441f88d4988b2ee226dd89aae7200ef24fbe2645dffc60a63a7c609304ec8a8c5517ef6eeb7db1bc5bd9d375264cc88301576364211c373a6e97d5fa52c7a363c844df37b622e24a51c49642f76e1f159bff1c0b43c4f2c0e9e417ecf74e591c2b2315483a50a6d341775d40145fcc044ea40f7d594c592d039cf4aea9a98ec86515824fa1cfc9bf2c1165f3076b35ae6ca6e5583174c2be6c14b6841ce060a7174c42333a96b4d210bfc297d9a328380c81025548c6b3c7735be485f9d4eafc08add5205660f93fecc248c37fbe75862fc23a46174e022fc58c1c78326099dcf41e6f231572616a557ebf85d661581e48338dbf41a387fd67007329dd9d902f4b15701db39ba72d72c5788c1bf190703398d3942d4ba683f95582b064e9bc94b439db05ab8d8fadbb6fa95b030d741aba892006f06f9359a8029e147a021e12422a81cea65fbcaa1bbe8a3ce25b517c91030162785067f225ee18242c2d15dd8f85e0dcb0be6a64a62a007d3d22dd73fcbe2e"}}, @random={0x96, 0x5d, "1f8d13338cf554bc2a81034e94cfe169bd6b93bc991069c24c6253d9786a8118b2d0c4251935ccb9a2fcacc672cb81a6119497e8abb5a3645c24d0a0428dbcd36f84b9fcfcc2a6c1101827ee285590970b78960450fb78796a9beb9737"}, @gcr_ga={0xbd, 0x6, @broadcast}, @preq={0x82, 0x62, @ext={{0x1}, 0x2, 0x7, 0x287, @broadcast, 0x8, @device_b, 0x644099b4, 0x7fff, 0x6, [{{0x1, 0x0, 0x1}, @device_b, 0x8}, {{0x0, 0x0, 0x1}, @device_b, 0x8001}, {{0x1}, @broadcast, 0x3}, {}, {{0x0, 0x0, 0x1}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x8}]}}, @dsss={0x3, 0x1, 0x8}, @random={0x96, 0x35, "69c7af338bec2d1af53108b84de3f73df8a9ee20e57798ad128bf69818d948e79685cd85b072f350334b0c9d27e91b70d9a02e4dd0"}, @ht={0x2d, 0x1a, {0x4000, 0x1, 0x2, 0x0, {0x0, 0x4, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x400, 0x2, 0x3f}}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xa, 0xba, [0x8, 0x81, 0x3]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x11c4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x69, 0x3, "81f32b21b4eb826c3e761a09a4e34e5a9aaaa3a5855c61b23ffca8a4dd88a24c332f9210d6afd0c21c6c85ac724e5e4b374163ba3e5e42fc8eb50fa2c7b76aaaa4259dd56c994d92d05adb33db993edf577de4a1c676b83ac7ce26aaf155a5982e6eae06e5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa5, 0x3, "69997258b44a095a499bfe62184a19c35352b507eb76b4e41c109df8d69d0e1c9dd98ce5f1ac7256a99b79da04308a0c6d11dc998433b4bc7ee02af355550d97befad9e0bd56ad166c2e14ee024a611f1eb8d1c2852f3231a9967bfddd8e0aa7229ac5904b4c35e640b435388c279cfd75162bc728c1e63be11fe7db4db51fd6a8245cf6bc9e056501135b306bc3ce881d20b541238a689dd85fdde8e4f623f09c"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x94, 0x2, "b87a1fd65cc1cc8cce8418bcf1ab2d40ee2a0e8fdb65914c51374d43cbdbabb557f18510b3ac79778b409fcef9eccfe88ee078f36343c36ddb7a98d8117abcfc441e881abd22d8393596e7cfa38d9d23a84ccf4a1183107946c99662aca71e900bf469f098719b42bd111faf14d1f9ef7164d1a7e28915117b43a729eb27dfbbdfd70393b7a6727333f485776f4ff33b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@ssid={0x0, 0x9, @random="8df19eb1904088e309"}]}, @NL80211_ATTR_FTM_RESPONDER={0x225c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xd0, 0x3, "7ab8351e572dfe706797a0dd882445c1f54703cefda8b96120cd2bb56500d4e5134e72e354d3b67c3fbe0158acb234064d4f8450cbe500a7bd96d6b11220f184944b11d602ca23dc6dda623cd2e367a505c28f610893b0de5c5abd6f310aa23a411714420267c204a8707a850fb5d90a21f75d8bc11e75d7bc2159102f2fe5402c360704289e5414d6f8d50ece5f236bae4c431270a198f79d52d0d86342d4c78025e496671c932fbf8b57c8098e2ea924078adc05ed9bffcd2bc8d0ef203dbb7056073e06217af978526b35"}, @NL80211_FTM_RESP_ATTR_LCI={0x6b, 0x2, "0fb8f40e8440edcc03ead32f3b826876c66e605b0cc75ca10a08dfdcb51865a0c08aaafada89415ad023abc1b23c43f88a274425a5f3a78f1d433df263ca5860a9e190aed799e9429cd1679492569d8ecc3683ba26998c132380c2fcbecebff30cc8906b3fe491"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x7a, 0x3, "5af831d2fdd804d6a2f0d9f4934a11251e856bc22af2d6c98f15b39a7c7825d2968e9ed4889ab1d182c9ee7d7a40eb21860bd06c7a6009ff87d608472e6a1b512679423eae9e85d57af6aa43749a226e8d58438c802442b2f87323133454235f5ab659c618fb2000240640334a5e3c108e3c418f40b6"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x94, 0x3, "f9f187ed998b79a5716b480f61aa2c0426a89389483b10b1e05b2518e9a45970508b571039e30a25e9a604e20c5ca4228da3d1b745ad11b2b758723e9906d2c0ae5e362d6f1521338eec1571adae9281d45d34987d0ad257c27e5757a638c1de16cd17e6637f8f322b0b4a6188cf2325824c2e029319adc2c52b01471b59fe9dfc792ea187844d3bce0430dcf99235e6"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x113, 0x80, [@peer_mgmt={0x75, 0x14, {0x1, 0x3, @void, @void, @val="2974b5bd2ced8c3b74b87eee0e43e768"}}, @measure_req={0x26, 0x9d, {0xd2, 0xf1, 0xb6, "cba39e1a30c3a2c08fd54408de48d96505302a28f7784e4ddd2f4b5aa3ddaf990229cd290b325a868cc98fbe0e879ddf7b45fc2be1ab133588b787eb2c28dea98fc53af7022b3be1e0b6e606601f007362b816daf2de6ad4e8bf49d7613815093b27b681b1dbb5ae69fd2ab68bb6ad7f289f0a9be6d4bd1f96b721254e2eec64190d36f6cc6eba6a9f46a9f0f43edca2357cebe20f699a50e66b"}}, @random_vendor={0xdd, 0x58, "439b0f29899e787ed44585d5f08e40f9a2aa55e2edf54648e84c3eec233e844c5af1498a6f8f4d104bab737589fc76d7ccc45aa2b6e75ea3a6f23e5304cc1bdc9ff6052652bc32e0dcf42d9d58e288ae2fce259c1ba42b2b"}]}, @NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x4000, 0x1, 0x7, 0x0, {0x33, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x1, 0x3e0}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1408, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3c, 0x2, "6f6244347aa6229635bc9487f4658d32dd3065ce81256d478d085af924b5ffa5d6ee5962594f8c01d8624103d657867ac801af4bcab505ff"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd2, 0x3, "86d7ada32fdf3ee54410cdadd3f8b066057a13eee54bc7f0bef5a7042bbf4f626086ec04e0a9f008b7fc2498217c2c7c06275c85b483f9ef04d6e57f68e01577e6fe85b6b2861082ea1aa091ebfdd6f6dcbe988b505d303dac46791a8996bc8b62ed3d72083437bbbbd83e7049265c8f9933f69c3ee830d200f8c258ac2d8b0e93f89056f5c0412677594d70938a5067049decfac1895f47a1ed97b0e98162e30e36237d0db0490c21a4bbef52e711937913ddd1032a5f52fe3048be9dc428db1d0fb7d9ef2584249a75b6f23fb9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc2, 0x3, "90085e2393685cccb53226495890dc29dcdf409a3c01007c43836f7f45d920e9666bc58de46467b1289817b3ebf2b5b2979513d0cde60b16651b2a2b5aa99fac5a93c92f677bb316734cc8c39a68617eacd7ae73a804ad1cdb31c68e1ad0e60b2f81bc8d0102e079922e4a1680ce803a7ae465def6af45f0888e3537431eb0c3e0e190f18f736d049a18ff454c96e5819cf1807d75016dabe76dbc77843c96ef7da1242e0fd81d760a9d7e99f5710440164e69f07b33a9de36ca56de0b1f"}, @NL80211_FTM_RESP_ATTR_LCI={0x76, 0x2, "8fde28fd81ce80ff45c82dd7624c63d76d8e64aa0718815ad29dd9df08ad9ca6b3061f7cf1cfd856fc108c8cde99de64786c6652f3a05ac1e9f97a998535be24d944ae09d928dd4ef32c9fd65eeb311f6e63d3e9a41bbb9bce728ce5e3e2f9de64921063833b3534d5a4b240e2aa1e6bcc25"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe4, 0x3, "6950869d540fa041e890b162e13e0705218094dde87a880dd8e9a9f7f86a8939577c84cbd07edab5e1a38497cbbd79c84e79abf9edbb7f763b4adac4bad8702f54c210f74a511590070fab7c5b249d8e84d9908123cd6cec610d1c619584e063f3d8e1a9799063c732bc224013ff1ac47bbbbdbbb33ea530dc080b3268a600aa5f8ca28a72b27c9dae8c4f701635922a0e104d607281c28494112e4f847f14fe01d40f4e89655c7ddc4d43ecf6d4c19215700dd8b3ab382256264e0e0ac030462d035bb6b79871464d4609b0d914dcf755b7b00d72cf1bba2f86b7ad42ec1ab5"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd0, 0x3, "aee2ec1941ca3ba1515374961473fa6d5307f23dac96b41f044e36abea5a414f4f0ef6e458a866474416a93162ea9e4eca71d03f99e46f93d0f7331698aead3ce25a64e8d0dc7ffc8b1d44526dd00259706b7df3a302ee88f736c5a57c0fd50eb6783d396380f5016d6612eef7e12593b4b312361fcc1a7a9a744e83fd5afc1c26447bc4ff7259a68ac795920dbeac35df5bf9eb0e953230e6120f9c15e19684a0b9dfd0b759643f01e35b7c83a5ebd9e2f7e17fce47e67fe5e677e683b25c1b9ed061da5e57f41c0d4c4ffe"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x203, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x9}, 0x8, 0x5, @device_a, 0x3, 0x3, 0x10000}}, @preq={0x82, 0x88, @not_ext={{0x0, 0x1}, 0x8, 0x0, 0x2, @device_a, 0x2, "", 0x800, 0x101, 0xa, [{{}, @device_b, 0x6}, {{0x0, 0x0, 0x1}, @device_a, 0x401}, {{0x1}, @device_b, 0x4}, {{}, @broadcast, 0xfffffbff}, {{0x1, 0x0, 0x1}, @broadcast, 0x80}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @broadcast, 0x10000}, {{0x1}, @broadcast, 0x8000}, {{0x1}, @device_b, 0x200}]}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x5, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1f, 0x68, 0x80}}, @ibss={0x6, 0x2, 0x200}, @ibss={0x6, 0x2, 0x7fff}, @preq={0x82, 0x7d, @not_ext={{0x0, 0x1, 0x1}, 0x4, 0x0, 0x4, @device_b, 0x1, "", 0x7fffffff, 0xfff, 0x9, [{{0x0, 0x0, 0x1}, @device_b}, {{0x1, 0x0, 0x1}, @broadcast, 0x4}, {{}, @device_b, 0x6}, {{0x1, 0x0, 0x1}, @device_b, 0xff}, {{}, @device_b, 0x1ff}, {{}, @device_a, 0x4}, {{0x1}, @broadcast, 0xe95d}, {{}, @device_b, 0xfffffffb}, {{}, @broadcast, 0x8}]}}, @measure_req={0x26, 0xc6, {0x0, 0x8, 0x5, "f95d76b77341264b79bd3f6c9eb8ed0a2709339cfa763e89e6eeaa369d0628dafbedea310cd5ce25b13b4d9348e0451192a0c20994c3fcaff26a19c9fbb52aac25714040c779536238454fecba9b103144c95ed2083a3c339be5cf9063b5403380e45c457ce1a5452074451ca5001b05bc2df52aca871ce5b63b39d88a5958fc8fa36302d8ae4c274884d956bda2872794307b4c9b3b0ac4b93d04e03a993fc69f95a0460809e33dcd4244899c998a1fa7df6625af502c69954aabb5b117474a82ae57"}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xe, 0xbb, [0x80, 0x8000, 0x4, 0x1, 0x4]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x2b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x3b, 0x2, "24c0ed3f4ea236e8eba43ba880d4ce787a49e02ff10f2cda2448e4cbcc18356ff29202720945c36175994326322a1fdf965fd9086e4535"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xa4, 0x3, "8132e61cdddd32c44a695e44196c7f91f95238afd8be50859a0d74546e7243a2edce284ce07f0a9dfc85fa99dd22d7e7c1bc4150d8937ad15cc4eec7798c39aabbc837789f7e91195246dacd8cfb864b3e7a7f51b16c0b3c755716f0aeafab60bd9ebe1a17a4775609a7e13fcdf8d61db0d598576546679cd73ef4fc3dff07031b6f89832734182890002d1d931087fa4e76fe8783bcaeacc7e72d2731b1096e"}, @NL80211_FTM_RESP_ATTR_LCI={0x45, 0x2, "c7a92f2e379127a10d99302e37226b1784306a287d11e52aa64fd4084e3e7f57f20b04dfc6a51ee2eeb498c0e00c883916cbbec2e6ce99869116d096fc7e442d56"}, @NL80211_FTM_RESP_ATTR_LCI={0x4d, 0x2, "81088f300cf03c5c264076d79ef25847be53ae455650a627389982319cd22ad7ea12249d11d54a1eb58c7eec93ed389bd60f06b98e82b3fb74f95a49544a7835a80b83698d64c993e8"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x9f, 0x2, "a77587e3a63af20f997c2ba380f53d768f065ac16794a17548b0bef870a527fc2d7526056eb44e9b06adc87da2ef9df4340b327562956adf28380db1fd83e8fa5945a49409d2bf299937e67fdcd194ead363572527556b2575015edd9f30be69908af6c5f470285cc76b58e4348d4940828d2ab00ddfba7f0f42eb3b3d2d8f378fcca58aff7e59e2b83cf7b07b71bb1bef25b994b9b13d258eed35"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x8c, 0x2, "fa1f1ae6132e501c42cfafd39eb5b2aa6ac0bbd73ad86847fbeabe6cb7b89af0d41f5181ca5cc1cd13d5368d86debdf1ba6461d7ad94695947e6961116206b3fb92da1756139d9ffa7ce2b0c18da330d68cb83a5978f49a40e28647a056ceff5e092b4b95684b7660ab9dcd3c93e2cf16f5249cb25b3db5a546c381e0bd1f2e68eb52f4ff2c3ddd7"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x179, 0x80, [@ibss={0x6, 0x2, 0x3e1}, @tim={0x5, 0x68, {0x8, 0x9b, 0x0, "c187a32571903ba5090c8952f471786d2f39b17188aa1b19af0f1afc95323b4b86180b7616b8a1d34c6358260581b9b5c0f94c071909ec13c5e69cd53341623e72551fb843facceafa3e42233ee225bade5bb89f7430bde3533011e528bb7d6c69cebaab28"}}, @supported_rates={0x1, 0x3, [{0x12, 0x1}, {0x30, 0x1}, {0x0, 0x1}]}, @random_vendor={0xdd, 0xca, "55d3ab004d6bc7419166a5620f9c53166f6e7476e281fc61cfd90739d940beb745f8355844d52498d7d141ed57e9d412d6a48085003568da52a45f473d9ee663ffacd55e8d43535e05651156c85a656e683788267909f8b70b9fbe2a8264c53608804591d248e520f5f5c6a1d8b28474d4f9d5e17dbd3c04ab3bafce25370771fcdb566bae5acf66b0e3dd5a04cec9f285791c9813e4135c0519e378e96f6af94f4315dc85400203e789e68dc5d3f4b9a73fc7806f8a9b68172394e9325ab8168cd50d1f2b416a3d1421"}, @prep={0x83, 0x25, @ext={{}, 0x7f, 0x8, @device_a, 0xffffffff, @device_a, 0xc599, 0x5, @device_b, 0x101}}, @dsss={0x3, 0x1, 0x1}, @ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x7}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x8, 0xff81, 0x1, 0xc000, 0xbc, 0x6, 0x8, 0x2]}]}, @NL80211_ATTR_CSA_IES={0x3e4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x20]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0xc, 0xba, [0x4, 0x8, 0x7ff, 0x7]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x11, 0xf, [@ibss={0x6, 0x2, 0x8}, @sec_chan_ofs={0x3e, 0x1}, @chsw_timing={0x68, 0x4, {0xffff, 0x5}}]}, @NL80211_ATTR_PROBE_RESP={0x3b5, 0x91, "e180ed5ffe54fdfb29032e6d5b581c031e9de30ae23842719a318f61daf05df6b44160258b2e99a5dcd54cad4d9aefa561d370054c021f2df800712e19bf5cbc2d1aeac74beca37f0f2cf006b63f5f2ac02a9c34855a0c4fa7275235424f2ad1510ee00becb65c0bd5a90b32fe9673c5d56c5e1f960bc1d367c991c6e5c1982d0f8b67e0503ae768b1bed4a750ca323063fd56fa98e9ed5af9b69803a0c6341e477d3d748b99ffaddf86e1a52bc97c2b0d5031be64e9253bd12a44d3c575c9a3bf490c8419acb5ed06431bad807d7890389b52fcbf4cac8f3acf4eb77b67c978f9c99e8fdfae7901c8996b332d2f75836bc1c755fb056240e32666680e40a082764973520971eae8deafb8b917db1e1fa439c4c384962ccf3d165a18416e2ec184a49e1872bd8ae6d0e26e2e473ef00acb12cfa378ea33feb6339da613bb03262e874c7afe030ebeec2382d5f34fc7dc02beed32ad6ce19945b104a38b2a1458ffa1a859708a0648ff764d893db34c0627bcbd3adb526740e82fadd9fbf11cece16e804233f311dbb7dfb30030de11dc43ec10a8e35421704f3f84a89b097272f7e46de196000111efe3e8f2bcb7530a2c66a97edec8ad2115eb14e7de4c95dc00daf1cb07ca21b51b26875c50d9d544f0a404143036d85bb7377d2d3ddd95138e0c2dbb30648569db37560bff86e961199820f62d4e1baac3b68139e36e42867106e7ce557cf831cb1776ab73ceacb97d1539658a8b0e5f4ae008ace1e9c1b5341c61b76c47e4b74be8c36dda51596dad00145db99350787a0449fd4ef7feb184b54692745227f65581efc8d726bdd5b7ff945c950ddb849d657ba6af1bbea95cf01deb87aa670a9c741e60fca82e32f6e2ac8a92b2fca1798ed7287a9aaa004787e1486874f7441534dcfa73ea967ec05173cc45522009db280dcdbf8c9b3ef72db35c9486d3319c40453ae8fb33329c9418f33ca350a83941182a42e788a4180c7295353bd482ca201d137d52116b495efa88d6c99d887faced6d1de907e4d05885554e179f8a198cdfcdf8700df911e507c5a41ebf7f20743af6d233a431df560cac8f2dfbfb30a55cad035f994fd6a2c54bb87ab8ca5c10eb3c203c726c038a995312407915a3658d892a5a7afa508718210418d71f8699a03ed4a4c952374c90f40c33941812e637772dc37a6a724c0a4298d6920b1cbce9fd0878a9341e2b519ecd7ff6ba34551f9281ce3b62e321b3a282b379a421f78d60ce2b69b2d694fb1f471c98cc84e8bd1e666aa57513162b5a329c73ae78b3dbf0b67611c4050ccb71d053110d2c5efe011c87699efd"}]]}]}, 0x6730}, 0x1, 0x0, 0x0, 0x40400d0}, 0x200000c0) 14:10:26 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x5a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2459.614280] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2459.623551] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2459.630822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2459.638095] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:26 executing program 0: r0 = socket(0x6, 0x0, 0x800080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7ff) 14:10:26 executing program 2 (fault-call:10 fault-nth:24): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:26 executing program 4: r0 = socket(0x22, 0x3, 0x0) bind$ax25(r0, &(0x7f00000000c0)={{0x3, @null, 0x6}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) accept$ax25(r0, &(0x7f0000000000)={{0x3, @netrom}, [@null, @netrom, @netrom, @remote, @remote, @rose, @remote, @netrom]}, &(0x7f0000000080)=0x48) 14:10:26 executing program 5: r0 = socket(0x2, 0x6, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:26 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x3, 0x0) 14:10:26 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x5b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:26 executing program 5: r0 = socket(0x9, 0xa, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0x2}) 14:10:26 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r3 = syz_open_dev$vcsu(&(0x7f0000000080), 0xfffffffffffffff9, 0x204082) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xb7}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x800) 14:10:26 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x5c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:26 executing program 4: getitimer(0x1, &(0x7f0000000280)) r0 = socket(0x1d, 0x5, 0xe36) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0, @ANYBLOB="0600e10b000000006fd74cb68700030006cb5b10e7409aae2daf28f14a075c856f4b723b66bc8af9bc274d5001dc0cce025704d8d6fe89dc4bf33b3297f0a2c2bd571aa75f3305dc2f9bd09de8b0e79af37bab141d59b344bb9171f5f999061383d5927a9162418387b9c30a4f06084d20b03a2d10b3bf280a", @ANYRES32=0x0, @ANYBLOB="0800c300040000000800c300040000000800c400030000008300c5003a5cf52e5485c619bd8759d55fdfb4b9dc9d86c927fdd187298cc7d749004b82cdae3b1fd317bb55bc1a7c81c0b8561c00c646d0d6ae7cd8d0927c13ade7ef867ef82f9e5edc8bddfd9c6ab8e92b00d6e5ce006bad655335889808c0007cf7f6edc7c91898f6fc40419b5ac2620a56bf9f81903fac74a1fb277b000800c400070000000800c400b9fbffff"], 0xd0}, 0x1, 0x0, 0x0, 0x40440c1}, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x440000, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107) ioctl$SNDCTL_SEQ_GETINCOUNT(r3, 0x80045105, &(0x7f0000000240)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f00000001c0)) [ 2459.959739] FAULT_INJECTION: forcing a failure. [ 2459.959739] name failslab, interval 1, probability 0, space 0, times 0 [ 2459.988627] CPU: 0 PID: 8615 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2459.996445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.005802] Call Trace: 14:10:26 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000080)={&(0x7f0000000040)=[r1, 0x0, 0x0], 0x3}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000000c0), 0x0, 0x2) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x443}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x723}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000100)={0x2}) [ 2460.008397] dump_stack+0x1fc/0x2ef [ 2460.012038] should_fail.cold+0xa/0xf [ 2460.015845] ? setup_fault_attr+0x200/0x200 [ 2460.020174] ? lock_acquire+0x170/0x3c0 [ 2460.024162] __should_failslab+0x115/0x180 [ 2460.028400] should_failslab+0x5/0x10 [ 2460.032205] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2460.032651] binder: 8634:8635 ioctl c018620c 20000100 returned -22 [ 2460.037312] blk_throtl_init+0x7c/0x620 [ 2460.037327] ? blk_iolatency_init+0x1b7/0x2d0 [ 2460.037344] blkcg_init_queue+0x1e3/0x540 14:10:26 executing program 4: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) connect$vsock_dgram(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) [ 2460.037365] blk_alloc_queue_node+0x7d0/0xbf0 [ 2460.047635] blk_mq_init_queue+0x44/0xa0 [ 2460.064775] loop_add+0x2cb/0x8a0 [ 2460.068238] loop_control_ioctl+0x16c/0x480 [ 2460.072565] ? loop_lookup+0x1d0/0x1d0 [ 2460.076473] ? ksys_write+0x241/0x2a0 [ 2460.080281] ? loop_lookup+0x1d0/0x1d0 [ 2460.084172] do_vfs_ioctl+0xcdb/0x12e0 [ 2460.088059] ? lock_downgrade+0x720/0x720 [ 2460.092210] ? check_preemption_disabled+0x41/0x280 [ 2460.097225] ? ioctl_preallocate+0x200/0x200 [ 2460.097246] ? __fget+0x356/0x510 [ 2460.097262] ? do_dup2+0x450/0x450 14:10:26 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fbdbdf25320000000c009900c24600007d0000002aee79e863a8a390bdea3545fb33d00df391b5d7a9f3bce565197ced74bc687a544ef08d45d1b08f93e28095fa76526024f788a3fc89d94a4e8cd92ebbb882e5dc32e40fbe690e090349"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) [ 2460.097278] ? vfs_write+0x393/0x540 [ 2460.112342] ? fput+0x2b/0x190 [ 2460.115549] ksys_ioctl+0x9b/0xc0 [ 2460.119855] __x64_sys_ioctl+0x6f/0xb0 [ 2460.123750] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2460.128337] do_syscall_64+0xf9/0x620 [ 2460.132147] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2460.137335] RIP: 0033:0x4665e9 [ 2460.140525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:27 executing program 2 (fault-call:10 fault-nth:25): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:27 executing program 0: r0 = socket(0x1d, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) sendmsg$NL80211_CMD_SET_MPATH(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000400)=ANY=[@ANYBLOB="cf5237634f1a2ca8586ae18a7b6e65157f0f1abab3730d54b3f9dc2a40276b3f4c0872fbbaa496ecd33c8989b8487c6bbda5484e2679963257541726d23f8b6b77444d85c7e4f032412a07b7f728fc81aba291f8511763be62c21549a1c931df5f7186ea467815b7ba91186a4fb4694e869f372aa524099add56e9b20a49918c2e", @ANYRES16=r3, @ANYBLOB="010000000000000000007b00000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x44010a00}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000aae392e4f24b9e2a7e2d153187443bf00adfa27c548bc3a0792c0cf2eae9f54410ed570b28724c8dd7ff6824102d766f1c4e7eba5c100225a524b9672bdc3f8e04aa6dda6023deff74cc408d174b0aff921ba1ea2c93c4028f256318f537df1a2a441e5f50024b524a7964cc937773ffd4ed564523dbd6022e3b175294d6e8dc1bed57f3afbbd668aa2de3663e14eb97fa85d468ce93794450cf6ad4201f443dd495653d6bdb8b998ba05955b5a7b6245f479941e89b8c7e83ac525ad7ca9d66d5f934b2efe1c3d8acfc4909b654e937b629ba3ea7d5745d105c5a132eaf28fcf9ea32a99d882861bf29772b022341", @ANYRES16=r3, @ANYBLOB="000427bd7000ffdbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990002000000040000000c00580009000000000000000c0058007000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 