last executing test programs: 2m56.252452673s ago: executing program 1 (id=1661): mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) truncate$auto(&(0x7f00000000c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5\x00', 0x6) epoll_wait$auto(0xffffffffffffffff, &(0x7f0000000040)={0xa4d, 0x7f}, 0x4, 0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) r0 = io_uring_setup$auto(0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x11, 0xa, 0x300) keyctl$auto(0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) socket(0x11, 0x2, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x8}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x4, 0x0, 0x5, 0x157}, 0x6ed1}, 0x2, 0x100) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x82100, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x2ab42, 0x0) pwritev$auto(r1, &(0x7f0000000180)={&(0x7f0000000100), 0x1}, 0x2, 0xa, 0x7fff) r2 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60440, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r2, &(0x7f00000001c0)=""/153, 0x99) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram4/removable\x00', 0x1a7a42, 0x0) write$auto(r3, &(0x7f0000000100)='\x04\x02\x00\x00\x00\x00\x00\x00\x00\xf4\xff\xff\xff\x00\x00\x00\xa4\xe7\'\x7f*I\x97\xe1?l\xab\xc1\xb0}\xd8\xa1\x89\x17\x0f\xf3\x9fi[\x1a\xd5\x80x\xdfE\x8f\x95J\xbf`\xd2\xb9\xd5\xb2\xca\xad\xceN\x9fh]Uk\a\x05;\x1dP\xe3\x89\xea\x81\xc2\xd3\xccn\xe1\xe8\xce\"8\x02\x02#\x89\x87\x9c\x81a\x02\xc6,\xf8N\x02\fY\xbe\xaa?\xe2\xcf8\xfcm`a9M\xe3\xe7\xa0_\'\x965\xb9\n\xc2\xfc\xf7\xf1A9\f\x13\xda\xa6\x05\xe2`\x99\xb9\x94\xb2B\xac%v\x00'/152, 0xf) 2m55.712248337s ago: executing program 1 (id=1664): io_uring_setup$auto(0x7, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x10000007, 0x50, 0xffffffffffffffff, [0x5, 0x101], {0x6, 0x6, 0xf, 0xb, 0x1, 0x1, 0x3, 0x4, 0x2}, {0xff, 0x401, 0x4c, 0x9, 0x4cd, 0x20000041, 0x7fffffff, 0x7, 0x8}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) bind$auto(0x3, 0x0, 0x6a) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) poll$auto(&(0x7f0000002340)={0xca, 0x10, 0x3b}, 0x2, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pread64$auto(r1, 0x0, 0x200000002, 0x100001ba6) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x1000) r3 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) readv$auto(r3, &(0x7f0000000040)={0x0, 0xffff}, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp1\x00', 0x2064c2, 0x0) poll$auto(&(0x7f0000000540)={r3, 0x4, 0xb}, 0xa, 0x7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*P\xe3\xdfD\x997\xd8p\xfc\xa3\xa9\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3', 0x6051) readv$auto(0x3, 0x0, 0x1) 2m54.106184712s ago: executing program 1 (id=1670): select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x84) getsockopt$auto(r0, 0x84, 0x1d, 0x0, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x142, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r1, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r1, r1, &(0x7f0000000000)=0x3, 0xad6) settimeofday$auto(&(0x7f00000001c0)={0x7, 0x3}, &(0x7f0000000240)={0x7, 0x3}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e20}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x40, 0x8a}}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008090) read$auto(r3, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0x6) unshare$auto(0x40000080) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) 2m52.226620701s ago: executing program 1 (id=1678): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2c00, 0x0) ioctl$auto_MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000080)={0xfffffff8, 0x80, 0x0}) r2 = ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000002c0)={0x6, 0x40000b}) r3 = timerfd_create$auto(0x0, 0x0) timerfd_gettime$auto(r3, &(0x7f0000000040)={{0x2, 0xd21}, {0x29e2, 0x3ff}}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r5) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001900)={0x1c94, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1b88, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x24, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x6}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b60, 0x5, 0x0, 0x1, [{0x102c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x95}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x32, 0x1, "9bdcf1bc216f0db9f92c12a1ecf1ab04cef4d87036cbfd14bf68692581115d8c93bc12fea90cb4d65f430d8b04fb"}]}, {0x460, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf392}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x26}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xd098}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x78be7c42}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa3cd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x58, 0x2, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x49, 0x84, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @typed={0x5, 0x150, 0x0, 0x0, @str='\x00'}, @generic="30b2bb4c21bd2b87b32304ae02b24ee74a683eb55c1808cd362976cf5d03bc1541c08ab6657e378f8185471547", @typed={0x8, 0x10a, 0x0, 0x0, @fd}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x3f, 0x1, "b5145a79c9d74648a0c161ab350dda9dcfdc0ca34b0e798f23dd57b5b1b494db59243b211af75450a23df767aea4300835afbaf933e27ba5f5f2df"}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5b6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffff7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x92}]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x480, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd854}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x51}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x80000001}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5c}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x87}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2c0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7fc0000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "3426115143024e720e3821519d0646bfb6cb4602c6ea0adaae834ffb313733a87143e687ecd999b7f4854928f26f7a73743f6a597605c3db7c158dcaf266bd035cb6265974f2ae154a8321b5cffd32d1ca933e989a45cd51fc64123865ac3d2bc433214027c60fc674a87330c463d903e1de78837b644ec9c204328f98d266a7e9"}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xcb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ee}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9b, 0x1, "26fa99476118a5c4a448f0a588f4003079910a8b85f1e736dd2a723ab505224772b36a5918e3c0dabbd33389f130ec57bd298f798769c2d6d483a8cb952831c169a870248daeb8c493c31790d7d3f6a9cc261b97d68c60b04fbc830c049e70c98c9e050887c6ed215c581cd8c4ee3a691a4b73829434c4634451983daee5f8b0b9db7ff192743537de90c1592018b05bedf3102c256407"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5d, 0x1, "1f19b439d857abaff277a320e9654e6b3b0153789c6833f8973563ebcb4b0f2bb3ade90af72238f4cff71ef65c3af10b0fc443d30ec26a5f8586b727fbdc45d708018f6d8b47f15515bb53382efa2ef65ba707c3ceab51a2b5"}]}]}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_MAC={0xe4, 0x6, "8d6c632d5cead1ef5c158b30656b43c10d08c59c01d10dd91a0fe961c713da662562bdabe2622ca8143a80cb45efee0f54396ff568b260f3e5fd3339feea14c8cc27f76f4f78139798b77d8978989a790bdc5e0bfd2a33d2d1e9824a7189a82c12d3362e74adfeb3702c45ab3bb428781d148b8d2d9c53cd888573d15c29b1f1daf889f84d60a2403d1a1622e976e2eb7bef2a66233b43b2a0f80001ab1ee442cc98fa053a8cfa1520c0650347914872affebe67b0a189683856bd0d44d4c71bc9102857c9c946ea3f1bcf3642ec2b59ca26589968a332b34d8f5f7eb1343c71"}]}, 0x1c94}}, 0xc866b66d1f9458e7) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa4, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKR0_NAME={0x65, 0x102, "63ea66166d9254ea5d4d18bfdb6a99e6f39256ec8e54044b13a41cb15594033177c9a1dc965bf35afd5249b56a7114657e56097e4e53f509c6a357e660a71d8256ad83c3567c94e36cecd223213b04244b5e9706c9a697232b0e5b98eaf82a7eae"}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x80}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x1, 0xfffffffd) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) socket(0x1d, 0x2, 0x6) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x4000000000000001) close_range$auto(0x2, 0x8, 0x0) r8 = socket(0x29, 0x2, 0x0) getsockopt$auto(r8, 0x119, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) 2m51.623785512s ago: executing program 1 (id=1682): capset$auto(&(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x10, 0xfffff801}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f0000000400)=0x8) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket(0x2, 0x3, 0x5) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x9, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0) read$auto_stats_fops_(r3, 0x0, 0x0) unshare$auto(0x3) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xffffdffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffff9, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x20000009, 0xbca7, 0xfffffffffffff000, 0x8000000, 0x0, 0x0, 0x693, [0x40002, 0x5a60, 0x4, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4b17, 0x2, 0x6, 0x9, 0x0, 0xfff, 0x5, 0xfffffbfffffffffb, 0xfffffffffffffffe, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xffff7fffffffffff, 0x0, 0x1ff, 0x8000000000000000, 0x0, 0x1, 0x0, 0x956, 0x101, 0x0, 0x59, 0x1000000000000000, 0x1, 0x40, 0x400, 0x97, 0x5, 0x4, 0xe17, 0x2, 0x6]}, 0x1fe, 0x1) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0) r5 = setfsgid$auto(0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) setresgid$auto(r5, 0x0, r5) 2m49.069324632s ago: executing program 1 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008050) 2m45.256225724s ago: executing program 3 (id=1698): fcntl$auto_F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x4000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x4) mbind$auto(0x0, 0x2091d2, 0x2008, 0x0, 0x5, 0x2) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x1ff, 0xbff, 0x2c, 0x2c, 0x7, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r3, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r4, &(0x7f0000000580)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fffe000) mmap$auto(0x0, 