14:10:27 executing program 5: socket(0x22, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000040)={[0x100000, 0xd000, 0xd000, 0x10000], 0x5, 0x0, 0x800}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f00000004c0)=0x8) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r5, 0xe08, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0xffffffff, @link='syz1\x00'}}}, ["", ""]}, 0x68}}, 0x40000) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x5, 0xffffffff, 0x7}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044004) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x80044944, 0x0) [ 2460.159421] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2460.159436] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2460.159443] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2460.159450] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.159459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2460.159468] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x5d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:27 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x991, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x49}, @void, @val={0xc, 0x99, {0x9, 0x54}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r4, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe2, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x160, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PBSS={0x4}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x7d60b}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_PMK={0x102, 0xfe, "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"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x809b}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x5}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6004}, @NL80211_ATTR_SAE_PASSWORD={0xb, 0x115, "1b3c1ab3afadcc"}, @NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x80) 14:10:27 executing program 3: socket(0x22, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x5e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:27 executing program 4: r0 = socket(0x22, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'batadv0\x00'}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004081}, 0xc1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x24, 0x1d, 0x100, 0x70bd28, 0x25dfdbfb, "", [@lastused={0xc, 0xf, 0x80000000}, @extra_flags={0x8, 0x18, 0x7}]}, 0x24}}, 0x10) [ 2460.379407] can: request_module (can-proto-0) failed. [ 2460.386120] FAULT_INJECTION: forcing a failure. [ 2460.386120] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.409168] CPU: 1 PID: 8657 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2460.416981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.416987] Call Trace: [ 2460.417009] dump_stack+0x1fc/0x2ef [ 2460.417029] should_fail.cold+0xa/0xf [ 2460.436370] ? setup_fault_attr+0x200/0x200 [ 2460.439355] can: request_module (can-proto-0) failed. [ 2460.440695] ? lock_acquire+0x170/0x3c0 [ 2460.449840] __should_failslab+0x115/0x180 [ 2460.454112] should_failslab+0x5/0x10 [ 2460.457917] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2460.463026] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 2460.467441] throtl_pd_alloc+0x6b/0x940 [ 2460.471422] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 2460.475835] blkcg_activate_policy+0x120/0x5d0 [ 2460.480421] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2460.485436] ? init_timer_key+0x88/0x350 [ 2460.489508] blk_throtl_init+0x40d/0x620 [ 2460.493582] ? blk_iolatency_init+0x1b7/0x2d0 [ 2460.498078] blkcg_init_queue+0x1e3/0x540 [ 2460.502231] blk_alloc_queue_node+0x7d0/0xbf0 [ 2460.506770] blk_mq_init_queue+0x44/0xa0 [ 2460.510865] loop_add+0x2cb/0x8a0 [ 2460.514329] loop_control_ioctl+0x16c/0x480 [ 2460.518653] ? loop_lookup+0x1d0/0x1d0 [ 2460.522545] ? ksys_write+0x241/0x2a0 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x5f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:27 executing program 3: r0 = socket(0x2, 0x6, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x100, 0x70bd27, 0x4, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x20, 0x46}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x4}}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x40, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc4ba, 0x6c}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xa5fbaea77844ef30}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ee}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}}, 0x4001) 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x60}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2460.526351] ? loop_lookup+0x1d0/0x1d0 [ 2460.530423] do_vfs_ioctl+0xcdb/0x12e0 [ 2460.534317] ? lock_downgrade+0x720/0x720 [ 2460.538469] ? check_preemption_disabled+0x41/0x280 [ 2460.543491] ? ioctl_preallocate+0x200/0x200 [ 2460.547906] ? __fget+0x356/0x510 [ 2460.547923] ? do_dup2+0x450/0x450 [ 2460.547938] ? vfs_write+0x393/0x540 [ 2460.558642] ? fput+0x2b/0x190 [ 2460.561846] ksys_ioctl+0x9b/0xc0 [ 2460.565305] __x64_sys_ioctl+0x6f/0xb0 [ 2460.569195] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2460.573782] do_syscall_64+0xf9/0x620 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x61}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2460.577591] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2460.582778] RIP: 0033:0x4665e9 [ 2460.585975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2460.604879] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2460.612586] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2460.612599] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2460.627120] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2460.634392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2460.641657] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:27 executing program 2 (fault-call:10 fault-nth:26): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:27 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x4c001) 14:10:27 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0xf, 0x4, @udp='udp:syz0\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044942, 0x0) 14:10:27 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x2, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffff09c, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x48000}, 0x8080) 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x62}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:27 executing program 3: r0 = socket(0x22, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x4051) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:27 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x23}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3a}]}, 0x88}, 0x1, 0x0, 0x0, 0x4004854}, 0x8040) 14:10:27 executing program 4: r0 = socket(0x22, 0x3, 0x0) accept$ax25(r0, &(0x7f0000000000)={{0x3, @rose}, [@remote, @remote, @null, @remote, @bcast, @netrom, @netrom, @null]}, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x63}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:27 executing program 0: r0 = socket(0x26, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000040)={r1, 0x7ff}) 14:10:27 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=@getsadinfo={0x12c, 0x23, 0x4, 0x70bd27, 0x25dfdbff, 0x0, [@sa={0xe4, 0x6, {{@in=@dev={0xac, 0x14, 0x14, 0x38}, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4e24, 0x0, 0x4e24, 0x7, 0x2, 0x80, 0x20, 0x2c, 0x0, 0xee01}, {@in=@remote, 0x4d4, 0x32}, @in6=@mcast1, {0x7, 0x20, 0x9, 0x4, 0x0, 0xe171, 0x2, 0x10001}, {0x401, 0x8, 0x0, 0x7f}, {0x8, 0xd6d, 0x8001}, 0x70bd28, 0x3504, 0x2, 0x1, 0x1, 0x7}}, @replay_esn_val={0x34, 0x17, {0x6, 0x70bd2a, 0x70bd27, 0x70bd29, 0x70bd2b, 0x20, [0x1, 0x3d, 0x7, 0x7, 0x8000, 0xffffff00]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x400c0}, 0x11) [ 2460.883075] FAULT_INJECTION: forcing a failure. [ 2460.883075] name failslab, interval 1, probability 0, space 0, times 0 [ 2460.894298] CPU: 1 PID: 8708 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2460.902090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2460.911442] Call Trace: [ 2460.914048] dump_stack+0x1fc/0x2ef [ 2460.917687] should_fail.cold+0xa/0xf [ 2460.921503] ? setup_fault_attr+0x200/0x200 [ 2460.925827] ? lock_acquire+0x170/0x3c0 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x64}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2460.929808] ? check_preemption_disabled+0x41/0x280 [ 2460.934833] __should_failslab+0x115/0x180 [ 2460.939078] should_failslab+0x5/0x10 [ 2460.942890] kmem_cache_alloc_node_trace+0x57/0x3b0 [ 2460.947915] throtl_pd_alloc+0x6b/0x940 [ 2460.947932] ? throtl_add_bio_tg+0x1f0/0x1f0 [ 2460.947944] blkcg_activate_policy+0x249/0x5d0 [ 2460.947964] blk_throtl_init+0x40d/0x620 [ 2460.964920] ? blk_iolatency_init+0x1b7/0x2d0 [ 2460.964939] blkcg_init_queue+0x1e3/0x540 [ 2460.964957] blk_alloc_queue_node+0x7d0/0xbf0 [ 2460.978066] blk_mq_init_queue+0x44/0xa0 [ 2460.982133] loop_add+0x2cb/0x8a0 [ 2460.985598] loop_control_ioctl+0x16c/0x480 [ 2460.989922] ? loop_lookup+0x1d0/0x1d0 [ 2460.993905] ? ksys_write+0x241/0x2a0 [ 2460.997711] ? loop_lookup+0x1d0/0x1d0 [ 2461.001606] do_vfs_ioctl+0xcdb/0x12e0 [ 2461.005501] ? lock_downgrade+0x720/0x720 [ 2461.009659] ? check_preemption_disabled+0x41/0x280 [ 2461.014678] ? ioctl_preallocate+0x200/0x200 [ 2461.019095] ? __fget+0x356/0x510 [ 2461.022552] ? do_dup2+0x450/0x450 [ 2461.026087] ? vfs_write+0x393/0x540 [ 2461.026105] ? fput+0x2b/0x190 [ 2461.026127] ksys_ioctl+0x9b/0xc0 [ 2461.036486] __x64_sys_ioctl+0x6f/0xb0 [ 2461.036502] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2461.036518] do_syscall_64+0xf9/0x620 [ 2461.044973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2461.044985] RIP: 0033:0x4665e9 [ 2461.044998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:27 executing program 2 (fault-call:10 fault-nth:27): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:27 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000000)={@any, 0x3ff000, 0x1000, 0x2}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:27 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x65}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:27 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x3f, 0x3a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000100}, 0x20000010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:27 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7ff, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r6, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r3, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x38}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x2000) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x20}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0xc000, 0x76e, 0x20, 0x7fff, 0x9]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$SNDCTL_FM_LOAD_INSTR(r7, 0x40285107) 14:10:27 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) [ 2461.045011] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.084617] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2461.091885] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2461.091893] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.091901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2461.091909] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:28 executing program 3: r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000300)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:28 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x66}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:28 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x24000, 0x0) r0 = socket(0x22, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = socket(0xa, 0x6, 0x3) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000001c0)) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x9f43}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x44) 14:10:28 executing program 4: r0 = socket(0x3, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) bind$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x7}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 14:10:28 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x90) 14:10:28 executing program 3: syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 2461.336232] FAULT_INJECTION: forcing a failure. [ 2461.336232] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.378301] CPU: 0 PID: 8758 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2461.386125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.395481] Call Trace: [ 2461.398072] dump_stack+0x1fc/0x2ef [ 2461.401711] should_fail.cold+0xa/0xf [ 2461.405535] ? setup_fault_attr+0x200/0x200 [ 2461.409865] ? lock_acquire+0x170/0x3c0 [ 2461.413848] __should_failslab+0x115/0x180 [ 2461.418084] should_failslab+0x5/0x10 [ 2461.418100] kmem_cache_alloc_trace+0x284/0x380 [ 2461.418122] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 [ 2461.431574] ? plug_ctx_cmp+0x100/0x100 [ 2461.435552] blk_stat_alloc_callback+0x54/0x290 [ 2461.440254] blk_mq_init_allocated_queue+0x80/0x1300 [ 2461.440269] ? blkcg_init_queue+0x1fd/0x540 [ 2461.440287] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 2461.440304] blk_mq_init_queue+0x5c/0xa0 [ 2461.449700] loop_add+0x2cb/0x8a0 [ 2461.449720] loop_control_ioctl+0x16c/0x480 [ 2461.449733] ? loop_lookup+0x1d0/0x1d0 [ 2461.449753] ? ksys_write+0x241/0x2a0 [ 2461.449765] ? loop_lookup+0x1d0/0x1d0 [ 2461.449781] do_vfs_ioctl+0xcdb/0x12e0 [ 2461.481630] ? lock_downgrade+0x720/0x720 [ 2461.481645] ? check_preemption_disabled+0x41/0x280 [ 2461.481661] ? ioctl_preallocate+0x200/0x200 [ 2461.495199] ? __fget+0x356/0x510 [ 2461.498661] ? do_dup2+0x450/0x450 [ 2461.502208] ? vfs_write+0x393/0x540 [ 2461.505934] ? fput+0x2b/0x190 [ 2461.509135] ksys_ioctl+0x9b/0xc0 [ 2461.512595] __x64_sys_ioctl+0x6f/0xb0 [ 2461.516473] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2461.521041] do_syscall_64+0xf9/0x620 [ 2461.524830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2461.530006] RIP: 0033:0x4665e9 [ 2461.533177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.552062] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.559751] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2461.567002] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 14:10:28 executing program 2 (fault-call:10 fault-nth:28): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:28 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x67}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:28 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000280), 0x240000, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x20000000, 0x10}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x480c1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r7, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 14:10:28 executing program 4: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0xe2c, 0x70bd29, 0x9, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1c3e37a3, 0x53}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2404c805}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:28 executing program 3: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) accept4$ax25(r1, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:28 executing program 5: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xfe9c, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r2, @ANYRESHEX=0x0, @ANYRES32=r0, @ANYBLOB="8ef864163affe28bb2e0a501667be54596fd8fe05f2a2b7d85177217dfc3c8cb00"/42], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x80) r3 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80044944, 0x0) [ 2461.574259] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.581525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2461.588794] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:28 executing program 5: r0 = socket(0x6, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:28 executing program 0: r0 = socket(0x22, 0x3, 0x0) accept4$ax25(r0, 0x0, &(0x7f0000000000), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="00000000b0759b45e482f1cae4bfe7631b6dfbfd733443ae0eb9d86debe6780c5080fdaaf159eb38879fd7d1e8f5856b0ed7b8ab93917f350e0f1f2c569062f8cd496af8a5b97189983a78bb152cf3f6692341b7a3ade538292520ec843a2d9f853d23d22ec5671074e2bbf44918208d33b4d016f78532ed670313c20d4c896c0bc80e218a7cfafd4d833b570dae9571601240547acc91aa90ec827b0bf9f3d3bedebd", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x1dc}, 0x40800) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) socket(0x22, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044942, 0x0) [ 2461.737643] FAULT_INJECTION: forcing a failure. [ 2461.737643] name failslab, interval 1, probability 0, space 0, times 0 [ 2461.749775] CPU: 0 PID: 8786 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2461.757669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2461.767025] Call Trace: [ 2461.769627] dump_stack+0x1fc/0x2ef [ 2461.773275] should_fail.cold+0xa/0xf [ 2461.777085] ? setup_fault_attr+0x200/0x200 [ 2461.781414] ? lock_acquire+0x170/0x3c0 [ 2461.785398] __should_failslab+0x115/0x180 [ 2461.789641] should_failslab+0x5/0x10 [ 2461.793442] __kmalloc+0x2ab/0x3c0 [ 2461.796985] ? blk_stat_alloc_callback+0x81/0x290 [ 2461.801836] ? blk_mq_hctx_mark_pending+0x1f0/0x1f0 [ 2461.806860] ? plug_ctx_cmp+0x100/0x100 [ 2461.810844] blk_stat_alloc_callback+0x81/0x290 [ 2461.815523] blk_mq_init_allocated_queue+0x80/0x1300 [ 2461.820629] ? blkcg_init_queue+0x1fd/0x540 [ 2461.824958] ? blk_alloc_queue_node+0x7e4/0xbf0 [ 2461.829639] blk_mq_init_queue+0x5c/0xa0 [ 2461.833704] loop_add+0x2cb/0x8a0 [ 2461.837167] loop_control_ioctl+0x16c/0x480 [ 2461.841492] ? loop_lookup+0x1d0/0x1d0 [ 2461.845399] ? ksys_write+0x241/0x2a0 [ 2461.849202] ? loop_lookup+0x1d0/0x1d0 [ 2461.853094] do_vfs_ioctl+0xcdb/0x12e0 [ 2461.856995] ? lock_downgrade+0x720/0x720 [ 2461.861148] ? check_preemption_disabled+0x41/0x280 [ 2461.866166] ? ioctl_preallocate+0x200/0x200 [ 2461.870579] ? __fget+0x356/0x510 [ 2461.870598] ? do_dup2+0x450/0x450 [ 2461.870611] ? vfs_write+0x393/0x540 [ 2461.870625] ? fput+0x2b/0x190 [ 2461.870648] ksys_ioctl+0x9b/0xc0 14:10:28 executing program 3: socket$inet6(0xa, 0x3, 0x795) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:28 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x68}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:28 executing program 4: r0 = socket(0x22, 0x6, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x26}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x26}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x32}]}, 0x48}}, 0x48c4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) r8 = socket(0x1a, 0x6, 0x0) r9 = socket(0x9, 0x1, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=[@dead_binder_done, @acquire={0x40046305, 0x1}], 0x8, 0x0, &(0x7f0000000080)="fb0165c0d127008e"}) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000001940)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x88, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffff8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r9}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x844}, 0x4000100) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:28 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x69}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2461.877612] __x64_sys_ioctl+0x6f/0xb0 [ 2461.891811] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2461.896395] do_syscall_64+0xf9/0x620 [ 2461.900204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2461.905390] RIP: 0033:0x4665e9 [ 2461.908583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2461.927485] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2461.935196] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2461.942464] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2461.942472] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2461.942480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2461.942492] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:28 executing program 2 (fault-call:10 fault-nth:29): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:28 executing program 3: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x80000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20088004) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x3a}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "3cee22c478d587ffe4d755af1e3fb415"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) 14:10:28 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x6a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:28 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x24000000) 14:10:28 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) r6 = socket(0x2, 0xa, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20040004) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xfffffffffffffdc2, 0x99, {0xce1, 0x59}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20044800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:28 executing program 4: r0 = socket(0x22, 0x3, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042abd7000fd693b2d034c88a5f800ef00040000000500ee00050000000800ef00020000000800ef000c0000000500ee00000000000800ef00010000000500ee00000000000500ee0009000000"], 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x80184947, 0x0) 14:10:28 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f0000000000)={"466f21b956ef882cc54302dcfad17f2e4770507c13d3a5c6e57a38104b08", 0x8, 0x1, 0x401, 0x5, 0x3, 0x20000000, 0xdac, 0x3, [0x3ff, 0xe4f5, 0xa1, 0xd56, 0x100, 0x0, 0x20, 0x0, 0x9, 0x7, 0x9, 0x40, 0xb, 0x3, 0x7fffffff, 0x9, 0xffffa49f, 0x0, 0x2]}) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) 14:10:28 executing program 4: r0 = socket(0x22, 0x3, 0x0) bind$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:28 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000140)={@initdev}, &(0x7f0000000180)=0x14) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x226, 0x70bd28, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040050}, 0x20000010) 14:10:28 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:28 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x6b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2462.140865] FAULT_INJECTION: forcing a failure. [ 2462.140865] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.182603] CPU: 1 PID: 8829 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2462.190533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.199906] Call Trace: [ 2462.202503] dump_stack+0x1fc/0x2ef [ 2462.206139] should_fail.cold+0xa/0xf [ 2462.209947] ? setup_fault_attr+0x200/0x200 [ 2462.214278] ? lock_acquire+0x170/0x3c0 [ 2462.218264] __should_failslab+0x115/0x180 [ 2462.222505] should_failslab+0x5/0x10 [ 2462.226310] kmem_cache_alloc_node_trace+0x244/0x3b0 14:10:29 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11200200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1000}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4080) syz_open_dev$vcsu(&(0x7f0000000000), 0x6, 0x20000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) [ 2462.231420] __kmalloc_node+0x38/0x70 [ 2462.235225] blk_mq_init_allocated_queue+0x178/0x1300 [ 2462.240415] ? blkcg_init_queue+0x1fd/0x540 [ 2462.244755] blk_mq_init_queue+0x5c/0xa0 [ 2462.248818] loop_add+0x2cb/0x8a0 [ 2462.252278] loop_control_ioctl+0x16c/0x480 [ 2462.256614] ? loop_lookup+0x1d0/0x1d0 [ 2462.260534] ? ksys_write+0x241/0x2a0 [ 2462.264343] ? loop_lookup+0x1d0/0x1d0 [ 2462.268249] do_vfs_ioctl+0xcdb/0x12e0 [ 2462.272160] ? lock_downgrade+0x720/0x720 [ 2462.272180] ? check_preemption_disabled+0x41/0x280 [ 2462.281348] ? ioctl_preallocate+0x200/0x200 [ 2462.281370] ? __fget+0x356/0x510 [ 2462.281385] ? do_dup2+0x450/0x450 [ 2462.281396] ? vfs_write+0x393/0x540 [ 2462.281411] ? fput+0x2b/0x190 [ 2462.281430] ksys_ioctl+0x9b/0xc0 [ 2462.281450] __x64_sys_ioctl+0x6f/0xb0 [ 2462.281475] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2462.311767] do_syscall_64+0xf9/0x620 [ 2462.311788] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2462.320738] RIP: 0033:0x4665e9 [ 2462.320751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.320757] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2462.320769] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2462.320777] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2462.320783] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.320790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 14:10:29 executing program 2 (fault-call:10 fault-nth:30): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:29 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:29 executing program 3: r0 = socket(0xa, 0x6, 0x40000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0xfffffffa, 0x0, 0x4, 0x10, 0xeb54, {0x0, 0xea60}, {0x4, 0xc, 0x7e, 0x7, 0x40, 0x3, "e2c8c3fb"}, 0x81, 0x4, @fd=r0, 0x3ff, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$vcsu(&(0x7f0000000080), 0x3, 0x40000) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000100)={0x0, 0x3, 0x4, 0x1000, 0xfffffffc, {r3, r4/1000+10000}, {0x5, 0x0, 0x8, 0x2d, 0x1, 0x81, "65f502cf"}, 0x2, 0x1, @fd, 0x3, 0x0, r1}) 14:10:29 executing program 0: r0 = socket(0x22, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), 0x4) 14:10:29 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x6c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2462.320798] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:29 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x6d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:29 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) 14:10:29 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000810) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:29 executing program 3: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000280)={0x9, 0x7, 0x4, 0x2000, 0x9, {}, {0x3, 0x8, 0x81, 0x4, 0x3f, 0x40, "a09e089d"}, 0x9, 0x2, @planes=&(0x7f0000000240)={0x8787, 0xfffffd2a, @mem_offset=0x18, 0xfffffffa}, 0xfffffff7, 0x0, r1}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) accept4$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@bcast, @remote, @remote, @null, @bcast, @bcast, @default, @default]}, &(0x7f0000000100)=0x9b, 0x80000) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000300)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f0000000340)={r3, 0x0, r2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) [ 2462.472669] FAULT_INJECTION: forcing a failure. [ 2462.472669] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.502791] CPU: 1 PID: 8848 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2462.510624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.519981] Call Trace: [ 2462.522575] dump_stack+0x1fc/0x2ef [ 2462.526207] should_fail.cold+0xa/0xf [ 2462.530019] ? setup_fault_attr+0x200/0x200 [ 2462.534337] ? mutex_trylock+0x1a0/0x1a0 [ 2462.538579] __should_failslab+0x115/0x180 [ 2462.538599] should_failslab+0x5/0x10 [ 2462.546697] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2462.551807] __kmalloc_node+0x38/0x70 [ 2462.555607] blk_mq_realloc_hw_ctxs+0x1d8/0x1000 [ 2462.555625] ? kmem_cache_alloc_node_trace+0x351/0x3b0 [ 2462.565667] blk_mq_init_allocated_queue+0x20c/0x1300 14:10:29 executing program 4: r0 = socket(0x22, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SNDCTL_TMR_START(r1, 0x5402) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) [ 2462.570864] ? blkcg_init_queue+0x1fd/0x540 [ 2462.575200] blk_mq_init_queue+0x5c/0xa0 [ 2462.579271] loop_add+0x2cb/0x8a0 [ 2462.582735] loop_control_ioctl+0x16c/0x480 [ 2462.587064] ? loop_lookup+0x1d0/0x1d0 [ 2462.587083] ? ksys_write+0x241/0x2a0 [ 2462.594745] ? loop_lookup+0x1d0/0x1d0 [ 2462.598638] do_vfs_ioctl+0xcdb/0x12e0 [ 2462.602532] ? lock_downgrade+0x720/0x720 [ 2462.606689] ? check_preemption_disabled+0x41/0x280 [ 2462.611709] ? ioctl_preallocate+0x200/0x200 [ 2462.616116] ? __fget+0x356/0x510 [ 2462.619571] ? do_dup2+0x450/0x450 [ 2462.623117] ? vfs_write+0x393/0x540 [ 2462.626836] ? fput+0x2b/0x190 [ 2462.630046] ksys_ioctl+0x9b/0xc0 [ 2462.633506] __x64_sys_ioctl+0x6f/0xb0 [ 2462.637422] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2462.637439] do_syscall_64+0xf9/0x620 [ 2462.637459] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2462.637472] RIP: 0033:0x4665e9 [ 2462.645831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:29 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)={0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c72a0df6b7cf35936447836c3cfb284"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1d395ed668b000747f3f53320821ce25113de095f73eab1c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="12e258308050a233754cc4a3becc4a3d"}]}]}, 0x74}}, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r0, 0xc01064c2, &(0x7f0000000040)={r1, 0x1}) 14:10:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r0) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0xffffffff, 0x2800) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="08002a8f1b3ccba30c4d1cd6bd7000fcdbdf", @ANYRES32=0x0, @ANYRESHEX=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x89) 14:10:29 executing program 2 (fault-call:10 fault-nth:31): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:29 executing program 5: r0 = socket(0x1e, 0x6, 0xffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020050}, 0x0) 14:10:29 executing program 0: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:29 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x6e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2462.673073] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2462.680789] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2462.688066] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2462.695333] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.702602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2462.709881] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:29 executing program 5: r0 = socket(0x26, 0x806, 0x80000003) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x31d}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x20004011) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80184947, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 14:10:29 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = socket(0x0, 0x5, 0xffff) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) recvmsg$can_raw(r0, &(0x7f0000001480)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000001340)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/45, 0x2d}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x4, &(0x7f0000001380)=""/227, 0xe3}, 0x2060) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r3}, {0x8, 0x1, r4}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x14}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:29 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x6f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:29 executing program 3: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket(0x22, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x120, 0x0, 0x83c, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x25}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5a}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x95}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x120}}, 0x800) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20a5}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c003f00000054f9bbbdeb0241b074e3a090c6ad296b61f8a341c5483e0b3021e169d65326320312c314e0273afd224fdb6b80b3301f1ac3604292c5ea09529bfaf79bda383e64e232b491d63f8d89fb621e6d43046aba4d5b9e6c06266b0c0809", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25020000000c00080061410000000000000c0004003f000000000000000c00050022000000000000000c0008007f000000000000001c00078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0c0006000000000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) [ 2462.868885] FAULT_INJECTION: forcing a failure. [ 2462.868885] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.926507] CPU: 0 PID: 8893 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2462.934334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2462.943779] Call Trace: [ 2462.946385] dump_stack+0x1fc/0x2ef [ 2462.950017] should_fail.cold+0xa/0xf [ 2462.950038] ? setup_fault_attr+0x200/0x200 [ 2462.950051] ? __debug_object_init+0x410/0x9b0 [ 2462.950071] __should_failslab+0x115/0x180 [ 2462.950088] should_failslab+0x5/0x10 [ 2462.970772] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2462.975891] __kmalloc_node+0x38/0x70 [ 2462.979702] blk_mq_realloc_hw_ctxs+0x568/0x1000 [ 2462.984478] blk_mq_init_allocated_queue+0x20c/0x1300 [ 2462.989690] ? blkcg_init_queue+0x1fd/0x540 [ 2462.994022] blk_mq_init_queue+0x5c/0xa0 [ 2462.998083] loop_add+0x2cb/0x8a0 [ 2462.998104] loop_control_ioctl+0x16c/0x480 [ 2462.998118] ? loop_lookup+0x1d0/0x1d0 [ 2462.998136] ? ksys_write+0x241/0x2a0 [ 2463.005891] ? loop_lookup+0x1d0/0x1d0 [ 2463.005909] do_vfs_ioctl+0xcdb/0x12e0 [ 2463.005925] ? lock_downgrade+0x720/0x720 14:10:29 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x70}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:29 executing program 0: socket(0x22, 0x3, 0x0) [ 2463.005943] ? check_preemption_disabled+0x41/0x280 [ 2463.030488] ? ioctl_preallocate+0x200/0x200 [ 2463.034911] ? __fget+0x356/0x510 [ 2463.038375] ? do_dup2+0x450/0x450 [ 2463.041914] ? vfs_write+0x393/0x540 [ 2463.045805] ? fput+0x2b/0x190 [ 2463.049009] ksys_ioctl+0x9b/0xc0 [ 2463.052472] __x64_sys_ioctl+0x6f/0xb0 [ 2463.056358] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2463.060923] do_syscall_64+0xf9/0x620 [ 2463.064708] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2463.069915] RIP: 0033:0x4665e9 [ 2463.073351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.092319] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2463.100012] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2463.107282] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2463.114638] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 14:10:29 executing program 2 (fault-call:10 fault-nth:32): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:29 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x71}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:29 executing program 0: r0 = socket(0x22, 0x3, 0x3ff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:29 executing program 5: r0 = socket(0x15, 0xa, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket(0x2a, 0x800, 0x7fff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000000)=0x2) 14:10:29 executing program 4: r0 = socket(0x2, 0xa, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) r4 = socket(0x22, 0x4361122704f853c2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x80184947, 0x0) 14:10:29 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) r5 = socket(0x2, 0xa, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r2, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a8b343447ba1"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ee225466642c"}, @NL80211_ATTR_MAC={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x20004841) [ 2463.121912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2463.129167] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:30 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x72}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:30 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) bind$can_raw(r1, &(0x7f0000000000), 0x10) 14:10:30 executing program 0: r0 = socket(0x2, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:30 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x103a00, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:30 executing program 5: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x10001) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044944, 0x0) 14:10:30 executing program 4: r0 = socket(0x18, 0x2, 0x100087) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) socket(0x6, 0x2, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SYNTH_INFO(r2, 0x5402, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={r1, 0x7f}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xce) bind$ax25(r3, &(0x7f0000000040)={{0x3, @bcast}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @default]}, 0x48) r4 = socket(0x2, 0xa, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x703, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1001}, 0x8000) [ 2463.321923] FAULT_INJECTION: forcing a failure. [ 2463.321923] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.378382] CPU: 1 PID: 8941 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2463.386203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.386208] Call Trace: [ 2463.386229] dump_stack+0x1fc/0x2ef [ 2463.386249] should_fail.cold+0xa/0xf [ 2463.386271] ? setup_fault_attr+0x200/0x200 [ 2463.405590] ? should_fail+0x142/0x7b0 [ 2463.405612] __should_failslab+0x115/0x180 [ 2463.418017] should_failslab+0x5/0x10 [ 2463.421825] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2463.426936] __kmalloc_node+0x38/0x70 [ 2463.430749] sbitmap_init_node+0x123/0x440 [ 2463.435016] blk_mq_realloc_hw_ctxs+0x5db/0x1000 [ 2463.439792] blk_mq_init_allocated_queue+0x20c/0x1300 [ 2463.439805] ? blkcg_init_queue+0x1fd/0x540 [ 2463.439827] blk_mq_init_queue+0x5c/0xa0 [ 2463.439842] loop_add+0x2cb/0x8a0 [ 2463.439859] loop_control_ioctl+0x16c/0x480 [ 2463.439872] ? loop_lookup+0x1d0/0x1d0 [ 2463.439891] ? ksys_write+0x241/0x2a0 [ 2463.439905] ? loop_lookup+0x1d0/0x1d0 [ 2463.439919] do_vfs_ioctl+0xcdb/0x12e0 [ 2463.439933] ? lock_downgrade+0x720/0x720 [ 2463.439951] ? check_preemption_disabled+0x41/0x280 [ 2463.449433] ? ioctl_preallocate+0x200/0x200 [ 2463.449451] ? __fget+0x356/0x510 [ 2463.449467] ? do_dup2+0x450/0x450 [ 2463.449479] ? vfs_write+0x393/0x540 [ 2463.449494] ? fput+0x2b/0x190 [ 2463.449513] ksys_ioctl+0x9b/0xc0 [ 2463.449530] __x64_sys_ioctl+0x6f/0xb0 [ 2463.449545] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2463.449561] do_syscall_64+0xf9/0x620 [ 2463.520236] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2463.525421] RIP: 0033:0x4665e9 [ 2463.528606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.547498] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2463.555193] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2463.562452] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2463.569715] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 14:10:30 executing program 2 (fault-call:10 fault-nth:33): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:30 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x73}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:30 executing program 0: r0 = socket(0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) socket(0x23, 0x800, 0x6) 14:10:30 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 14:10:30 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000080)={0x68c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0xcc, 0x33, @data_frame={@qos_ht={{{@type00={{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0xff}, @device_a, @device_a, @from_mac=@device_b, {0x2, 0x40}}, {0x1, 0x0, 0x1, 0x0, 0x2}}, {@type01={{0x0, 0x2, 0xa, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @from_mac=@broadcast, @initial, {0x5}}, {0x5, 0x1, 0x1, 0x1, 0x7}}}, @ver_80211n={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast}, {@broadcast, @device_a, 0x72, "c274a649b1eed658698fde88ae23a8c4cad3088e33edbed3b3f4c531b7262e0f49494479482468042db6c2091d97087d7ad75972740b160eaeab5e6951ddd345f03181cb179b0453a9fa89418ea228c31d0a9596bf59dd771f22bf823342e610078f9be0c495d530c3b2d7a06cc98acf447e"}]}}, @NL80211_ATTR_FRAME={0x5a2, 0x33, @data_frame={@qos_no_ht={{@type11={{0x0, 0x2, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @broadcast, {0x8, 0x2}, @broadcast}, {0x4, 0x0, 0x2, 0x0, 0x20}}, {@type00={{0x0, 