0x8, 0xdf, 0x1ff, r5, 0x16dd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x86, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 2m43.932593523s ago: executing program 3 (id=1702): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x6, 0xffe, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000080)={0x6, 0x100, 0xb6}, 0x9, 0x80000001) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000140)={0x2c8, r2, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_BSS_BASIC_RATES={0x23, 0x24, "ca943f5fc9fb903c07d2e08ac67c25b446c2962e1633748b1f15f8fe2c6938"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x7}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x27e, 0x6e, 0x0, 0x1, [@generic="3bc31a5a1df42689012bdb8bacbf09cc5973686d8fd7cd6880281c9b9c46f186fd439eafcf74eaa4943aa940b1954898ea3cfd4802960e93f49e96b6c296a49bb9f8a89a584a79a62f8b4ff309263f8ecf0f3adaaba8c87e155009d446ee9491119a7c", @generic="527f391672f62a8e321351b3eca01797ae76d9bda9c8cc699dea2909421347b6e22ac9246c9dd44afd9d0697b24bae64cd5159bea0148e56fa5be0422a9385f81a801b802a012f4613b88d", @nested={0x1c3, 0x2d, 0x0, 0x1, [@nested={0x4, 0x94}, @generic="21c3952d60cf251eea4c40b75f6425a940b69bd564f1f073c50c89372c106d45d26a6b4f8c33d1c7ae1d55ff30ca62c9068587781fe4e9711410938e2f29f2ad9beeeec283c11e4ef25883827437e0986ce8f42f58b1435e92b9abf2a4c0a47be9644a0d07d6ddc690b95de907e035d59ce47bddd751b087bd2eaa5744b73f5377b9b35a46e0eba447e87964bf879a42242c680d3feb3a8063ba617d068ee03251540700b40a24c9381cc515f3cdb0e712a8e8b6407df27757ef08be8deb8169b3ec0d1dbbdd2b0603e6512d0c2bba03f0975f621ae3b3de8a4ee3d116e22b17f18e45f043945b50ccd4af191f5dceef9d9224be6eb043ae", @generic="6d7210e8a17f0642afb28feed6233a39c6e98b14cb650b1ff8e832", @typed={0xc, 0xb4, 0x0, 0x0, @u64=0x420}, @nested={0x4, 0x143}, @generic="c37ccd3236095c3de18c7228d26225b0166d68ae0705a6064fd099b3ff7bad5d56c98af963c2a23cbe5268b2ac5fc318f562c7834032048aa00b256c1ded929d59eb4500207f36f76949280491d6d67d19bf05df44786074c89f6829f87f2caf3b0882ab94bfdc7cc0cc26584499ebab444cbc2d", @typed={0x13, 0xe7, 0x0, 0x0, @str='/dev/mtdblock0\x00'}, @typed={0xc, 0x77, 0x0, 0x0, @u64=0xfff}, @nested={0x4, 0xc0}]}, @typed={0x8, 0x13f, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x26}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x400000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m43.639814194s ago: executing program 3 (id=1704): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r1, 0x92106405, r1) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r2, 0xc0285628, r2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d67d09340d0a4bd7805e18ac78f35cb77d1029c69e7270148078c13a91f6dff64055ad11608f0fb", @ANYBLOB="906a185dc6ea09b7b9ae1d4f8d0937ac30b808"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x10000805) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m43.003739209s ago: executing program 3 (id=1705): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card0\x00', 0x121000, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pnp0/00:01/resources\x00', 0x0, 0x0) io_uring_setup$auto(0x9, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_setup$auto(0x4, &(0x7f0000000040)=0x2) 2m42.664227776s ago: executing program 3 (id=1707): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x234440, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40, 0x0) r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x4, 0x1ff, 0x0, 0x7f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/zeroplus/uevent\x00', 0x121681, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x88000, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x5512c0, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop9/hctx0/tags\x00', 0x80000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000080)=""/63, 0x3f) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) pread64$auto(0xffffffffffffffff, 0x0, 0xd, 0x6e9) close_range$auto(r3, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) getsockopt$auto_SO_TIMESTAMPING_NEW(r1, 0xffffff81, 0x41, &(0x7f0000000080)='/sys/kernel/security/tomoyo/domain_policy\x00', &(0x7f00000001c0)=0x9) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000200000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x24008040) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/61, 0x3d) read$auto(r7, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x4005, &(0x7f0000000b40)={{0xffffffffffffffff}, {0x20, 0x2}, 0x408, 0x8, 0x0, 0xdd0, 0x7, 0x400000000000010, 0x0, 0x4, 0x7, 0x3, 0x100000, 0x96bd, 0x7ff, 0xbf0}) 2m41.607394764s ago: executing program 3 (id=1711): openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x40, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000140)=0xfffffff8) poll$auto(&(0x7f00000001c0)={r1, 0x2, 0x7fff}, 0x7fffffff, 0xebf1) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000240), 0xa0c7abd979e3d173, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) unshare$auto(0x40000080) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8002, 0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/queues\x00', 0x200, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x1ac}}, 0x40000) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff01c}}) r5 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000000)=0x90d) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) setns(r3, 0x20000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') chmod$auto(&(0x7f0000000040)='./file0\x00', 0x3) 2m33.919523798s ago: executing program 32 (id=1687): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20008050) 2m26.142893581s ago: executing program 33 (id=1711): openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x40, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = ioctl$auto_TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000140)=0xfffffff8) poll$auto(&(0x7f00000001c0)={r1, 0x2, 0x7fff}, 0x7fffffff, 0xebf1) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000240), 0xa0c7abd979e3d173, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) unshare$auto(0x40000080) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8002, 0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/queues\x00', 0x200, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x1ac}}, 0x40000) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff01c}}) r5 = pidfd_open$auto(0x1, 0x0) ioctl$auto_FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000000)=0x90d) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) setns(r3, 0x20000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') chmod$auto(&(0x7f0000000040)='./file0\x00', 0x3) 1m41.120803173s ago: executing program 4 (id=1838): socket(0x10, 0x2, 0x0) socket(0x23, 0x80805, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, r0, 0x8000) uname$auto(0x0) setsockopt$auto(r0, 0x6, 0x84, 0x0, 0x0) shutdown$auto(0x200000003, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000100)={0x200, 0x7, 0x3, 0xb77, 0x1}) r1 = prctl$auto(0x42, 0x800000001, 0xffffffffffffffff, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f00000000c0)={0x2eae, 0x4, 0xfffffffffffffffc, 0x3, 0x100, 0xffffffffffffffff}) prctl$auto_PR_SET_MM_END_CODE(0xcf, 0x2, r3, 0x92, 0x0) unshare$auto(0x40000080) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2, 0x1, 0x106) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, r5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto_SO_RCVTIMEO_OLD(r4, 0x3, 0x14, &(0x7f0000000040)=']@\x00', 0x10) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x54) 1m38.863387096s ago: executing program 4 (id=1842): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) ioctl$auto_TIOCMSET2(r0, 0x5418, &(0x7f0000000000)="19dfff91bec3ff36fc7146") clock_nanosleep$auto(0x400000, 0x1, 0x0, &(0x7f0000000040)={0x7fff, 0x2}) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)) 1m38.413787661s ago: executing program 4 (id=1846): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) sendfile$auto(r0, r0, 0x0, 0xb) mmap$auto(0x0, 0x2020009, 0x3, 0xfb, 0xfffffffffffffffa, 0x10000007ffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x8000, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x138, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_DEVICE_LIST={0xdd, 0x9, 0x0, 0x1, [@generic="c6e017f1c56607edd03852508ece01a266d817bb7aadcde1ae982424ea0773a00039a802e3dee981f29f0c2291da6ef8452fbdd25c0de22367c9795ef42af5cee64ddd683e428c0bb1fd7876e9069950323297954617b87689ff5dacdb8b759e012631506b756c8122a0a874792112894a037f1738e3e60682f78253aa514152f7c792aac0af7c715570654b6a1ebbfc1a5410e08fb998b511cb57aac3c6d594f2b0c7146a73e50dbf538eb123eaf5480ba9570ed8d326f8d0db57f7495b0d8b4a4c9ceb3dacf6ec551d75c8ca5bd9231d77d72007050afb9d"]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, '/dev/sda\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8e8f}]}, 0x138}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) read$auto(r1, 0x0, 0x1f) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/7:2/stable_pages_required\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) close_range$auto(r5, 0x8, 0xfffffe02) newfstatat$auto(r5, &(0x7f0000000700)='./file0\x00', &(0x7f0000000180)={0xffff, 0x2, 0x3, 0x9, 0xffffffffffffffff, 0xee01, 0x0, 0x800, 0x400000007, 0x2, 0x17, 0xffffffffffff0000, 0xfffffffffffffffc, 0x2, 0x1, 0x7f, 0x1}, 0x8) shmctl$auto_IPC_RMID(0x27cb, 0x0, &(0x7f0000000380)={{0x0, 0x0, 0xee01, 0x2, 0x85ac, 0x3}, 0x8, 0x0, 0xfa7f, 0x0, @raw=0xad, @inferred, 0x0, 0x0, &(0x7f0000000240)="8288e523f4134e6b9afe97812ad2d2a72712c66b38c36b8688e21aa18da3b25094bf730bbc7372bfc109d9842cbdf121e43b3ce1fa2070d2b0f122492a88d9cdc499d648b064df2eb28da132471c9c4f6a0ec88e04b96021c6fb9304c16139d2a57f257abbe4f3b956ab305ac00071a32657a63472b644848d3c5a2864cc071d7ba53b2b5a0ec07296cda327afc38a91c3182cb963fbf985a876b810ac41ab27c7f1843d687e8cb33c2c859bec573f5201a443dfda4bd5f06a56ed3a597f2468bfa2769e018dd7bf1ad7c0a39059f8732d4caad383180f8e003e2ee99b8e", &(0x7f0000000340)="591e777ee7a453e2fd0b7dba1c3deb7aa51f3ee7c60c7e95facd5b84d0842cd7208150645049585acfa8fa42ad57a1801e902881b5c3368e5f314ecb0b8433"}) shmctl$auto_SHM_STAT_ANY(0x1, 