0x2, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @broadcast, @from_mac=@device_b, {0x7, 0x6}}, {0x9, 0x1, 0x1, 0x1, 0x3}}}, @random="87dfc42cb9a62e2a1ec35c72dea6dcb4dee1a214858bca640aa12430773f078c9c08f77988cde6229530e2383bfd42590b16a8ce42248b526c5c78d73bbf5cfc80e3f3b59d653f942b6a9ced05a481829b79decf09e4b443836deb2dcb2fcec96834184a6a716ba60e902448d2d0b1170bb4a4e44a03c1a37830d141b20d86e56076ef6895ec8bb4e5569b084b3bce6c2c1a6707dd77aa51057bd0aafb8e0f5a0ebff87ba9931d96939454e7a3dd50186b3c488a04bafe214c2e2db69047d068a62d17d1ebf9aa2b2d725ab38740c589a8bddfdfc02298fa910d43ca95eb3d6f184f4a13cb449a1fa19c81a90f02d0ec766656ace761969016a19840712ac1d6f6932024ed0c9cbf3e78d81ba62d4e7f32075389765639c9e9a4d0cfe16d1d2cec11ecc4344ddede96ea600dcd4af695ab61a153af0bd131b8d7820f6e78b220ea68c1b20abd0bea33463c4a3c50fabf4258117883ec6fe3afbb9696784bcbe9475beca044af2d653259c554bca9b77cec11f8e31d73ff9f94cc63d73c9702683d39c3ee2d8e7c09c8e135fff87417a47c69f4693fef5e00bffc644ab3aaa5204aff5f58385f43c1ec09ce79a584cf9dfd378215853e2addef700c730a625f835a524d5019a09ac2b7215ff16968e83d3230fd5b4ffae36b3be6e741323e1762d9effd7ed29b1d45731b84ae6ee83a0dfea09ca77c758bd9605cb40f59018690fe4999d17ba7b7123ba2852e31f238aa3df7c7c97a967f246fb5a020758a0f75a3155b529639113f6b9c1274200ae20715858355f06a9e98dded5d47212c212b15caaba113e46a1ca5f8f46ca6e0cabc09adc68b319a1437b1363cfe550658819f0685ca1fb2168ea60b2e753d55ffa9cae970712c0e143806568a3d94c4355484e48b81b1049694cf77059ed57ff00d7fe6080512b9e1e96540b870be557098886f1e91cf7f848a6b5cea6aef352c409a28cf683ceda2c62fd73699a9734e38d21581ed86f0e5386d14b8de43bb796b38fe369753db4413f3886311fef04e49b321999347daafc9c2d7ee327c01ab447c40f6dbf57ded22c144c57f3c7e4249cdf61b453a990b1e6db44457eda919f1cc47d49d8b7ac8034169591676025bdfd854c8b2c324c2ad96c96927613a13b73383f41b742f33a34caf67a85f5d7afa5660984e9a8a8a3f345f966c49f11898926c769203aa7481bd3e39659768b6c14f2ad2b497cd5a52b08a52e22ca3858b88f28ffb21587c003276db10e25a81ecbbb7ada4bf0becaa22676357878a5ae0b526383a8c82364e6c5187731787a0db76409813c31ea3142fa28bf4c1b814b3f099e8a27e3f62334601f262b5ba1e739c86c914186952d520f52cf34361ef3b49cbf99f6086907a05d1ebf5764624b7a4fced6325d0e40cf428885c861595cab2a88bd982a6db6ec52721a1dd2122f544dc982f3a383fd92c8fbd6b040c1c3f80500ca1846577fb8e7a274eb94c2d73431a97ee3d253c7f24a05ac37e5e3f8d0fd6b017ada690fd937e0b9c66799deca73001c7b79174a7bed15ed5909a6b789af30714c32563ea9ce86eef6ed08217e12b3ef13ababdb023436d6b58d013f4b816f44c4a17f2c90850abc86d3b1929a0e34426353298e79c45eafb1ac56196713e0c9e0f5da3ca987faf8583a9b670aa61c84c1ff69fdb4661be2d53e243a9893dcccaaed856544b6ca1e0fb193ab4b97564075495cd083f74772fb7b564e85d0cf7f5232da2592baa32c0b778b57420d54caaa3f61a5ff10b70c1746753a49dad01ff1d06ba4a4dad9847b1f6ad1e3ad03a5b58073046caaf9110d70962bc1d1445d41cddff6eb1632967de5244ee55013d9292699ee50f47586b0933b7657279b1ebc982392f0888b158b4cca7f3afa96af7f25c6f52d582b1889e12bd192d9d0cf744a4b435eb84509a53d3e3386fb63842"}}]}, 0x68c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4008000) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044944, 0x0) 14:10:30 executing program 4: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x50, r3, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x39}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x50}}, 0x20000c0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002abd7000fedbdf2505000000080009000200000008001800ffffffff06000300f4ffffff630ea95d01de70032840366d1d9de107001800e00000f1"], 0x34}}, 0x4040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = socket(0x2, 0xa, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x709a00, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r1, 0x8004510a, &(0x7f00000002c0)) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x2048800}, 0x20008004) [ 2463.576965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2463.584223] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0x0, 0x99, {0xf8, 0x10}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x2, 0x9e, 0x32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4081}, 0x20000051) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x70bd2b, 0x7fffffff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_IDX={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2404c045) 14:10:30 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x74}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:30 executing program 0: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:30 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x2, 0x109800) r2 = socket(0x2, 0xa, 0x0) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x65}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc50}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r7, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:30 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x81, 0x24}}}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x6a3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7f}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xa, 0xbd, [0x7ff, 0x9, 0x6]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0xb}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}]}, 0x50}, 0x1, 0x0, 0x0, 0x40405}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r11, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r3, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xc5, 0x2c}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008004}, 0x40080) [ 2463.733679] FAULT_INJECTION: forcing a failure. [ 2463.733679] name failslab, interval 1, probability 0, space 0, times 0 [ 2463.787483] CPU: 1 PID: 8963 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2463.795392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2463.804754] Call Trace: [ 2463.807362] dump_stack+0x1fc/0x2ef [ 2463.811009] should_fail.cold+0xa/0xf [ 2463.814819] ? should_fail+0x142/0x7b0 [ 2463.818711] ? setup_fault_attr+0x200/0x200 [ 2463.823047] __should_failslab+0x115/0x180 [ 2463.823068] should_failslab+0x5/0x10 [ 2463.831079] kmem_cache_alloc_node_trace+0x244/0x3b0 14:10:30 executing program 3: r0 = socket(0x21, 0x3, 0xffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 2463.836283] blk_alloc_flush_queue+0x76/0x300 [ 2463.840789] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 2463.845570] blk_mq_init_allocated_queue+0x20c/0x1300 [ 2463.850768] ? blkcg_init_queue+0x1fd/0x540 [ 2463.855104] blk_mq_init_queue+0x5c/0xa0 [ 2463.859174] loop_add+0x2cb/0x8a0 [ 2463.862638] loop_control_ioctl+0x16c/0x480 [ 2463.866966] ? loop_lookup+0x1d0/0x1d0 [ 2463.870864] ? ksys_write+0x241/0x2a0 [ 2463.874668] ? loop_lookup+0x1d0/0x1d0 [ 2463.878557] do_vfs_ioctl+0xcdb/0x12e0 [ 2463.882465] ? lock_downgrade+0x720/0x720 [ 2463.886603] ? check_preemption_disabled+0x41/0x280 [ 2463.891617] ? ioctl_preallocate+0x200/0x200 [ 2463.896040] ? __fget+0x356/0x510 [ 2463.899487] ? do_dup2+0x450/0x450 [ 2463.903014] ? vfs_write+0x393/0x540 [ 2463.906711] ? fput+0x2b/0x190 [ 2463.909907] ksys_ioctl+0x9b/0xc0 [ 2463.913354] __x64_sys_ioctl+0x6f/0xb0 [ 2463.917225] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2463.921789] do_syscall_64+0xf9/0x620 [ 2463.925578] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2463.930759] RIP: 0033:0x4665e9 [ 2463.933947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2463.952833] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2463.960555] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2463.967808] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2463.975061] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 14:10:30 executing program 2 (fault-call:10 fault-nth:34): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:30 executing program 3: r0 = socket(0x22, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000000)={r2, 0x877}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:30 executing program 4: r0 = socket(0x22, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000428bd7000fedbdf25050000000500210000000000f9ffffffffffffff060003000300000008000a00ef00000005000d00000000000800090003000000"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x24000012) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x5f}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000880) 14:10:30 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x75}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:30 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x804) [ 2463.982310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2463.989569] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:30 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x76}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:30 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:30 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000208}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xffff}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x4040) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044942, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f00000001c0)={r3, 0x1, r4}) 14:10:30 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x80000001, 0x9}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000) 14:10:30 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x77}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:31 executing program 3: r0 = socket(0x22, 0x3, 0xfffffffc) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000000)=0xffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0x86, 0x82040) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r3, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x75}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="aee2499e4470"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="888eddc0309a"}, @NL80211_ATTR_MAC={0xa}]}, 0x74}}, 0x40044) [ 2464.181481] FAULT_INJECTION: forcing a failure. [ 2464.181481] name failslab, interval 1, probability 0, space 0, times 0 [ 2464.244737] CPU: 0 PID: 9006 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2464.252895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2464.252905] Call Trace: [ 2464.264855] dump_stack+0x1fc/0x2ef [ 2464.268524] should_fail.cold+0xa/0xf [ 2464.272336] ? setup_fault_attr+0x200/0x200 [ 2464.277100] ? should_fail+0x142/0x7b0 [ 2464.281008] __should_failslab+0x115/0x180 [ 2464.285256] should_failslab+0x5/0x10 [ 2464.289062] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2464.294169] __kmalloc_node+0x38/0x70 [ 2464.294186] blk_alloc_flush_queue+0x120/0x300 [ 2464.294208] blk_mq_realloc_hw_ctxs+0x7bc/0x1000 [ 2464.307320] blk_mq_init_allocated_queue+0x20c/0x1300 [ 2464.312533] ? blkcg_init_queue+0x1fd/0x540 [ 2464.312559] blk_mq_init_queue+0x5c/0xa0 [ 2464.312576] loop_add+0x2cb/0x8a0 [ 2464.324383] loop_control_ioctl+0x16c/0x480 [ 2464.328709] ? loop_lookup+0x1d0/0x1d0 [ 2464.332608] ? ksys_write+0x241/0x2a0 [ 2464.336419] ? loop_lookup+0x1d0/0x1d0 [ 2464.340318] do_vfs_ioctl+0xcdb/0x12e0 14:10:31 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "2c097c4dd1509312fe8c65175c3db53c"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "b48c1dac08ba15d5c3cfe7c165a40ddc"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cf157df6b225644adf0e4f70613a3f81"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "ea18516a74c19819179b698c11292475"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "aa1f2e1970afc84561e9fff0ee886116"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "58cb7bef935a9e879377292958582917"}, @NL80211_ATTR_MAC={0xa}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4810}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="190d00000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000480)={@dev, 0x0}, &(0x7f00000004c0)=0x14) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, r3, 0x10, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x40000) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="000080004b82e660ed1b2a672eefce8cfa1516be30c50267fdec41b55244119aeb8d8056b65fbd44cfe52efb38ef5890f81c499a68e45fc0916af7066d1645d7a4db82c0fe34089ad359feb68b137765c620f90cb27cfeab4dfe43b5abb65845e76b1ff16d7e56dad50cdaaebfaebed7e76b35e14dc2f8881a498663a90c3c68b299fe6e6c21d83214e87764615658eeec545cd47df36a4580269536128829aa4a4b08e1ea9553ca77de6b4ce4ad59ad7d09e1f29553d2ba33c8f200d2ddf616dd82bc39190129a62b", @ANYRES16=r6, @ANYBLOB="020029bd7000fddbdf257c00000008000300", @ANYRES32=0x0, @ANYBLOB="0a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000a0006000802110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000) [ 2464.344211] ? lock_downgrade+0x720/0x720 [ 2464.348365] ? check_preemption_disabled+0x41/0x280 [ 2464.353380] ? ioctl_preallocate+0x200/0x200 [ 2464.357774] ? __fget+0x356/0x510 [ 2464.361210] ? do_dup2+0x450/0x450 [ 2464.364774] ? vfs_write+0x393/0x540 [ 2464.368477] ? fput+0x2b/0x190 [ 2464.371659] ksys_ioctl+0x9b/0xc0 [ 2464.375106] __x64_sys_ioctl+0x6f/0xb0 [ 2464.378987] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2464.383551] do_syscall_64+0xf9/0x620 [ 2464.387340] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2464.392517] RIP: 0033:0x4665e9 [ 2464.395740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.414633] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2464.422325] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2464.429579] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2464.436850] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2464.444098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2464.451356] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:31 executing program 2 (fault-call:10 fault-nth:35): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:31 executing program 4: r0 = socket(0x28, 0x5, 0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:31 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = socket(0x18, 0x1, 0xacd2) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0xc8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x20000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="fd540caeae8b"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x40}}, 0x24044094) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000228bd7000fedbdf25060000000c0047c80e6b91aef4ee5b899900ffffffff51000000"], 0x20}}, 0x0) 14:10:31 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x78}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:31 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:31 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x36c, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x34c, 0x33, @mgmt_frame=@reassoc_req={@with_ht={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x7}, @device_b, @device_b, @from_mac=@broadcast, {0x2, 0x945}}, @ver_80211n={0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x603, 0x9, @device_a, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x5}, {0x36}, {0x2f, 0x1}, {0x1, 0x1}, {0x18, 0x1}, {0x12, 0x1}, {0x3}, {0x5}]}, @void, [{0xdd, 0xb5, "9badbf1b5226d5e86ac82cb1e0730dceaa404a7b2da224ede7cd1416d0a04a85d9a210001372bd947c7e0ad5783575c2219edeaebb1607046d7b2475e927c64550841d54f14d909b61f9ffef6a0b2b48a08211b439ab534e4e2838ec642ee9e9c5d387b55465a78fa35088fc5f36849ae92211dd37be1c268dc9a26bc0b0af7bfe170197a866b6ae3480bc36def7aaa8c3c83060bf8dfde9ff8dee3bef2c957f9e49f26943de7fbc8f13c816011eee7f5a8d5f54cd"}, {0xdd, 0xda, "e31d1b5cf38783878c6755e90599032ef431958cbe8e30e59948bc38dcb1f4223090bfdd341a85e7b66e4d2c8f06cd2fc5d762658cdb3d7c29d91f221abdc81a7e517f74f1be8b9a7ceef09bc495ac3d46a40461741d3cbc2602d53238e896c60b54243ee067ad61cc86d8bc194ae88266c850918ba9e7c7d1a3476267cc793b7c8370437902c7ceeedcea9ea2257465b6f928148c7e07f01fea134cd6566b82e84345c8d81f1b0d5294824c42fc604d7ed12606a6bb822c3c79aa28dcf02d0484af1b136a6da320d69bffc2e96c813e8e38879b3c58ebbd5ee3"}, {0xdd, 0x4e, "5de631d4663c8801dd41f480a6f08b7b8c07e465d408792481d8b1e569aac26bc27c6457efb2f7779baaf321da62dc0a4d79edd3de2918b02b509b8015921c5902e0fa3c9ecd3fb326d1e45fe91c"}, {0xdd, 0x30, "3c1e256295e8c693cba0f5ddd1e4679ce5743ef088ce88a17a6c6976d986a367bea3e81a967fca71ccff2501290e1fe6"}, {0xdd, 0xa7, "bf244900d5e05bf45175e51a7201d7d61e22da092361f7ea011ca5c80440baac3442475d0494405b913718b0b260cb665d47fa5bbc67fdc7db83ecb5b7685ecd8b5fb1d10ec7a39edf066573ab3ed64a14f4253be6eec54e9c10b0ee66e9481a93e8f6a6f0405bcf4c79be9a9a85a9838f849349e02fc4bfb44abbd8f170efbab2ad71c3039e3b427b37e53015f9482bd455a7942d25e177915a2a36cfda550c9ec16da80d6a9d"}, {0xdd, 0x2a, "ff28125120b5e0ec112dfc36931633b7999a277306b77649eac960a74fb282ad3b8210b1147bf8d5ab37"}, {0xdd, 0x24, "ac8f49db4dddb23bac139e85145c1369eae84715c3e6597487070789ec7621d5f9c8cba7"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x36c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000080)={0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000280)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x1}) accept$ax25(r0, &(0x7f00000001c0)={{0x3, @rose}, [@netrom, @rose, @bcast, @rose, @null, @bcast, @default, @default]}, &(0x7f0000000240)=0x48) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, r1, r2, 0x0, 0x0, r4, 0x0, r5], 0x9}) 14:10:31 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 14:10:31 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x79}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:31 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 14:10:31 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x9}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x4084) r4 = socket(0x2, 0xa, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x371}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 14:10:31 executing program 0: r0 = socket(0x22, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2464.612072] FAULT_INJECTION: forcing a failure. [ 2464.612072] name failslab, interval 1, probability 0, space 0, times 0 14:10:31 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x7a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2464.654289] CPU: 0 PID: 9044 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2464.662117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2464.671472] Call Trace: [ 2464.674071] dump_stack+0x1fc/0x2ef [ 2464.677708] should_fail.cold+0xa/0xf [ 2464.681521] ? setup_fault_attr+0x200/0x200 [ 2464.685849] ? lock_acquire+0x170/0x3c0 [ 2464.689832] __should_failslab+0x115/0x180 [ 2464.694072] should_failslab+0x5/0x10 [ 2464.697881] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2464.702994] blk_mq_init_tags+0x6a/0x2b0 [ 2464.707060] blk_mq_alloc_rq_map+0x9d/0x230 [ 2464.707072] ? elevator_get+0x29/0x170 [ 2464.707088] blk_mq_init_sched+0x219/0x730 [ 2464.719501] elevator_init_mq+0xf0/0x180 [ 2464.723568] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2464.728770] blk_mq_init_queue+0x5c/0xa0 [ 2464.732854] loop_add+0x2cb/0x8a0 [ 2464.732874] loop_control_ioctl+0x16c/0x480 [ 2464.732889] ? loop_lookup+0x1d0/0x1d0 [ 2464.744513] ? ksys_write+0x241/0x2a0 [ 2464.748318] ? loop_lookup+0x1d0/0x1d0 [ 2464.752201] do_vfs_ioctl+0xcdb/0x12e0 [ 2464.756083] ? lock_downgrade+0x720/0x720 [ 2464.760223] ? check_preemption_disabled+0x41/0x280 [ 2464.765223] ? ioctl_preallocate+0x200/0x200 [ 2464.769617] ? __fget+0x356/0x510 [ 2464.773054] ? do_dup2+0x450/0x450 [ 2464.776577] ? vfs_write+0x393/0x540 [ 2464.780277] ? fput+0x2b/0x190 [ 2464.783479] ksys_ioctl+0x9b/0xc0 [ 2464.786920] __x64_sys_ioctl+0x6f/0xb0 [ 2464.790791] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2464.795362] do_syscall_64+0xf9/0x620 [ 2464.799164] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2464.804333] RIP: 0033:0x4665e9 [ 2464.807521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2464.826420] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2464.834129] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2464.841381] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 14:10:31 executing program 2 (fault-call:10 fault-nth:36): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:31 executing program 4: r0 = socket(0x22, 0x3, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x78, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:31 executing program 0: r0 = socket(0x22, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd66, 0x6d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4008110) 14:10:31 executing program 3: socket(0x22, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) [ 2464.848637] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2464.855919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2464.863179] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:31 