0xf, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0x4, 0x5, 0xd9, 0x8}, 0x5, 0x0, 0x5, 0x2, @raw=0xffffffff, @raw=0x2, 0x400, 0x0, &(0x7f0000000400), &(0x7f0000000440)="b8c77421ea7e73074854fe1e77e2a12ca310e03ee9fc42d414"}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x88100806}, 0xc, &(0x7f00000000c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB='|\t\x00\x00', @ANYRES16, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08003400ac1414aa48a1fe86bbc5518c06bb730154fa4461961fae2632758d6963d16425d5622f3b10e02802b295f4f381701c5dd627ea683a7f8bacaecf66d8eb579be4cfd5a1284675f85b3c9766dda796597fce391b62532efebb8fa4211dcca4584622e35d55f58ea233c8c1c4957be6bf3ef3b3ae401f24db2ccc97cdf0b4cfbf885fcf01f39dd49f833044701d39b4040006800800d300", @ANYRES32=r7, @ANYBLOB="ac8f4774d1835ceebf876e77fa2d4cb2f873f2c93943ab62f9d81189b91eb2e100f40fd0543e88b84406833b711e8accca25f2a625ea0dd9af8033f4566a8c8a75267252014f770400468000000008001900", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32, @ANYBLOB="a0009780079e5771ffc046dd4684e7d877def962461295c872ccd7a446c91f2b2ba91b59a4503ba25afc36848e42f8fcc43b3913e6e52096dbfd64703d2fab840129d8307c732bf14b0cdd8d5c61512a131d573f4b0eea8e3ea5c5d5c87ecaccf7ddb016572187fc9b9e9a71190535f5a6ef48446be4b15732a5639660fdc6d6e70a7bd8a4b41ec8b7c01fd19fa5da3496cfa2758c96ce313c99799b1d0c6d50fca13c6d2107ece8e5a4704688645c61a581f041efd90e8136cce279ee0e7a98c7775d8b02a18e4ce6890400ff000400140000000600090005000000"], 0x97c}, 0x1, 0x0, 0x0, 0x810}, 0x40800) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) r9 = socketpair$auto(0x1, 0x5, 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0xc01070ce, r9) 1m37.885697611s ago: executing program 4 (id=1848): prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x800000000000000, 0x4, 0xfffffffffffffffb, 0x1a48d301) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x200, 0x9, 0x0, 0x7) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x7ff, 0x3, 0x2, 0x10001) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x1e7, 0x1, 0x8f, 0x0) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x8, 0xfffffffffffffff7, 0x6, 0x3) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x6, 0x2, 0x16d, 0x5) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x3, 0xffffffffffffffff, 0xe8ef2f0, 0x40) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x4, 0x80000001, 0x400, 0x3) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x1ff, 0xcb4, 0xfffffffffffffffd, 0x4) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x3, 0x9, 0x8, 0x200) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x80, 0x8000000000000001, 0x1, 0x9) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x8, 0x0, 0x5, 0x8001) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x1, 0x100000000, 0x3ff, 0x9) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x4, 0xe1, 0x6, 0x81) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x4, 0x8, 0x2, 0x7) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0xcd6, 0x6ea4, 0x1, 0x7fffffff) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x100, 0x5c, 0x3, 0x7) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x4, 0xf6da, 0x6, 0x7) r0 = prctl$auto_PR_SET_MM_START_CODE(0x8, 0x1, 0xffffffffffffffff, 0x1000, 0x5) ioctl$auto_VFIO_SET_IOMMU(r0, 0x3b66, 0x0) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0xd2, 0x29, 0x2, 0x6) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x0, 0x80, 0x8, 0x2) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x3e02, 0x2, 0x0, 0x9) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x9, 0x9, 0x8, 0xffffffffffffff4b) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0xd3, 0x800, 0x1ff, 0x7fff) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x5, 0xfffffffffffffffe, 0x8, 0x8b5) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x37d, 0x8, 0x10001, 0x7) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x8000, 0x6cf9, 0xc, 0x684) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x8, 0x9, 0x22, 0x5) prctl$auto_PR_RISCV_V_SET_CONTROL(0x45, 0x7, 0x1000, 0x2d, 0x5) 1m37.547434068s ago: executing program 4 (id=1849): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bdad, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd60ffdcdbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)={0x220000, 0x0, 0x10}, 0x18) mmap$auto(0x0, 0x6, 0xffe, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 1m36.318728955s ago: executing program 4 (id=1854): clock_getres$auto(0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0xfffffffffffffbfb, 0xfffffffffffffffc) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r5, 0x3, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0x91) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="14000000c55e7818d104a248db2107f42fefb9fb358622112550cbda1bf46573ce18bc16caeff3dadecc526c5d9eb48971e3bc8e7000ba62af1e13", @ANYRES16=r0, @ANYBLOB="000326bd7000fd5bdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000801) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) 