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x7b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:31 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r1, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x29}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x28}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 14:10:31 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[{0x3ff, 0x21, 0x5, 0x7fff}, {0x3c, 0x80, 0xa9, 0x7}, {0xff3a, 0x5, 0x81, 0x3}, {0x8, 0x4, 0x2}, {0xfbef, 0x7, 0x20, 0x81}, {0x1, 0x8, 0x7f, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000004c0)={0x0, 0x0, r0, 0x1f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb5e471dc295118b7}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x4000814) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f0000000000)=0x7) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = socket(0x2, 0xa, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e158d11154be257cdf55abdcd8f4bc670f0e23cfda467193"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004880}, 0xd0) 14:10:31 executing program 4: r0 = socket(0x33, 0x0, 0x2800) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x644100, 0x0) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 14:10:31 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x7c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2464.998335] FAULT_INJECTION: forcing a failure. [ 2464.998335] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.025535] CPU: 0 PID: 9067 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2465.033358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2465.042714] Call Trace: 14:10:31 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffd, 0x5e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x40000) [ 2465.045325] dump_stack+0x1fc/0x2ef [ 2465.048970] should_fail.cold+0xa/0xf [ 2465.052784] ? setup_fault_attr+0x200/0x200 [ 2465.057113] ? lock_acquire+0x170/0x3c0 [ 2465.061101] __should_failslab+0x115/0x180 [ 2465.065343] should_failslab+0x5/0x10 [ 2465.069145] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2465.074434] __kmalloc_node+0x38/0x70 [ 2465.078242] sbitmap_init_node+0x123/0x440 [ 2465.082484] sbitmap_queue_init_node+0x37/0x6c0 [ 2465.087164] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 2465.092185] blk_mq_init_tags+0x10d/0x2b0 14:10:31 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x7d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2465.092205] blk_mq_alloc_rq_map+0x9d/0x230 [ 2465.092216] ? elevator_get+0x29/0x170 [ 2465.092233] blk_mq_init_sched+0x219/0x730 [ 2465.092256] elevator_init_mq+0xf0/0x180 [ 2465.092270] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2465.092292] blk_mq_init_queue+0x5c/0xa0 [ 2465.122103] loop_add+0x2cb/0x8a0 [ 2465.125571] loop_control_ioctl+0x16c/0x480 [ 2465.129903] ? loop_lookup+0x1d0/0x1d0 [ 2465.133806] ? ksys_write+0x241/0x2a0 [ 2465.137612] ? loop_lookup+0x1d0/0x1d0 [ 2465.141508] do_vfs_ioctl+0xcdb/0x12e0 14:10:31 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x7e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2465.145401] ? lock_downgrade+0x720/0x720 [ 2465.149552] ? check_preemption_disabled+0x41/0x280 [ 2465.154566] ? ioctl_preallocate+0x200/0x200 [ 2465.154587] ? __fget+0x356/0x510 [ 2465.154602] ? do_dup2+0x450/0x450 [ 2465.154617] ? vfs_write+0x393/0x540 [ 2465.169677] ? fput+0x2b/0x190 [ 2465.172878] ksys_ioctl+0x9b/0xc0 [ 2465.176342] __x64_sys_ioctl+0x6f/0xb0 [ 2465.180279] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2465.184868] do_syscall_64+0xf9/0x620 [ 2465.188677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2465.193862] RIP: 0033:0x4665e9 [ 2465.197048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.216076] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2465.223901] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2465.231159] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2465.238433] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 14:10:32 executing program 2 (fault-call:10 fault-nth:37): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:32 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044010}, 0xc0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x412, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x404c0a0}, 0x4000080) 14:10:32 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SNDCTL_TMR_START(r1, 0x5402) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x844) 14:10:32 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="30010000", @ANYRES16=r3, @ANYBLOB="000225bd7000fedbdf251200000006001401652f000008001400", @ANYRES32=0x0, @ANYBLOB="2800ac009fd10f3fc3abec6bdd358d3b0033e19b9d8a6e79dab3c45a7fd9a7aad3b75b47188d70bf050029000c00000006001200040000007a00ac00d182bae7fac8b9147ed17af0871b8ade86e12c83101be0a898d51c18c5c671ca9546abc16dcbad17abfe8ab1d67e80690a5fc5d6404b43e81b0ac204dbbe66b6a5be1818f7f41c11777760fbd6503cb54d34abe16f9ac93e3858dfe4bd11a561eaba32a9b4f6ec6dbaff4abaa6933c82d0d133c2df23000006001a01030000004c008100050002000500000005000100800000000500020006000000050001000500000005000100000000000500e02ad90bd7e5fc590200080000000500010005000000050002004000000004008100"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2465.245702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2465.252990] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:32 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r1, 0x5403) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:32 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x82}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2465.376017] FAULT_INJECTION: forcing a failure. [ 2465.376017] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.401934] CPU: 1 PID: 9096 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2465.409753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2465.419104] Call Trace: [ 2465.421701] dump_stack+0x1fc/0x2ef [ 2465.425340] should_fail.cold+0xa/0xf [ 2465.429155] ? setup_fault_attr+0x200/0x200 [ 2465.433483] ? lock_acquire+0x170/0x3c0 [ 2465.437467] __should_failslab+0x115/0x180 [ 2465.441716] should_failslab+0x5/0x10 [ 2465.445519] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2465.450636] sbitmap_queue_init_node+0x240/0x6c0 [ 2465.455405] blk_mq_init_tags+0x10d/0x2b0 [ 2465.459565] blk_mq_alloc_rq_map+0x9d/0x230 [ 2465.463897] ? elevator_get+0x29/0x170 [ 2465.467791] blk_mq_init_sched+0x219/0x730 [ 2465.472127] elevator_init_mq+0xf0/0x180 14:10:32 executing program 0: r0 = socket(0x22, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:32 executing program 3: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:32 executing program 3: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:32 executing program 0: r0 = socket(0x22, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2465.476196] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2465.481405] blk_mq_init_queue+0x5c/0xa0 [ 2465.485476] loop_add+0x2cb/0x8a0 [ 2465.488943] loop_control_ioctl+0x16c/0x480 [ 2465.493271] ? loop_lookup+0x1d0/0x1d0 [ 2465.497171] ? ksys_write+0x241/0x2a0 [ 2465.500978] ? loop_lookup+0x1d0/0x1d0 [ 2465.504875] do_vfs_ioctl+0xcdb/0x12e0 [ 2465.508768] ? lock_downgrade+0x720/0x720 [ 2465.512927] ? check_preemption_disabled+0x41/0x280 [ 2465.518134] ? ioctl_preallocate+0x200/0x200 [ 2465.522549] ? __fget+0x356/0x510 14:10:32 executing program 3: r0 = socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2465.526007] ? do_dup2+0x450/0x450 [ 2465.529546] ? vfs_write+0x393/0x540 [ 2465.533265] ? fput+0x2b/0x190 [ 2465.536466] ksys_ioctl+0x9b/0xc0 [ 2465.539923] __x64_sys_ioctl+0x6f/0xb0 [ 2465.543815] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2465.548401] do_syscall_64+0xf9/0x620 [ 2465.552209] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2465.557400] RIP: 0033:0x4665e9 14:10:32 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x93b4, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5dab434fc127"}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c801}, 0x4004) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x212080, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000280)) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r7) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x10200, 0x0) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r4}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8592}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8, 0x1, r0}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x42000}, 0x4000) [ 2465.560594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2465.579507] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2465.587225] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2465.594500] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2465.601777] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2465.609052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2465.616324] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:32 executing program 2 (fault-call:10 fault-nth:38): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:32 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:32 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:32 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x83}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:32 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:32 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x84}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2465.777392] FAULT_INJECTION: forcing a failure. [ 2465.777392] name failslab, interval 1, probability 0, space 0, times 0 [ 2465.799680] CPU: 1 PID: 9133 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2465.807499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2465.816853] Call Trace: [ 2465.819449] dump_stack+0x1fc/0x2ef [ 2465.823088] should_fail.cold+0xa/0xf 14:10:32 executing program 0: r0 = socket(0x22, 0x3, 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x400c004) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000140)=0x85) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80044942, 0x0) [ 2465.826903] ? setup_fault_attr+0x200/0x200 [ 2465.831228] ? lock_acquire+0x170/0x3c0 [ 2465.835219] __should_failslab+0x115/0x180 [ 2465.839471] should_failslab+0x5/0x10 [ 2465.843285] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2465.848396] sbitmap_queue_init_node+0x240/0x6c0 [ 2465.853166] blk_mq_init_tags+0x16f/0x2b0 [ 2465.857324] blk_mq_alloc_rq_map+0x9d/0x230 [ 2465.861643] ? elevator_get+0x29/0x170 [ 2465.865533] blk_mq_init_sched+0x219/0x730 [ 2465.869782] elevator_init_mq+0xf0/0x180 [ 2465.874204] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2465.879419] blk_mq_init_queue+0x5c/0xa0 [ 2465.883490] loop_add+0x2cb/0x8a0 [ 2465.886956] loop_control_ioctl+0x16c/0x480 [ 2465.891291] ? loop_lookup+0x1d0/0x1d0 [ 2465.895188] ? ksys_write+0x241/0x2a0 [ 2465.898993] ? loop_lookup+0x1d0/0x1d0 [ 2465.902891] do_vfs_ioctl+0xcdb/0x12e0 [ 2465.906789] ? lock_downgrade+0x720/0x720 [ 2465.910942] ? check_preemption_disabled+0x41/0x280 [ 2465.915968] ? ioctl_preallocate+0x200/0x200 [ 2465.920412] ? __fget+0x356/0x510 [ 2465.923882] ? do_dup2+0x450/0x450 14:10:32 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r1, 0x200, 0x70bd28, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x9e2, @link='syz1\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004891}, 0x4040000) 14:10:32 executing program 5: r0 = socket(0x22, 0x3, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080028bd25010000000000000002410000001000136574683a3cf6183ad1bfd3699b1676926970366772653000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000a80)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000a00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000140)={0x5f8, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@ack={{}, {0x3}, @device_b}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x5c0, 0x33, @data_frame={@qos_ht={{{@type11={{0x0, 0x2, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x5}, @device_a, @device_b, @broadcast, {0x4, 0x6}, @device_b}, {0x5, 0x0, 0x3, 0x0, 0x2}}, {@type01={{0x0, 0x2, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {}, @broadcast, @from_mac, @random="1c5d276272dc", {0x6, 0x2}}, {0x3, 0x1, 0x0, 0x1, 0x5}}}, @ver_80211n={0x0, 0x8, 0x2, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1}}, @random="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"}}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4044041}, 0x8c0) [ 2465.927421] ? vfs_write+0x393/0x540 [ 2465.931140] ? fput+0x2b/0x190 [ 2465.934348] ksys_ioctl+0x9b/0xc0 [ 2465.937811] __x64_sys_ioctl+0x6f/0xb0 [ 2465.941700] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2465.946318] do_syscall_64+0xf9/0x620 [ 2465.950130] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2465.955321] RIP: 0033:0x4665e9 [ 2465.958727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:32 executing program 3: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:32 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x85}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2465.978063] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2465.985776] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2465.993050] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2466.000497] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.007761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.007770] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:32 executing program 0: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:32 executing program 2 (fault-call:10 fault-nth:39): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:32 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:32 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r2, 0x2, 0x136, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5e6, 0x5}}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xce}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x40}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008844}, 0x40000) 14:10:32 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x501100, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f00000001c0)) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x80}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffff8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x401}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x578}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) 14:10:32 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r2, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x8}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x4004800) 14:10:32 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x86}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:33 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x87}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:33 executing program 4: sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44880}, 0x40) r0 = socket(0x25, 0x804, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x600, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x20040800) 14:10:33 executing program 5: socket(0x1e, 0x3, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000040)={0xb60, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0xe, 0x33, @ctrl_frame=@cts={{}, {0x7f6a}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x254, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1}, {0x4}, @initial, @device_a, @device_a, {0x1, 0x1}}, {0x6, 0x1, 0x1, 0x0, 0x5}}, {@type00={{0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_b, @random="63379b54726c", {0x3, 0x80}}, {0xa, 0x0, 0x0, 0x1, 0x3}}}, @a_msdu=[{@device_a, @broadcast, 0x68, "af6a34499086915307bb9da9b1cfbe10e2f39c76aa4600715be1c2aaf03cab18720a92bdc64de23bc2340398af529856c8bcf89b7f4bbde1b6841454f31ba7d8b48a966eaa36091e40308e2f9061471cdddba8c19c88228619b4fc4b03ce27f97a00238bc32bf824"}, {@broadcast, @broadcast, 0x85, "f43fe651edc27b9f35b781f0a3319d43e990d29d8f52758d58b4771f4ada59f69458526f399ff1999dadeb8df07e37a7c5dc065fbabbb70ef90c31c55c4f6b342b64239d77f95637e44762733b8b97fc4ad26b96805dd71721b6792aed19b0bc6af8858b2e9d9dfc0b327a2ba783171214cde5421b7499aa9c8a83514a636d9e8293f2f341"}, {@device_b, @device_b, 0xc2, "f0b077cd81288a9bc911d2131390e8e368052fbb69515c10e53c05b4ad74b455e7c0943e2b87f20176d235b802410334e0f871e87a6943847e0a5f4f44e61f8c0d72eebd3547fe2c1192933be2e286d9f8de36fe3658368d0647d18c83237423b88068d8bbb19e57a968f82f3806a60273da41392f25eb881de6e3265fc45a91fe8c2f36ecc7f7091c5f1a88c02ac18585ea6d52ad0dee5ca7a54dea170a407cb0541035d6df78924cafc53cc1d6a1152d7384deed32154801ae34350b23bb6ed7b1"}, {@device_a, @device_b, 0x30, "c52ff8ec053ff677baadc2815338e5c9694b5b640ac0fdf3bc49113d7531fe4bd2f1140966deef389359b403dccef969"}]}}, @NL80211_ATTR_FRAME={0x4f0, 0x33, @data_frame={@qos_no_ht={{@type10={{0x0, 0x2, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, {0xa57}, @random="6e07de329d61", @device_a, @device_b, {0x8}}, {0xc, 0x0, 0x0, 0x0, 0x3e}}, {@type11={{0x0, 0x2, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x7f}, @broadcast, @broadcast, @random="ec2a6bd003fb", {0x4, 0x2}, @device_b}, {0xa, 0x0, 0x3, 0x1, 0x3a}}}, @random="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"}}, @NL80211_ATTR_FRAME={0x290, 0x33, @data_frame={@no_qos=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @from_mac, @device_b, @device_a, {0x9, 0x5}}, @a_msdu=[{@device_b, @device_b, 0x1f, "c8d3a92acede6c94f823af34a082d67369eba25024000cf295cf8110c5fa95"}, {@broadcast, @broadcast, 0xad, "8eaf58bb0694bf102d1f4045e4af692387c8a4cbe5ba2fd2d48b3ed35a02c4d55a44ff78f971528e516028dde3864e6173418f94e6d5bb0b7ef1cbe19ff2621cc1c329bc2c273c107cedaeb287d89e3ed79cae9d2737b6e18ff33f6fec71ff539abfc5890b9468a4d94b8bdbc3fdad72d6dc5e80d601d990ccabc17cf5f09822a83c2b539fbfeb922a5aba00f153fcc66b7fba14be6d92da24e765984dcffc0f599b106ddc94ef2c8b25f68c62"}, {@device_b, @device_a, 0x27, "5cf2c957a16c8ff0bf0f3d95ddb67451a491610cc28f1c52e930caa9edf4158ff8c7bfbec31263"}, {@device_b, @device_b, 0x9a, "8f383b03df41639e33e3dc65cfa042c05aafe20fbebedf05634fe5946a2aa26a21c21a8a871921cecb0b3634a7bc5a0ee6cf7a58e0b7c9a3167e715169028d3dddc3039a3a63b733a6cfcdc855de15739f93a129dcf4a2ef54ca102d7161a4567cd1484e38d7b1cd20cec056f918b806964b37cbec0a2921c2bb1dda9debabc8d72409b082e8c3fc8a5e9d7c8accf6e9b64e9c4ced036a093c17"}, {@device_b, @broadcast, 0x97, "64f1e4fbdb35dbe31758b1a866ac3472861f3fffe06baf5ea77623a4b8c341311e135caa7ca5b2e8e0592705c3ec2cafd2e2a340cf08dece3a6a2a967b4bb484882c4b519ba4577f68f3be3cbff679703016033f5c65e33bc83ddd73405f5424ce12764295358d88642f80060868d6139d21d83f75881c277a25d4b360901871c3ae87d3a6893b7a79ee27f8efba117a7f8f70ee2abc3e"}]}}, @NL80211_ATTR_FRAME={0x152, 0x33, @data_frame={@qos_ht={{{@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x1}, {0xb9d}, @device_a, @initial, @broadcast, {0x2, 0x80}}, {0x6, 0x0, 0x1, 0x0, 0xff}}, {@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x1}, {0x3f}, @device_b, @device_a, @initial, {0x5, 0xe81}, @broadcast}, {0x8, 0x0, 0x0, 0x1, 0x6}}}, @ver_80211n={0x0, 0x3, 0x1, 0x1}}, @a_msdu=[{@broadcast, @broadcast, 0x28, "7702d85569cc4e086ab7f56620ae25e8999036da87296f9e9a1a5515210f3cae15f0a147d2c15b2a"}, {@broadcast, @device_a, 0x6d, "1ee799119989030f15013f8587a4d3bf65a5fa037c04d21a5bb6e8afc94e0f5c45e440ce4d9f7089d46b6e6e56394ca52630914a93035039baf365f7f6a735d9fa84615e30cad18a879d629a2b350198fed9203f75765015841dd5bda64fec5213577e617dfa378b85653b7846"}, {@device_a, @device_a, 0x4e, "80d97d43e9dbae26d3354d871b0e537adb82f5305b5b77848285501d3c3fe48da400ec33dcd02e8cbd175be107304c328e7e46ce929098ae6bb63f107eac5caf4d49ccccb62e46ec8ed10d513aca"}]}}]}, 0xb60}}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200029bd7000fddbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900030000004b0000000a001a00ffffffffffff06000a001a00ffffffffffff00000a001a00ffffffffffff00000a001a0008021100000100000a001a010002110000000000c83d8ec6383a09d2a672f9f8a9ea1734962c3ee27412d75dbfe21af3ef525cbe36770adedf262fe056c176cd60730c19a780376446c4d15b18b2e26ffc6f12f42c42b51f886545ba600d27ba9e05a2905bdbf602f3aa272bceeb79b10be8ac69db8827b42f143d2d7640105946201f75f39b2891cd10fdc2ed5ec593e765f77d494927d750c512f234ec3787e5aca209009d65e963477352f201b56b169f48eaeea91e770777e2a5524d2343"], 0x64}, 0x1, 0x0, 0x0, 