1m20.682993207s ago: executing program 34 (id=1854): clock_getres$auto(0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_gettime$auto(0xfffffffffffffbfb, 0xfffffffffffffffc) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r5, 0x3, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0x91) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=ANY=[@ANYBLOB="14000000c55e7818d104a248db2107f42fefb9fb358622112550cbda1bf46573ce18bc16caeff3dadecc526c5d9eb48971e3bc8e7000ba62af1e13", @ANYRES16=r0, @ANYBLOB="000326bd7000fd5bdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000801) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) 9.494294754s ago: executing program 0 (id=2098): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) clone$auto(0x1, 0x9, &(0x7f0000000280)=0x5, 0x0, 0x8) io_uring_register$auto(0x2, 0x20, &(0x7f0000000240), 0x1) semget$auto(0x0, 0x2e4a, 0x8000) (async) semget$auto(0x0, 0x2e4a, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x9, 0x7, 0x8000000008011, 0x3, 0x8000) mprotect$auto(0x200000000000, 0x806122, 0xc) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) read$auto(0x3, 0x0, 0xfffffdef) 8.893400515s ago: executing program 0 (id=2101): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2c00, 0x0) ioctl$auto_MEMREADOOB(r1, 0xc0104d04, 0x0) r2 = ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000002c0)={0x6, 0x40000b}) r3 = timerfd_create$auto(0x0, 0x0) timerfd_gettime$auto(r3, &(0x7f0000000040)={{0x2, 0xd21}, {0x29e2, 0x3ff}}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r5) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001900)={0x1c94, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1b88, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x24, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x6}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b60, 0x5, 0x0, 0x1, [{0x102c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x95}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x32, 0x1, "9bdcf1bc216f0db9f92c12a1ecf1ab04cef4d87036cbfd14bf68692581115d8c93bc12fea90cb4d65f430d8b04fb"}]}, {0x460, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf392}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x26}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xd098}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x78be7c42}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa3cd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x58, 0x2, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x49, 0x84, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @typed={0x5, 0x150, 0x0, 0x0, @str='\x00'}, @generic="30b2bb4c21bd2b87b32304ae02b24ee74a683eb55c1808cd362976cf5d03bc1541c08ab6657e378f8185471547", @typed={0x8, 0x10a, 0x0, 0x0, @fd}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x3f, 0x1, "b5145a79c9d74648a0c161ab350dda9dcfdc0ca34b0e798f23dd57b5b1b494db59243b211af75450a23df767aea4300835afbaf933e27ba5f5f2df"}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5b6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffff7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x92}]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x480, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd854}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x51}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x80000001}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5c}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x87}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2c0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7fc0000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "3426115143024e720e3821519d0646bfb6cb4602c6ea0adaae834ffb313733a87143e687ecd999b7f4854928f26f7a73743f6a597605c3db7c158dcaf266bd035cb6265974f2ae154a8321b5cffd32d1ca933e989a45cd51fc64123865ac3d2bc433214027c60fc674a87330c463d903e1de78837b644ec9c204328f98d266a7e9"}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xcb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ee}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9b, 0x1, "26fa99476118a5c4a448f0a588f4003079910a8b85f1e736dd2a723ab505224772b36a5918e3c0dabbd33389f130ec57bd298f798769c2d6d483a8cb952831c169a870248daeb8c493c31790d7d3f6a9cc261b97d68c60b04fbc830c049e70c98c9e050887c6ed215c581cd8c4ee3a691a4b73829434c4634451983daee5f8b0b9db7ff192743537de90c1592018b05bedf3102c256407"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5d, 0x1, "1f19b439d857abaff277a320e9654e6b3b0153789c6833f8973563ebcb4b0f2bb3ade90af72238f4cff71ef65c3af10b0fc443d30ec26a5f8586b727fbdc45d708018f6d8b47f15515bb53382efa2ef65ba707c3ceab51a2b5"}]}]}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_MAC={0xe4, 0x6, "8d6c632d5cead1ef5c158b30656b43c10d08c59c01d10dd91a0fe961c713da662562bdabe2622ca8143a80cb45efee0f54396ff568b260f3e5fd3339feea14c8cc27f76f4f78139798b77d8978989a790bdc5e0bfd2a33d2d1e9824a7189a82c12d3362e74adfeb3702c45ab3bb428781d148b8d2d9c53cd888573d15c29b1f1daf889f84d60a2403d1a1622e976e2eb7bef2a66233b43b2a0f80001ab1ee442cc98fa053a8cfa1520c0650347914872affebe67b0a189683856bd0d44d4c71bc9102857c9c946ea3f1bcf3642ec2b59ca26589968a332b34d8f5f7eb1343c71"}]}, 