0x20008044}, 0x40000) 14:10:33 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:33 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000100)) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20231400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x113cc9bb3bc526d5}, 0x4800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="2396c58b95b9"}]}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x800) [ 2466.275253] FAULT_INJECTION: forcing a failure. [ 2466.275253] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.305953] CPU: 1 PID: 9173 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2466.313784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 14:10:33 executing program 3: r0 = socket(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2466.323402] Call Trace: [ 2466.326000] dump_stack+0x1fc/0x2ef [ 2466.329641] should_fail.cold+0xa/0xf [ 2466.333460] ? setup_fault_attr+0x200/0x200 [ 2466.337785] ? __lockdep_init_map+0x100/0x5a0 [ 2466.337807] __should_failslab+0x115/0x180 [ 2466.337825] should_failslab+0x5/0x10 [ 2466.350343] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2466.350361] __kmalloc_node+0x38/0x70 [ 2466.350379] blk_mq_alloc_rq_map+0xdf/0x230 [ 2466.350392] ? elevator_get+0x29/0x170 [ 2466.350406] blk_mq_init_sched+0x219/0x730 [ 2466.350424] elevator_init_mq+0xf0/0x180 [ 2466.350439] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2466.350461] blk_mq_init_queue+0x5c/0xa0 [ 2466.350475] loop_add+0x2cb/0x8a0 [ 2466.350498] loop_control_ioctl+0x16c/0x480 [ 2466.392768] ? loop_lookup+0x1d0/0x1d0 [ 2466.396671] ? ksys_write+0x241/0x2a0 [ 2466.400485] ? loop_lookup+0x1d0/0x1d0 [ 2466.404383] do_vfs_ioctl+0xcdb/0x12e0 [ 2466.408274] ? lock_downgrade+0x720/0x720 [ 2466.412433] ? check_preemption_disabled+0x41/0x280 [ 2466.417454] ? ioctl_preallocate+0x200/0x200 [ 2466.421870] ? __fget+0x356/0x510 [ 2466.425330] ? do_dup2+0x450/0x450 [ 2466.428871] ? vfs_write+0x393/0x540 [ 2466.432647] ? fput+0x2b/0x190 [ 2466.435854] ksys_ioctl+0x9b/0xc0 [ 2466.439315] __x64_sys_ioctl+0x6f/0xb0 [ 2466.443205] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2466.447795] do_syscall_64+0xf9/0x620 [ 2466.451601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2466.456771] RIP: 0033:0x4665e9 14:10:33 executing program 2 (fault-call:10 fault-nth:40): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:33 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xff11, 0x1a}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x9801}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:33 executing program 3: r0 = socket(0x2b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:33 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0xfffffffffffffe11, r1, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40088c4) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x59074559}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x404c840) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x40, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fffffff, 0x71}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x207}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}]}, 0x40}}, 0x1) 14:10:33 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x88}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:33 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@default, @bcast, @default, @null, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) [ 2466.459950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.479354] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2466.487078] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2466.494330] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2466.501589] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.508844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.516100] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:33 executing program 3: r0 = socket(0x2b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:33 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000001}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9b}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x8550312e9108bdd2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0xc001) 14:10:33 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x89}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:33 executing program 3: r0 = socket(0x2b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:33 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000000}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) [ 2466.661964] FAULT_INJECTION: forcing a failure. [ 2466.661964] name failslab, interval 1, probability 0, space 0, times 0 14:10:33 executing program 3: socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) [ 2466.735235] CPU: 0 PID: 9212 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2466.743052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2466.743057] Call Trace: [ 2466.743080] dump_stack+0x1fc/0x2ef [ 2466.743101] should_fail.cold+0xa/0xf [ 2466.743119] ? setup_fault_attr+0x200/0x200 [ 2466.758656] ? __lockdep_init_map+0x100/0x5a0 [ 2466.771230] __should_failslab+0x115/0x180 [ 2466.775470] should_failslab+0x5/0x10 [ 2466.779273] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2466.784390] __kmalloc_node+0x38/0x70 [ 2466.788287] blk_mq_alloc_rq_map+0x120/0x230 [ 2466.792698] ? elevator_get+0x29/0x170 [ 2466.796595] blk_mq_init_sched+0x219/0x730 [ 2466.800843] elevator_init_mq+0xf0/0x180 [ 2466.804909] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2466.810111] blk_mq_init_queue+0x5c/0xa0 [ 2466.814179] loop_add+0x2cb/0x8a0 [ 2466.817646] loop_control_ioctl+0x16c/0x480 [ 2466.821972] ? loop_lookup+0x1d0/0x1d0 [ 2466.825869] ? ksys_write+0x241/0x2a0 [ 2466.829680] ? loop_lookup+0x1d0/0x1d0 [ 2466.833577] do_vfs_ioctl+0xcdb/0x12e0 [ 2466.837472] ? lock_downgrade+0x720/0x720 [ 2466.841623] ? check_preemption_disabled+0x41/0x280 [ 2466.846652] ? ioctl_preallocate+0x200/0x200 [ 2466.851095] ? __fget+0x356/0x510 [ 2466.854533] ? do_dup2+0x450/0x450 [ 2466.858182] ? vfs_write+0x393/0x540 [ 2466.861877] ? fput+0x2b/0x190 [ 2466.865061] ksys_ioctl+0x9b/0xc0 [ 2466.868498] __x64_sys_ioctl+0x6f/0xb0 [ 2466.872370] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2466.876932] do_syscall_64+0xf9/0x620 [ 2466.880718] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2466.885889] RIP: 0033:0x4665e9 [ 2466.889064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2466.907997] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2466.915701] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2466.922951] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 14:10:33 executing program 5: r0 = socket(0x18, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:33 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x41102, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x10, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000081) ioctl$SNDCTL_TMR_CONTINUE(r1, 0x5404) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = socket(0x2, 0xa, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, r7, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1bcc000, 0x49}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c091}, 0x80) read$sequencer(r1, &(0x7f0000000380)=""/7, 0x7) ioctl$SNDCTL_TMR_START(r1, 0x5402) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000002bc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002b80)={&(0x7f0000000080)={0x19c, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:33 executing program 4: r0 = socket(0x3, 0x800, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = socket(0x6, 0x3, 0x2) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC, @ANYBLOB="00042cbd7000fddbdf254900000008000300", @ANYRES32=0x0, @ANYBLOB="331addf78f07ee2523169b851b36d4c368681f0bd3980776e061e95ac763a702e183036875ed76501ce0722cacba0a547eefd1ea77631bd3efa0ce9e2c341aae8aaf5dd973134e28c2fb5b33ddbaf2628dce1a1df5b372738fd636927ff4"], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, r4, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x6a}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4040018}, 0x196d92179670cb41) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xf0, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf8eac03f76ff83e9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x400c848}, 0x4000004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14}, 0x14}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xd13}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) 14:10:33 executing program 2 (fault-call:10 fault-nth:41): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:33 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x8a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:33 executing program 3: socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) [ 2466.930201] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2466.937458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2466.944720] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:33 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9d001700a807eb3bf912559a079c703e1924c488917db4133cb14b9e46cc5ffb9398a4f597cd96d76f8a04ab82c79bc5b7966287c8868c244fade7c3451fd695d8d7ae2456", @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf254200000008000300", @ANYRES32=r4, @ANYBLOB="0c009900020000000c000000"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0xc0c0) 14:10:33 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x8b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:33 executing program 3: socket(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:33 executing program 0: r0 = socket(0x2c, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:33 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x804) syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:33 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x8c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2467.101227] FAULT_INJECTION: forcing a failure. [ 2467.101227] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2467.155182] CPU: 0 PID: 9244 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2467.163008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2467.172383] Call Trace: [ 2467.175337] dump_stack+0x1fc/0x2ef [ 2467.178979] should_fail.cold+0xa/0xf [ 2467.182784] ? setup_fault_attr+0x200/0x200 [ 2467.187119] __alloc_pages_nodemask+0x239/0x2890 [ 2467.191893] ? kasan_kmalloc+0x139/0x160 [ 2467.195961] ? __kmalloc_node+0x4c/0x70 [ 2467.199943] ? blk_mq_alloc_rq_map+0x120/0x230 [ 2467.204554] ? blk_mq_init_sched+0x219/0x730 [ 2467.208965] ? elevator_init_mq+0xf0/0x180 [ 2467.213205] ? blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2467.218601] ? blk_mq_init_queue+0x5c/0xa0 [ 2467.222823] ? loop_add+0x2cb/0x8a0 [ 2467.226434] ? ksys_ioctl+0x9b/0xc0 [ 2467.230040] ? __x64_sys_ioctl+0x6f/0xb0 [ 2467.234120] ? do_syscall_64+0xf9/0x620 [ 2467.238078] ? lock_acquire+0x170/0x3c0 [ 2467.242039] ? cache_alloc_refill+0x95/0x340 [ 2467.246429] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2467.251254] ? setup_fault_attr+0x200/0x200 [ 2467.255681] ? check_preemption_disabled+0x41/0x280 [ 2467.260803] ? should_fail+0x142/0x7b0 [ 2467.260819] ? setup_fault_attr+0x200/0x200 [ 2467.260834] ? __lockdep_init_map+0x100/0x5a0 [ 2467.260849] ? find_next_bit+0x105/0x130 [ 2467.277594] ? __cpu_to_node+0x7b/0xa0 [ 2467.281465] ? blk_mq_hw_queue_to_node+0xc1/0x100 [ 2467.286295] blk_mq_alloc_rqs+0x242/0x800 [ 2467.290428] ? blk_mq_alloc_rq_map+0xaa/0x230 [ 2467.295020] blk_mq_init_sched+0x26c/0x730 [ 2467.299439] elevator_init_mq+0xf0/0x180 [ 2467.303494] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2467.308930] blk_mq_init_queue+0x5c/0xa0 [ 2467.312973] loop_add+0x2cb/0x8a0 [ 2467.316457] loop_control_ioctl+0x16c/0x480 [ 2467.320762] ? loop_lookup+0x1d0/0x1d0 [ 2467.324643] ? ksys_write+0x241/0x2a0 [ 2467.328435] ? loop_lookup+0x1d0/0x1d0 [ 2467.332316] do_vfs_ioctl+0xcdb/0x12e0 [ 2467.336205] ? lock_downgrade+0x720/0x720 [ 2467.340340] ? check_preemption_disabled+0x41/0x280 [ 2467.345340] ? ioctl_preallocate+0x200/0x200 [ 2467.349737] ? __fget+0x356/0x510 [ 2467.353215] ? do_dup2+0x450/0x450 [ 2467.356739] ? vfs_write+0x393/0x540 [ 2467.360440] ? fput+0x2b/0x190 [ 2467.363627] ksys_ioctl+0x9b/0xc0 [ 2467.367119] __x64_sys_ioctl+0x6f/0xb0 [ 2467.370992] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2467.375992] do_syscall_64+0xf9/0x620 [ 2467.379864] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2467.385034] RIP: 0033:0x4665e9 [ 2467.388259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.407315] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2467.415005] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2467.422274] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2467.429700] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2467.436950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2467.444214] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:34 executing program 2 (fault-call:10 fault-nth:42): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:34 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@default, @bcast, @default, @null, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 14:10:34 executing program 0: r0 = socket(0x22, 0x3, 0x401) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) socket(0x0, 0x3, 0x9) 14:10:34 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x8d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:34 executing program 4: r0 = socket(0x22, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0xd19, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@private1, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1ec, r3, 0x20, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:34 executing program 5: socket(0x1a, 0x3, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x4f8, 0xc0480) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x9, 0x2}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000006c7788cafbbf18106397859f0bb82754b9c747ca867f5d4844458d923d85effb5a60bda261f2a17f1ad134af1b09c41774ec658329c848c293c935a27c76afcdaeec195215624bee8b", @ANYRES16=0x0, @ANYBLOB="200025bd7000fcdbdf25030000000c00078008000100", @ANYRES32=r0, @ANYBLOB="0c00020003000000000000000c0003007500000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8400}, 0x8000) 14:10:34 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) 14:10:34 executing program 3: r0 = socket(0x22, 0x3, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x103a00, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 14:10:34 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x8e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:34 executing program 0: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x22, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) 14:10:34 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r5 = socket(0x9, 0x80000, 0xa) bind$vsock_dgram(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_bt_cmtp_CMTPCONNADD(r5, 0x400443c8, &(0x7f0000000000)={r0, 0x401}) 14:10:34 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x8f}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2467.684600] FAULT_INJECTION: forcing a failure. [ 2467.684600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2467.741620] CPU: 0 PID: 9284 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2467.749442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2467.758800] Call Trace: [ 2467.761402] dump_stack+0x1fc/0x2ef [ 2467.765043] should_fail.cold+0xa/0xf [ 2467.768853] ? setup_fault_attr+0x200/0x200 [ 2467.773198] __alloc_pages_nodemask+0x239/0x2890 [ 2467.777958] ? kasan_kmalloc+0x139/0x160 [ 2467.782024] ? __kmalloc_node+0x4c/0x70 [ 2467.786004] ? blk_mq_alloc_rq_map+0x120/0x230 [ 2467.790595] ? blk_mq_init_sched+0x219/0x730 [ 2467.795007] ? elevator_init_mq+0xf0/0x180 [ 2467.799248] ? blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2467.804605] ? blk_mq_init_queue+0x5c/0xa0 [ 2467.808822] ? loop_add+0x2cb/0x8a0 [ 2467.812451] ? ksys_ioctl+0x9b/0xc0 [ 2467.816071] ? should_fail+0x142/0x7b0 [ 2467.819941] ? fs_reclaim_release+0xd0/0x110 [ 2467.824333] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 2467.829156] ? setup_fault_attr+0x200/0x200 [ 2467.833464] ? lock_acquire+0x170/0x3c0 [ 2467.837419] ? check_preemption_disabled+0x41/0x280 [ 2467.842428] ? should_fail+0x142/0x7b0 [ 2467.846308] ? setup_fault_attr+0x200/0x200 [ 2467.850660] ? __lockdep_init_map+0x100/0x5a0 [ 2467.855137] ? find_next_bit+0x105/0x130 [ 2467.859179] ? __cpu_to_node+0x7b/0xa0 [ 2467.863098] blk_mq_alloc_rqs+0x242/0x800 [ 2467.867246] blk_mq_init_sched+0x26c/0x730 [ 2467.871474] elevator_init_mq+0xf0/0x180 [ 2467.875521] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2467.880699] blk_mq_init_queue+0x5c/0xa0 [ 2467.884754] loop_add+0x2cb/0x8a0 [ 2467.888209] loop_control_ioctl+0x16c/0x480 [ 2467.892659] ? loop_lookup+0x1d0/0x1d0 [ 2467.896573] ? ksys_write+0x241/0x2a0 [ 2467.900362] ? loop_lookup+0x1d0/0x1d0 [ 2467.904242] do_vfs_ioctl+0xcdb/0x12e0 [ 2467.908126] ? lock_downgrade+0x720/0x720 [ 2467.912267] ? check_preemption_disabled+0x41/0x280 [ 2467.917271] ? ioctl_preallocate+0x200/0x200 [ 2467.921665] ? __fget+0x356/0x510 [ 2467.925105] ? do_dup2+0x450/0x450 [ 2467.928627] ? vfs_write+0x393/0x540 [ 2467.932323] ? fput+0x2b/0x190 [ 2467.935503] ksys_ioctl+0x9b/0xc0 [ 2467.938938] __x64_sys_ioctl+0x6f/0xb0 [ 2467.942857] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2467.947423] do_syscall_64+0xf9/0x620 [ 2467.951226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2467.956409] RIP: 0033:0x4665e9 [ 2467.959614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2467.978496] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 14:10:34 executing program 2 (fault-call:10 fault-nth:43): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:34 executing program 5: r0 = socket(0xb, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:34 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x90}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:34 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r1, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x3b}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3b}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0), 0x400840, 0x0) r2 = socket(0x22, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xcf) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00395c4cd80a52825976ef4000", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf25430000000c009900c887702b290000000c0058006300000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000081) r3 = socket(0x4, 0x5, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80184947, 0x0) clock_getres(0x1, &(0x7f0000000100)) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8983, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 2467.986186] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2467.993438] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2468.000692] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2468.007943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2468.015201] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:34 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3e}, @NL80211_ATTR_PMK={0x14, 0xfe, "6107bfbe223fd021474aa8f3978a0799"}, @NL80211_ATTR_PMK={0x14, 0xfe, "3349cd2917448afac9002e77580f92d2"}, @NL80211_ATTR_SSID={0x5, 0x34, @random="cc"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz2\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = socket(0x2, 0xa, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r7, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000001680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001640)={&(0x7f0000000400)={0x122c, r6, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x56}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x3}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xa4, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x9c, 0x2, "6f84185fc4ced878f7f08fc63811685176559a2ddf2fcfe6f98f2eb772141ba26e19a54ea5579fb3c568ef7fcbcbf4d837f0229f0fc2e713290f086a3cd99d6ea25395c54a7bb38220b0f1db4796cfe1931567cf70f27e955dda88e95dc477d8387922cc172acf3090793d52ad0b9ef638808fdf04c43d7626f86d8575ed569ee3a7011c12ff257163e6eba2b8e4a21723d1525589bf7a59"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x20}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x1090, 