0x1c94}}, 0xc866b66d1f9458e7) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa4, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKR0_NAME={0x65, 0x102, "63ea66166d9254ea5d4d18bfdb6a99e6f39256ec8e54044b13a41cb15594033177c9a1dc965bf35afd5249b56a7114657e56097e4e53f509c6a357e660a71d8256ad83c3567c94e36cecd223213b04244b5e9706c9a697232b0e5b98eaf82a7eae"}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x80}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x1, 0xfffffffd) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) ioctl$auto_I2C_TIMEOUT(r6, 0x702, 0x0) socket(0x1d, 0x2, 0x6) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x4000000000000001) close_range$auto(0x2, 0x8, 0x0) r9 = socket(0x29, 0x2, 0x0) getsockopt$auto(r9, 0x119, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) 7.794765661s ago: executing program 0 (id=2103): unshare$auto(0x40000080) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) ioctl$auto(0x3, 0xc0684608, 0x10000000000402) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f00000002c0)={0x0, 0x8}, 0x6, 0x3, 0xc3, 0x2f) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x4, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2fdffffffffffffff00"}, 0x1c) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) listen$auto(r0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r4) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(r4, r5, 0x88a4) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000081dc62fa55651c38c007693fc46e0c79cb48e1765fd620a0e756cd8b3ff526b07bca74ecb1f4b4ee66617411b5e33fc8048d5b6804836a43a114b981bfa602ae7c0c469be54672f86dea26ab58863f221a3d66b1bf1f305774fc81a59693558473", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r6, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r6, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000300)={0x9, 0x80000001, "dda76dbdf6de9c90c4e9358e65fac2cd85edfcb1cc3b43f624a661eedcc4663bc1c2a41ac96c8fe2e9d4fd8dce787d95364d21a58ac863120468d9ebbb8f1115", "a2fceb86892753114734997bedde2aef16ac761d452326b33d30b30fa1df567a5cd13efb3c6cbb2c4aa219c9df56e73b705d83a45ca28407e740c3c7c05bd0ea786e7124db71a8240b75be4e03246b56", 0x6, 0x8, "3eb486c83c316cba7e5cd9a9746a61b70c8231868241365afe0aa467cf8c19c3d22d3c6b0ceefbc0ba8fd0781eec2230e59ceaa28fec8668d763fe917ae04b48"}) 4.890530983s ago: executing program 5 (id=2111): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited\x00', 0x1a1842, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101c81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r2, 0x4024700a, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) write$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x80000008000) r3 = socket(0xa, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r4, 0x4008ae9c, 0x0) close_range$auto(0x2, 0x8, 0x3f) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000300, 0x0) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd8/rqos/wbt/curr_win_nsec\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r6, &(0x7f0000000100)=""/169, 0xa9) 4.477756955s ago: executing program 6 (id=2112): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2c00, 0x0) ioctl$auto_MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000080)={0xfffffff8, 0x80, 0x0}) r2 = ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) r3 = timerfd_create$auto(0x0, 0x0) timerfd_gettime$auto(r3, &(0x7f0000000040)={{0x2, 0xd21}, {0x29e2, 0x3ff}}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r5) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001900)={0x1c94, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1b88, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x24, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x6}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b60, 0x5, 0x0, 0x1, [{0x102c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "1484ff9fdf6017594535a2a60f534834ad4e3affb84f0155bb92861e1b25c26705c2d89ad93c3f20cb0e431c3fc0bd38a03fbb3fa59ed3461ecc6ff5d579c0eec3af7f96d3b6a0324b66d632f03fb0818e4971fcde577a2192e25f5c972f513d5a4c396d25a57f6853a0acee306e99fbbadd7ec443b05f31ffc96678f254fabbaa2990b16915c46308c5ef49626c9aee45bf59d7d6239f8d327cd12cd5193c3bddc395be30f967b032c35c90bce1bf38cc0224b43989cb3bcf54ec3f0cbb95a53151e46abf7560378e5a168eecce353ac8689c78c6ca6241f27e1e8267684ab3883c0a6b2ba6c931f705aa2cd4b303df481012d16b3b8b44483ad173ecbdce506ed999a6e9e9a3ea239aab8ac2d201226625bfe60afe441e1bd8b7dfa93c913fe9cefde1aa01ae689a266c1b9a7186af865431b258f664b9783e40409e40aac6e7e016ffb21bef37c56a94b23de286e89467518885caa787f9cd8cdad711fcb2d1008d1edf0712273fadd484e90e4a02cd9bfd6fac23584d1a409b5c4911835527591a75cc35d0a43ff86e40b30b3d22a52b0b562202fb0736ea8dd312a3ef8a1b2e3e67347c1be5c05a29eb2951ab068001ad5b2636bfb227069e26a3278eac156a7868a094565d08a140c3775e8701654db2171de40eadd0d903f48c1bd78927c67f927418c38047630c986fc886577f884bcb5c8cbe5d8e86e9c53ceb05e872c0da7f212a52acc436f0c343fbf2c205446c6e9175631559