0x3, 0x0, 0x1, [{0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0x78, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x73, 0x1, "d7479258afbfe2f3007e626d68d0799562f9f188c44a840d489e83d8ec68c6a4f4703b2685693a2a07ecf2cf141416f937ac47fc726fe6b5e266159a6ba620b747fa1085f9691ab007fb012f60bcd690fa0f8b75548faaac951283e8d0f20b2be7ede4f036410491f5a12375ca2b67"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x9c, 0x3, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x94, 0x2, "4f01e44d9e775bd80fe708e7983230ca30c82f4b4b960fca26d0e504bd3acc8aa1ce094d0b6d5c96cf0195f162ac4ace0b03ac3e3c06fbdbaa7d990563fd93bf102cb99cc422609091021b77d0bdd10d936c3b0f351537097b58f82120c562a72b54ce1a0bf9ded570b94d75467d9faaddc4d41d735cc10c793b6c6b22915d8ad37dda09bd39a4aa50ae21319896ce39"}}]}]}, 0x122c}, 0x1, 0x0, 0x0, 0x24002800}, 0x44080) 14:10:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:34 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x80}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24000800}, 0x8080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x6, 0x6, 0x80000001, 0x5}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4044}, 0x4) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r2, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x800, 0x80}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004891}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0xfff, 0x9}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) 14:10:34 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x91}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2468.253334] FAULT_INJECTION: forcing a failure. [ 2468.253334] name failslab, interval 1, probability 0, space 0, times 0 [ 2468.284842] CPU: 1 PID: 9316 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2468.292699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 14:10:35 executing program 4: r0 = socket(0x3d, 0xa, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) [ 2468.302058] Call Trace: [ 2468.304659] dump_stack+0x1fc/0x2ef [ 2468.308300] should_fail.cold+0xa/0xf [ 2468.312107] ? setup_fault_attr+0x200/0x200 [ 2468.316435] ? lock_acquire+0x170/0x3c0 [ 2468.320421] __should_failslab+0x115/0x180 [ 2468.324665] should_failslab+0x5/0x10 [ 2468.328474] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2468.333587] elevator_alloc+0x7a/0x200 [ 2468.337659] dd_init_queue+0x20/0x430 [ 2468.341544] blk_mq_init_sched+0x395/0x730 [ 2468.345815] elevator_init_mq+0xf0/0x180 14:10:35 executing program 4: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) bind$vsock_dgram(r2, &(0x7f0000000540)={0x28, 0x0, 0x2711, @host}, 0x10) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x3b8, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TX_RATES={0x34c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xac, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x48, 0x6e, 0x1, 0x12, 0x48, 0x5c, 0x16, 0x30, 0x6c, 0x6c, 0xb, 0x18, 0x16, 0x12, 0x30, 0x30, 0x48, 0x1, 0x60]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x24, 0xb, 0x18, 0x9, 0xc, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x4, 0x9}, {0x7, 0x3}, {0x7, 0x3}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x9}, {0x1, 0x1}, {0x3, 0x6}, {0x4, 0x8}, {}, {0x1, 0x9}, {0x3, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x3, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {}, {0x5, 0x5}, {0x0, 0x1}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x6}, {0x1, 0x3}, {0x2, 0x6}, {0x1, 0x13}, {0x4, 0xa}, {0x3, 0x3}, {0x2, 0x5}, {0x6, 0x9}, {0x1, 0x9}, {0x6, 0x2}, {0x2, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x7, 0x4}, {0x3}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x3, 0x81, 0x9, 0x7ff, 0x9, 0x1, 0x5]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x5, 0x12, 0x0, 0x4, 0x1, 0xb, 0x1, 0x16, 0x76, 0x18, 0x7e, 0x2, 0x18, 0x2, 0x30, 0x12, 0x6c, 0x2, 0x16, 0x16, 0x5, 0x30, 0x24]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x19, 0x1b, 0x12, 0x36, 0x5, 0x12, 0x2, 0x12, 0x5, 0x6, 0x2, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x9, 0x14, 0x755e, 0x7ff, 0x2e, 0x100]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x36, 0x16, 0x16, 0x4, 0xc, 0xb, 0x24, 0x24, 0x16, 0xf87cf467560bc355, 0x5, 0xb, 0x24, 0x1b, 0x30, 0x3, 0x1b, 0x36, 0x4, 0xc, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0x1, 0x2ca9, 0x2, 0x8000, 0x2, 0x24]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0x6, 0x5, 0xc, 0x1, 0x6c, 0x0, 0x9, 0xc, 0x60, 0xc, 0x36, 0x60, 0x6, 0x18, 0x3, 0x16, 0x2, 0x1, 0x6c, 0xc, 0x6, 0x6c, 0x26, 0x30, 0x1, 0x48, 0x48, 0xb, 0x1, 0xc, 0x30]}]}, @NL80211_BAND_2GHZ={0xe0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x4, 0x8, 0x1, 0x7, 0x1, 0x7f, 0x9]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x7, 0x9}, {0x6}, {0x6, 0x7}, {0x1, 0xa}, {0x5, 0x6}, {0x6, 0x5}, {0x5}, {0x3, 0x8}, {0x1, 0xa}, {0x3, 0x9}, {0x1, 0x5}, {0x5, 0xa}, {0x5, 0x7}, {0x7, 0x4}, {0x7, 0x7}, {0x1, 0x3}, {0x4, 0x6}, {0x5, 0xa}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0x8}, {0x5, 0x5}, {0x4, 0x4}, {0x2}, {0x3, 0x5}, {0x5, 0x4}, {0x6, 0x4}, {0x2, 0x8}, {0x0, 0x3}, {0x1, 0x4}, {0x5, 0x7}, {0x6, 0x6}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x2, 0x2}, {0x5, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x3, 0x7}, {0x1, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x7}, {0x0, 0x6}, {0x5, 0x4}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x4}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x6}, {0x6, 0x9}, {0x3, 0xa}, {0x3, 0xa}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x6}, {0x3, 0x1}, {0x5, 0x8}, {0x4, 0x2}, {0x5, 0x2}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0x9}, {0x5, 0x12}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x7}, {0x5, 0x6}, {0x4, 0x3}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {0x4, 0x9}, {0x4}, {0x3, 0x3}, {0x6, 0x2}, {0x5, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x6, 0x4}, {0x2, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x3, 0x1}, {0x1, 0x4}, {0x7, 0xa}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x5, 0x9}, {0x6, 0x8}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0x7}, {0x6, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x6}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x5}, {0x4, 0x7}, {0x1, 0x5}, {0x1, 0xa}, {0x1, 0x7}, {0x0, 0x4}, {0x3, 0x9}, {0x3, 0x6}, {0x0, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x6, 0x9, 0x7fff, 0x0, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x925, 0x7f, 0xff, 0x7, 0x0, 0x4780]}}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x2, 0x1}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x9}, {0x5, 0x2}, {0x7, 0x9}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x12, 0x60, 0x36, 0x2, 0x16, 0x60, 0x1, 0x60, 0x6, 0x3, 0x60, 0x36, 0xb, 0x1, 0x30, 0x48, 0x24, 0x12, 0xc, 0x6c, 0x0, 0x3, 0x48, 0x0, 0x24, 0x1e]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x0, 0x24, 0x5, 0x60, 0x4, 0x9, 0x12, 0x36, 0x2, 0x24, 0x5, 0x1b, 0x12, 0x5, 0xb, 0x5, 0x36, 0x30, 0x18, 0xc, 0x2, 0x36, 0x6]}]}, @NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x1, 0x3ff, 0x9, 0x2, 0x0, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x16, 0x16, 0x16, 0x4, 0x5, 0xb, 0xb, 0x5, 0xc, 0x60, 0x60, 0x12, 0x6c, 0x5, 0x18, 0x60, 0x48, 0x18, 0x44, 0x48, 0x18, 0x2, 0xc, 0x35, 0x30, 0x30, 0x6, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x6, 0x60, 0x2, 0x9, 0x2f, 0x16, 0x6, 0x2, 0x4, 0x3, 0x16, 0x1, 0x6c, 0x1b, 0x16, 0x5, 0x9, 0x30, 0x2, 0x1b, 0x48, 0xc, 0xb, 0x5, 0x3, 0x18, 0x1, 0x6, 0x9, 0x60, 0x1]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x5, 0x90, 0x5b77, 0x2, 0x7, 0x40, 0x1]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x9, 0x3, 0x12, 0x9, 0x6c, 0x9, 0x12, 0x3, 0xb, 0x72, 0x4, 0x18, 0x24, 0x1, 0x3, 0x24, 0x2c, 0x1b, 0x16, 0x60, 0x30, 0xb, 0x6d, 0x4, 0x5, 0x1, 0xb, 0x6c]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x100, 0x3f, 0x1f, 0x9, 0x9, 0x800]}}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0x9, 0x6, 0x30, 0x60, 0xb]}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x81}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10000}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40}, 0x40044) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$SNDCTL_SYNTH_MEMAVL(0xffffffffffffffff, 0xc004510e, &(0x7f0000000040)=0x3) [ 2468.349886] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2468.355093] blk_mq_init_queue+0x5c/0xa0 [ 2468.359161] loop_add+0x2cb/0x8a0 [ 2468.362628] loop_control_ioctl+0x16c/0x480 [ 2468.366957] ? loop_lookup+0x1d0/0x1d0 [ 2468.370855] ? ksys_write+0x241/0x2a0 [ 2468.374662] ? loop_lookup+0x1d0/0x1d0 [ 2468.378560] do_vfs_ioctl+0xcdb/0x12e0 [ 2468.382460] ? lock_downgrade+0x720/0x720 [ 2468.386621] ? check_preemption_disabled+0x41/0x280 [ 2468.391639] ? ioctl_preallocate+0x200/0x200 [ 2468.391657] ? __fget+0x356/0x510 [ 2468.391675] ? do_dup2+0x450/0x450 [ 2468.391687] ? vfs_write+0x393/0x540 [ 2468.391701] ? fput+0x2b/0x190 [ 2468.391720] ksys_ioctl+0x9b/0xc0 [ 2468.391735] __x64_sys_ioctl+0x6f/0xb0 [ 2468.391753] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2468.421861] do_syscall_64+0xf9/0x620 [ 2468.425661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2468.430842] RIP: 0033:0x4665e9 [ 2468.434055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:35 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x92}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2468.452943] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2468.460661] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2468.467930] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2468.475197] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2468.482450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2468.490233] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:35 executing program 2 (fault-call:10 fault-nth:44): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:35 executing program 0: r0 = socket(0x22, 0x3, 0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2468.512954] ieee802154 phy0 wpan0: encryption failed: -22 [ 2468.518561] ieee802154 phy1 wpan1: encryption failed: -22 14:10:35 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r1, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2e65d50d}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40081}, 0x4040810) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x10100) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000080)) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x202000, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="680000002bb9ff4822dbcb638e7ff0789257c26cf4c76ad0ea6867e7e8bb7bee07e48f", @ANYRES16=r5, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x62a541, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000140)={0x3}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r3) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYBLOB="0001db000001000000010000000002", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004000) r8 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x80044944, 0x0) 14:10:35 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x93}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:35 executing program 0: ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000000)) r0 = socket(0x22, 0x4, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) select(0x40, &(0x7f0000000040)={0xa9, 0x7, 0x5, 0xa, 0x6, 0x7, 0x7, 0x3f}, &(0x7f0000000080)={0x3, 0x3f, 0x8, 0x472, 0x8, 0x4, 0x800, 0x3}, &(0x7f00000000c0)={0x5, 0x2, 0x20, 0x1, 0xfffffffffffffffe, 0x4, 0x7fffffff, 0x1}, &(0x7f0000000100)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80044942, 0x0) 14:10:35 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x94}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:35 executing program 4: r0 = syz_open_dev$vcsu(&(0x7f0000000100), 0x6, 0x82) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000300)=@e={0xff, 0xa, 0x1, 0x7f, @SEQ_NOTEON=@note=0x8, 0x2, 0x7f, 0x7}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x8}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x8804) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x40080) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) [ 2468.677231] FAULT_INJECTION: forcing a failure. [ 2468.677231] name failslab, interval 1, probability 0, space 0, times 0 [ 2468.723835] CPU: 0 PID: 9362 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2468.731663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2468.741026] Call Trace: [ 2468.743639] dump_stack+0x1fc/0x2ef [ 2468.743660] should_fail.cold+0xa/0xf [ 2468.743679] ? setup_fault_attr+0x200/0x200 [ 2468.743693] ? lock_acquire+0x170/0x3c0 [ 2468.743712] __should_failslab+0x115/0x180 [ 2468.751241] should_failslab+0x5/0x10 [ 2468.751258] kmem_cache_alloc_node_trace+0x244/0x3b0 14:10:35 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x7, 0x220040) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000002c0)={0x4, 0x1, 0x4, 0x4000, 0x45, {0x0, 0xea60}, {0x2, 0x2, 0x8, 0x7f, 0x5, 0xc, "ca945951"}, 0x40, 0x4, @planes=&(0x7f0000000280)={0x1a, 0xa703, @fd=r2, 0x89d8}, 0x5, 0x0, r3}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, &(0x7f0000000340)=0x1f7) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x4004050) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf257b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4040040}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:35 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/112, 0x70}, {&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000140)=""/11, 0xb}], 0x3, &(0x7f00000001c0)=""/160, 0xa0}, 0x40000101) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff, 0x9}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:35 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2468.751276] dd_init_queue+0x94/0x430 [ 2468.767569] blk_mq_init_sched+0x395/0x730 [ 2468.767595] elevator_init_mq+0xf0/0x180 [ 2468.767611] blk_mq_init_allocated_queue+0xe1f/0x1300 [ 2468.767633] blk_mq_init_queue+0x5c/0xa0 [ 2468.794012] loop_add+0x2cb/0x8a0 [ 2468.794031] loop_control_ioctl+0x16c/0x480 [ 2468.801825] ? loop_lookup+0x1d0/0x1d0 [ 2468.805725] ? ksys_write+0x241/0x2a0 [ 2468.809570] ? loop_lookup+0x1d0/0x1d0 [ 2468.813476] do_vfs_ioctl+0xcdb/0x12e0 [ 2468.817373] ? lock_downgrade+0x720/0x720 [ 2468.821526] ? check_preemption_disabled+0x41/0x280 [ 2468.826561] ? ioctl_preallocate+0x200/0x200 [ 2468.830976] ? __fget+0x356/0x510 [ 2468.834436] ? do_dup2+0x450/0x450 [ 2468.834450] ? vfs_write+0x393/0x540 [ 2468.834466] ? fput+0x2b/0x190 [ 2468.834484] ksys_ioctl+0x9b/0xc0 [ 2468.848334] __x64_sys_ioctl+0x6f/0xb0 [ 2468.848351] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2468.848363] do_syscall_64+0xf9/0x620 [ 2468.848382] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2468.865775] RIP: 0033:0x4665e9 [ 2468.865790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2468.865798] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2468.887881] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2468.887889] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2468.887903] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 14:10:35 executing program 2 (fault-call:10 fault-nth:45): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:35 executing program 4: r0 = socket(0x26, 0x4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:35 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x95}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) [ 2468.887910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2468.887917] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:35 executing program 0: r0 = socket(0x22, 0x3, 0x0) r1 = socket(0x2, 0xa, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000d40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000040)={0xc94, r2, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x25}}}}, [@NL80211_PMSR_ATTR_PEERS={0xc74, 0x5, 0x0, 0x1, [{0x3a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x368, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x767}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x174, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3481fe79e8dbe473}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xffff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xe42d9f41f23fd183}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xb3d74d2a6ea92acc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]}]}, {0x36c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1d}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x12c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x108, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xde16}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x236}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xb}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x138, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}]}]}, {0x2fc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2c8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x9c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8e}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xec}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x26}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x108}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x234, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x37e}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x58, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x180, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x120, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3ff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}]}]}]}]}, 0xc94}, 0x1, 0x0, 0x0, 0x4c010}, 0x44000) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000e00), 0x101001, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x44, r6, 0x220, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x50}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x62}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000d80)={"9d8caba0570e527ada1ffc82ba61760311ac8a0e6ff488ba6323bf70c585", 0x0, 0xfffffff7, 0x7, [0x80, 0x80000000, 0x7, 0x6304, 0x8d0, 0x100, 0x401, 0x0, 0x400, 0x8, 0x6, 0x800, 0xfffffffe, 0x894, 0x7, 0x10001, 0x9f8, 0x1]}) 14:10:35 executing program 5: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket(0x2b, 0xa, 0x200) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20098000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r7 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) setfsgid(0xee01) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf9}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9e, 0xac, "ed6b934c09af89c2cba30d0dee991473ac5a693f3a71cc2e0f8ae79199f8d9389aabdefe0431d0d3c980de91efd785b532956bdd8b4585ed41b85198844ac27186662eb02e55411bdea193f2f6ef63236371cbb9be6f06e7a8120d77974e8c8cf31bb667f713da619360e03b821f7b9583d425edf51dd26e18fcaad30d919b879db16c39a52c104f5878cbe5a0cd9613bbdbcb4caa3a9b02b925"}]}, 0xc4}}, 0x4) sendmsg$NBD_CMD_STATUS(r10, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fbdbdf25050000000c000600010000000000000008000100000000005400078008000100", @ANYRES32=r0, @ANYBLOB="08000100d63be0a6005ab7321035b08cf7558eb5aede52d0b34e4739ebc4708e2d4e9559087952bdaba1c253fa3d96e3c1922952fd6160a62bb30956ce7f4a49c2e3987c14c21df312f41b0bc03d07803fbf8b4e8d8cdd3926a285ffc0a1bcd5fdf1d356", @ANYRESOCT=r7, @ANYBLOB="c7adc977", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08adef473e109afd", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c00060002000000000000000c000400e1000000000000000c00050020000000000000000c0008000200000000000000"], 0xac}}, 0x20000000) 14:10:35 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x96}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:35 executing program 4: r0 = socket(0x22, 0x3, 0x0) r1 = socket(0x4, 0x5, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000040)={0x0, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:35 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) [ 2469.076874] FAULT_INJECTION: forcing a failure. [ 2469.076874] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.103919] CPU: 1 PID: 9389 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2469.111735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2469.121091] Call Trace: [ 2469.123687] dump_stack+0x1fc/0x2ef [ 2469.127327] should_fail.cold+0xa/0xf [ 2469.131133] ? setup_fault_attr+0x200/0x200 [ 2469.135460] ? lock_acquire+0x170/0x3c0 [ 2469.139441] __should_failslab+0x115/0x180 [ 2469.143703] should_failslab+0x5/0x10 [ 2469.147528] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2469.152640] __alloc_disk_node+0x69/0x410 [ 2469.156797] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2469.161394] loop_add+0x39c/0x8a0 [ 2469.164857] loop_control_ioctl+0x16c/0x480 [ 2469.169186] ? loop_lookup+0x1d0/0x1d0 [ 2469.173087] ? ksys_write+0x241/0x2a0 14:10:35 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x97}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:35 executing program 0: r0 = socket(0xb, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000040)=0x4b) 14:10:36 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x4902, 0x0) [ 2469.176895] ? loop_lookup+0x1d0/0x1d0 [ 2469.180797] do_vfs_ioctl+0xcdb/0x12e0 [ 2469.184690] ? lock_downgrade+0x720/0x720 [ 2469.188846] ? check_preemption_disabled+0x41/0x280 [ 2469.193860] ? ioctl_preallocate+0x200/0x200 [ 2469.198272] ? __fget+0x356/0x510 [ 2469.201729] ? do_dup2+0x450/0x450 [ 2469.205270] ? vfs_write+0x393/0x540 [ 2469.208991] ? fput+0x2b/0x190 [ 2469.212196] ksys_ioctl+0x9b/0xc0 [ 2469.215658] __x64_sys_ioctl+0x6f/0xb0 [ 2469.219552] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2469.224138] do_syscall_64+0xf9/0x620 [ 2469.227949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2469.233138] RIP: 0033:0x4665e9 [ 2469.236333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2469.255234] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2469.262953] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2469.270221] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2469.277663] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2469.277671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2469.277680] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 14:10:36 executing program 2 (fault-call:10 fault-nth:46): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:36 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x98}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:36 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:36 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x5e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x20048000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0xc0) 14:10:36 executing program 4: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x30200, 0x0) r0 = socket(0x22, 0x3, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:36 executing program 0: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r0, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x900008}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r0, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x4, 0x7fffffff, 0x81, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000008}, 0x40048c4) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x80044942, 0x0) 14:10:36 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:36 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x99}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:36 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x63}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x31}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x14004) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x410, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x8}}, [""]}, 0x24}}, 0x20044000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x7f}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "57214055a8"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x51}, @NL80211_ATTR_PMKID={0x14, 0x55, "6841cb81a8b1a572ca71cbe312414cd7"}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x44) r7 = socket(0x2a, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x80044944, 0x0) 14:10:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x74d, 0x3e}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0xe50604ad4395a840}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x80184947, 0x0) ioctl$sock_ax25_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) [ 2469.441436] FAULT_INJECTION: forcing a failure. [ 2469.441436] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.481394] CPU: 1 PID: 9431 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 14:10:36 executing program 3: sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) [ 2469.489221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2469.498578] Call Trace: [ 2469.501172] dump_stack+0x1fc/0x2ef [ 2469.504814] should_fail.cold+0xa/0xf [ 2469.508625] ? setup_fault_attr+0x200/0x200 [ 2469.512955] ? lock_acquire+0x170/0x3c0 [ 2469.516945] __should_failslab+0x115/0x180 [ 2469.521182] should_failslab+0x5/0x10 [ 2469.521198] kmem_cache_alloc_node_trace+0x244/0x3b0 [ 2469.521215] __kmalloc_node+0x38/0x70 [ 2469.521232] disk_expand_part_tbl+0x1b4/0x3a0 [ 2469.521251] __alloc_disk_node+0x118/0x410 [ 2469.521266] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2469.521283] loop_add+0x39c/0x8a0 [ 2469.547284] loop_control_ioctl+0x16c/0x480 [ 2469.547300] ? loop_lookup+0x1d0/0x1d0 [ 2469.547325] ? ksys_write+0x241/0x2a0 [ 2469.547341] ? loop_lookup+0x1d0/0x1d0 [ 2469.566982] do_vfs_ioctl+0xcdb/0x12e0 [ 2469.570878] ? lock_downgrade+0x720/0x720 [ 2469.575456] ? check_preemption_disabled+0x41/0x280 [ 2469.580563] ? ioctl_preallocate+0x200/0x200 [ 2469.584980] ? __fget+0x356/0x510 [ 2469.588440] ? do_dup2+0x450/0x450 14:10:36 executing program 3: r0 = socket(0x0, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) [ 2469.591983] ? vfs_write+0x393/0x540 [ 2469.595701] ? fput+0x2b/0x190 [ 2469.598908] ksys_ioctl+0x9b/0xc0 [ 2469.602372] __x64_sys_ioctl+0x6f/0xb0 [ 2469.606267] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2469.610853] do_syscall_64+0xf9/0x620 [ 2469.614666] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2469.619858] RIP: 0033:0x4665e9 [ 2469.623055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 14:10:36 executing program 2 (fault-call:10 fault-nth:47): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:36 executing program 3: r0 = socket(0x0, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:36 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x9a}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:36 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r2 = syz_open_dev$vcsu(&(0x7f0000000180), 0x91, 0x841) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYBLOB="1cd428bd706602000000000000000c0058001300000000000000f7ff570053000000000000000c0058003a000000000000000c0058003b000000000000000c00580037000000000000000c005800480000000001000085300e0e7c0c0058000500000000000000c28532b7a53f7b71cd351758707712489785a2086754a059ec609354b09bfbdd6c6f65f226f8ad193e07f273f013ad9187318a63eacf60d3b7e7cd600c53de6aedcbe58a556154ce973ef5ac86f106"], 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) [ 2469.641961] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2469.649676] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2469.656952] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2469.664224] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2469.671496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2469.679243] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:36 executing program 5: r0 = socket(0x1a, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:36 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x9b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:36 executing program 4: r0 = socket(0x22, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x200, 0x0, 0x0, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="00042bbd7000fedbdf25010000000000000007410000004c0018000000b973797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20004894) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={r2}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x4, 0x2, 0x4, 0x100000, 0x3f, {0x77359400}, {0x4, 0x8, 0x2b, 0xff, 0x20, 0x0, "8ed766d7"}, 0x9a19, 0x2, @planes=&(0x7f0000000300)={0x7f, 0x4, @userptr=0x1, 0x3f5a}, 0x4e6}) 14:10:36 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10001}, 0xc, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001952c444921b4a9c85c7e5368e635a0e99163c68be2df9ad63904d10598189cd13173a25caf59662115c5a296c618bc8b434b2cfb8c941fcf0378b4c971dc300050c86a02f631f8288a993d2bcdfb33988aa19d2415365986ca6fd350d394501a0a9813fc22b6c4dcbe9af9ae645acb763", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf254300000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990006000000520000000c00580058000000000000000c0058005d000000000000000c0058004e000000000000000c0058000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 14:10:36 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000001140)={@remote}, &(0x7f0000001180)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000000)=0x2ec) [ 2469.821868] FAULT_INJECTION: forcing a failure. [ 2469.821868] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.866502] CPU: 0 PID: 9465 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2469.874821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2469.884178] Call Trace: [ 2469.886770] dump_stack+0x1fc/0x2ef [ 2469.886789] should_fail.cold+0xa/0xf [ 2469.894208] ? setup_fault_attr+0x200/0x200 [ 2469.898534] ? lock_acquire+0x170/0x3c0 [ 2469.898558] __should_failslab+0x115/0x180 [ 2469.898575] should_failslab+0x5/0x10 [ 2469.898594] kmem_cache_alloc_trace+0x284/0x380 [ 2469.915223] rand_initialize_disk+0x3b/0xc0 [ 2469.919556] __alloc_disk_node+0x234/0x410 [ 2469.923794] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2469.928382] loop_add+0x39c/0x8a0 [ 2469.931851] loop_control_ioctl+0x16c/0x480 [ 2469.936186] ? loop_lookup+0x1d0/0x1d0 [ 2469.940084] ? finish_task_switch+0x146/0x760 [ 2469.944588] ? loop_lookup+0x1d0/0x1d0 [ 2469.948484] do_vfs_ioctl+0xcdb/0x12e0 [ 2469.952380] ? lock_downgrade+0x720/0x720 [ 2469.956533] ? check_preemption_disabled+0x41/0x280 [ 2469.961554] ? ioctl_preallocate+0x200/0x200 [ 2469.965977] ? __fget+0x356/0x510 [ 2469.969444] ? do_dup2+0x450/0x450 [ 2469.973703] ? io_schedule_timeout+0x140/0x140 [ 2469.978303] ksys_ioctl+0x9b/0xc0 [ 2469.981766] __x64_sys_ioctl+0x6f/0xb0 [ 2469.985659] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2469.990243] do_syscall_64+0xf9/0x620 [ 2469.994050] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2469.999241] RIP: 0033:0x4665e9 14:10:36 executing program 3: r0 = socket(0x0, 0x3, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:36 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:36 executing program 0: socket(0x2c, 0x1, 0x6) socket$bt_cmtp(0x1f, 0x3, 0x5) socket(0xb, 0x5, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) [ 2470.002434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.021331] RSP: 002b:00007fc46438d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.029129] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665e9 [ 2470.029138] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2470.029146] RBP: 00007fc46438d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.029154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.029161] R13: 00007fff5d44a79f R14: 00007fc46438d300 R15: 0000000000022000 14:10:36 executing program 2 (fault-call:10 fault-nth:48): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0)) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) socket(0xa, 0x6, 0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x302c00, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 14:10:36 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:36 executing program 0: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x800, 0x529001) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x10, 0x70bd27, 0xff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0xb}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff, 0xfe, 0x80000}) r7 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x80044942, 0x0) 14:10:36 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x9c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:36 executing program 4: r0 = socket(0x22, 0x3, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80184947, 0x0) 14:10:36 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0xa, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000019c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0d0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) 14:10:36 executing program 1: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x1, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/189, 0x7ffff000}, {0x0}, {0x0, 0x9d}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 14:10:37 executing program 5: r0 = socket(0x22, 0x3, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8882) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r3 = socket(0x2, 0xa, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8aba6b67dd86cf0c}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xe}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xe0}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x60}}, 0x60004840) 14:10:37 executing program 3: r0 = socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x62}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x805}, 0x400c000) 14:10:37 executing program 0: r0 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044942, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0xedec, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000040), 0x4) 14:10:37 executing program 4: ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000000)={"180575a18ce9ab5cb16876143071c233ccd1b50b107c755fbdbefe24ff47", 0x5, 0x0, 0x0, 0x6, 0x0, 0x5a3, 0x6, 0x8, [0x400, 0x7ff, 0x5, 0x6, 0x267, 0x81, 0x1dae, 0x928, 0x6, 0x2, 0x0, 0x2, 0xfffff1d3, 0xebb8, 0xfffff800, 0x7fff, 0x2000000, 0x401, 0x88]}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x80184947, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000001100)=0x9, 0x4) 14:10:37 executing program 5: r0 = socket(0x22, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x80044944, 0x0) [ 2470.255266] FAULT_INJECTION: forcing a failure. [ 2470.255266] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.307792] CPU: 0 PID: 9498 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2470.315623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2470.315629] Call Trace: [ 2470.315651] dump_stack+0x1fc/0x2ef [ 2470.315670] should_fail.cold+0xa/0xf [ 2470.315689] ? setup_fault_attr+0x200/0x200 [ 2470.339334] ? lock_acquire+0x170/0x3c0 [ 2470.339358] __should_failslab+0x115/0x180 [ 2470.339373] should_failslab+0x5/0x10 [ 2470.339386] kmem_cache_alloc_trace+0x284/0x380 [ 2470.339404] device_create_groups_vargs+0x8a/0x270 [ 2470.339425] device_create+0xdf/0x120 [ 2470.364756] ? device_create_vargs+0x50/0x50 [ 2470.369180] ? pointer+0x850/0x850 [ 2470.372740] bdi_register_va.part.0+0x4c/0x750 [ 2470.377334] bdi_register+0x12a/0x140 [ 2470.381142] ? bdi_register_va+0x80/0x80 [ 2470.385215] ? vsnprintf+0x2cc/0x14f0 [ 2470.389032] bdi_register_owner+0x59/0x100 [ 2470.393278] __device_add_disk+0xd58/0x10c0 [ 2470.397615] ? sprintf+0xc0/0x100 [ 2470.401081] ? blk_alloc_devt+0x2d0/0x2d0 [ 2470.405244] ? __init_waitqueue_head+0x31/0x90 [ 2470.409831] ? __lockdep_init_map+0x100/0x5a0 [ 2470.414335] loop_add+0x628/0x8a0 [ 2470.417789] loop_control_ioctl+0x16c/0x480 [ 2470.422096] ? loop_lookup+0x1d0/0x1d0 [ 2470.425970] ? ksys_write+0x241/0x2a0 [ 2470.429753] ? loop_lookup+0x1d0/0x1d0 [ 2470.433624] do_vfs_ioctl+0xcdb/0x12e0 [ 2470.437493] ? lock_downgrade+0x720/0x720 [ 2470.441624] ? check_preemption_disabled+0x41/0x280 [ 2470.446622] ? ioctl_preallocate+0x200/0x200 [ 2470.451013] ? __fget+0x356/0x510 [ 2470.454447] ? do_dup2+0x450/0x450 [ 2470.458006] ? vfs_write+0x393/0x540 [ 2470.461790] ? fput+0x2b/0x190 [ 2470.464967] ksys_ioctl+0x9b/0xc0 [ 2470.468409] __x64_sys_ioctl+0x6f/0xb0 [ 2470.472289] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2470.476854] do_syscall_64+0xf9/0x620 [ 2470.480641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2470.485809] RIP: 0033:0x4665e9 [ 2470.489005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.507895] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.515585] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2470.522837] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2470.530087] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.537339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.544588] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 [ 2470.557750] ------------[ cut here ]------------ [ 2470.562962] WARNING: CPU: 0 PID: 9498 at block/genhd.c:719 __device_add_disk.cold+0x69/0x188 [ 2470.571541] Kernel panic - not syncing: panic_on_warn set ... [ 2470.571541] [ 2470.578935] CPU: 0 PID: 9498 Comm: syz-executor.2 Not tainted 4.19.204-syzkaller #0 [ 2470.586710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2470.596048] Call Trace: [ 2470.598635] dump_stack+0x1fc/0x2ef [ 2470.602261] panic+0x26a/0x50e [ 2470.605436] ? __warn_printk+0xf3/0xf3 [ 2470.609324] ? __device_add_disk.cold+0x69/0x188 [ 2470.614061] ? __probe_kernel_read+0x130/0x1b0 [ 2470.618623] ? __warn.cold+0x5/0x5a [ 2470.622232] ? __device_add_disk.cold+0x69/0x188 [ 2470.626968] __warn.cold+0x20/0x5a [ 2470.630515] ? io_schedule_timeout+0x140/0x140 [ 2470.635079] ? __device_add_disk.cold+0x69/0x188 [ 2470.639817] report_bug+0x262/0x2b0 [ 2470.643427] do_error_trap+0x1d7/0x310 [ 2470.647299] ? math_error+0x310/0x310 [ 2470.651083] ? __irq_work_queue_local+0x101/0x160 [ 2470.655921] ? irq_work_queue+0x29/0x80 [ 2470.659883] ? error_entry+0x72/0xd0 [ 2470.663580] ? trace_hardirqs_off_caller+0x6e/0x210 [ 2470.668586] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2470.673412] invalid_op+0x14/0x20 [ 2470.676849] RIP: 0010:__device_add_disk.cold+0x69/0x188 [ 2470.682194] Code: 02 84 c0 74 08 3c 03 0f 8e a8 00 00 00 44 8b a5 b8 05 00 00 e9 65 e3 6a fb e8 93 86 66 f9 48 c7 c7 60 74 b2 88 e8 1d 76 f7 ff <0f> 0b e9 8d ef 6a fb e8 7b 86 66 f9 48 c7 c7 60 74 b2 88 e8 05 76 [ 2470.701089] RSP: 0018:ffff888091247b38 EFLAGS: 00010286 [ 2470.706432] RAX: 0000000000000024 RBX: 0000000000000001 RCX: 0000000000000000 [ 2470.713694] RDX: 0000000000040000 RSI: ffffffff814e0d61 RDI: ffffed1012248f59 [ 2470.720961] RBP: ffff88808f694200 R08: 0000000000000024 R09: 0000000000000000 [ 2470.728216] R10: 0000000000000005 R11: 0000000000000000 R12: ffff88808f694290 [ 2470.735465] R13: ffff88808f694858 R14: 00000000fffffff4 R15: ffff88808f694204 [ 2470.742727] ? vprintk_func+0x81/0x180 [ 2470.746599] ? __device_add_disk.cold+0x69/0x188 [ 2470.751338] ? sprintf+0xc0/0x100 [ 2470.754773] ? blk_alloc_devt+0x2d0/0x2d0 [ 2470.758906] ? __init_waitqueue_head+0x31/0x90 [ 2470.763468] ? __lockdep_init_map+0x100/0x5a0 [ 2470.767946] loop_add+0x628/0x8a0 [ 2470.771382] loop_control_ioctl+0x16c/0x480 [ 2470.775685] ? loop_lookup+0x1d0/0x1d0 [ 2470.779554] ? ksys_write+0x241/0x2a0 [ 2470.783335] ? loop_lookup+0x1d0/0x1d0 [ 2470.787206] do_vfs_ioctl+0xcdb/0x12e0 [ 2470.791076] ? lock_downgrade+0x720/0x720 [ 2470.795205] ? check_preemption_disabled+0x41/0x280 [ 2470.800208] ? ioctl_preallocate+0x200/0x200 [ 2470.804599] ? __fget+0x356/0x510 [ 2470.808033] ? do_dup2+0x450/0x450 [ 2470.811553] ? vfs_write+0x393/0x540 [ 2470.815251] ? fput+0x2b/0x190 [ 2470.818445] ksys_ioctl+0x9b/0xc0 [ 2470.821879] __x64_sys_ioctl+0x6f/0xb0 [ 2470.825746] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2470.830307] do_syscall_64+0xf9/0x620 [ 2470.834111] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2470.839280] RIP: 0033:0x4665e9 [ 2470.842454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2470.861333] RSP: 002b:00007fc4643ae188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.869021] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665e9 [ 2470.876274] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 2470.883526] RBP: 00007fc4643ae1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2470.890777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2470.898027] R13: 00007fff5d44a79f R14: 00007fc4643ae300 R15: 0000000000022000 [ 2470.906746] Kernel Offset: disabled [ 2470.910455] Rebooting in 86400 seconds..