a6694f8184fc47354cd61541ec4a26353ef4d6582c06886e325eb31d31fda3a9c751a0850cc98da22d17a71bad9814bb745ea45d9817f0547daa3ac0d319370a2a435efba1889b6c930631e99d23edbc9c749b2e1f45aa010bff466de15dcdbac5ccf0a9ab7550c5a536d7aceb43245b5e5dda1d06492495e399bf13a07cef71aeee44ba74fa00d225c1de0dc334476d0c1c7d13c2247ed38c2b1cbeae9dadc71fb7c01b7b8e0652b96fd200a59f1353d3f4cf943c22498a932fbb1800c556276f193317711a322bf5ff1c2de1481772c0236561270a1c49809e56b513a6f6fd198fe2b2ab04641a15467cc5c43df120ea17a5a6fb23d2ea97741309ed662100b076fd7ed8a12314e9af2be3f2acf1706f34561db7bec5b0d2c59cdfa32e3ca454c15b3ea2df8ec5789e8a5ae662f4a953f3255388eb129eb5ff82e3a7f2e14f8de74a622be886c9ee24942463bd3dd2b5b50531fcc4eec02c7a112f2dbb3fc6737b1dd7bf5f2e78feecaa481b49f7f326e06661305afca4f6588ecd10a4bc629c9ffb1bc8cd3105ace24bdb03d8415906612b26405c8f6724ae47a8b54a2e14fae7f48f1074f67e60ab0b24d1d6dd5b9ca3a0cf657d5ca250281bf659f2ba53ee303de018924aa2a408fcf1e9a5054e96afcd3f5594c05d364c211e28e97e010094350851b1254b87e8d2d2d0f867502604b8335db28565c7706cb3847764f7bf10bbcd35a7383d630015a8604b6ec24173ed5c05da0671c601cc10f29f7dca7364c171f440e58b30643ab5a324759fb1ed3024c5fa5f161043fb171944f17b9319301159715ed2783520ac3554b61840502a4655eeedcb355cb609877816e33c0537892d44fa3b9741bcfd7954f17dba4ad44add48cd61d7b109dc45bff3be45c666732bbdfd2abb9d733c66256030c140fc9333b821aeafe6a21ff53be26c9c655ccdaedbc9236e5598e5cca207ca89951514d4ba75017ea718ec819e90a3278c4d4c45b64201d927d5073a7e4e19b0c94e442a3c272d3b641c9c6dd817b43dda69413a5566e61e1559e45370578b1e7ea8f72dcf85b177a4a781707ec08608e72033c264043ed59a71115397ca38eb8ea5f7f07e31cb6c1f19156eb672dedc758b5f763705fb70e32eae5909123eeed8c5e87b118a662a87194e5c99218f2e939fdc292915755c8d09bf540a64db9338c02b342b5cf6468b3e0d125655678e3ecf03e77802d77a613fa8b678e986189222ee48f2f5cc0134215f2cb5f8453e1688772a6b0d46ff610cf03e3a6947b26b1aef5f3d5cb2293e801b2f4774ee180ca3287cba820fd2440b05dc320d9822a29659919d9cf59d8084c6a00c687b45a76cd573033373ee28ef34367891b7848eed7da6415a395968f5e5acf6e0eab8ace516125b41d40f87401f75ae311d156901aa9ec9bd8b9466be0f2f81855172120db86c244ee65d82c878584eda5c2aa9b685b11e065467f191cb040eebb969296fbd8a3a21d6d4681002ba7305098da9b5e0f437953c4792015797d80a12d223e1179aa15d124ffc5aea47c3ea4893e7c7fd8eae8fdde6c9418d36b90123ec4e05f6d36d68bff65c339f59811996da7b9ad5deeeeac9d84772314833435ceada04172f2e7e26313be9c484a155aa336f3b4e718a821e89fb7925342fb5fc60e27c7360bd0fd4e749eab670e65fb53f4352f8166985b76b884d927ef3164a9d592bc39e8cd833375a7dfd1a928923c519f14a1d41650b25f80434f42937d67dea01183ba46b16d7cda55b0a0d27a22bb53f19cf330af1bbb2a6355a571bce827236b08668ed2ce02d4b8ab1364b0ee68726e273e126cc8d756e4a16e8f101e878f5fb3bf420e07c3cf8cb4953289c83b76e99f9b2675d3bf0057ddbd12743e3f7ebef365a1db351a17755c7ef6329907b1b0fe61f53d4b6f67eca69074af22fb41b896293ed647857db952501f2edb29146f5740538d5de1071a155cb5ff60c66db110de4ea5bac07f5cb3b5b713135b0c27f28b994a8ae4a89465ea530833ed34b647787ffdeac93bace2f990b4935210eb09fbdb456602657fd0cc54deef30f473a7119410019ab31040b67792fdcc04774b69458d96758b9a9b313d8c8394e901bb52b87656d31e9436e5d70ea4297da61559757945457e9d4a37ffb3faecfddbbd35143dd35c6b7836868ef3d7018ccc84d235e8bac64f3ec961ab191b5535d9ae6a75514f57caaa5c3a89f7590d6f59c3d962d7a487121a4c12a3ee14869ce80f53b8677e47c0f7a2b0cef3dace4a28ab9f3e5b21a0fb0a6d64c40d63b9e3488333506b0567f6fd6184363759be639cda769e854560923dfa311ba5b16214ed03096dc0c3eee132c155bd5eda0c146cf48a22132edae5e8da3456d445517c75c2085cbe4a50835d00a48eec46b05d0da130664e5a8ed20f18730bdf8973a17e21d077caab293c6b07e265c286a8de425295be219478bdd79384ec46409e0d776a235ba8915511d3d4b08bd0b38759c02a538491160e6561e73245ad1cdbe0b3a1f656b3ede3f0d5aba03343b8200c8f4255909af65835936767fb28d969bdc6b54255695e52a620d7e203e76aba69d7adb4bb27a0dfab19fcffb7f1d5f92ee3141a8ad0447edcd2cb1e9cc6a9688829db4002c412a8bb16ad246da71b0e39529f2a620c6df669a62dd225a275e6280a76959019326c5c986bf09454ced91e175c1c84964914ed46c33ccad3e1384bb488298f318fd446beefe3c9eb8e58bb17d2a655672d36503267c076efebf7126ae7c735a81da24d29ed8553a1d78878e326e016bdc3d838346f27a1e6f89dd308ce756dd5bbb24351b7cde1c698e459ef20a13b78f203d5618d4aa80f914cc60003037de69d49f987be37c8cfbde84da1389a516f5a41bb485b77e6d8ff2db6eaaf7d3bbcb65363c1a2008f1284aca3b390e6659225b9687649df0ae8e4ede1093ffadffbeee9fd4152056e978c43bc253a563b11facf73d20fd3fe5c1b539f344c9983d025c31c171abad287a39744455eff8dd6108e20e1ad2c2844a8a7cabe24c5131cc2bd252317d8eb4107bbbfd664fbf6ef710d06b8d2e5f7ed522e32e1e0cef4291d6b3f3969672adf5a7e204b183090fd8940dbf97faed794a9d87166b7010177081840cda73bdddaa9df3f95ae38224b0014afaebe23bcad603b254369b5655c1e660632757add53491d8ad6022c4631c49ce504a7751cbbd2bd515e7942b45a43e7fcafa5e42eed610dc288186fb1b84710a70a2c3d141f700af5eed1aed8abfe3c50c3cb6747705ca0abd8cb2747e6d5f2be7bb417c305bb52ff06495f180a1ad3910bfb36154b86f2655b2c9ba3614100bdc1f1ede6122ed613d688bef7511060315b0455711b27fc07412a935d71c416a8b7c74dfe8ab7b026969aef8a743e56118859984501be667e70007a3e617f68de0d051bb055fb61936d9b2013a7cf1c1703a88ae7cde6711146fc7baf38a7fa4dfa57f63dc447e2980b9b1af4a3963467791ded55f292e32b1091290d6f7d71be7e9fdcee43c0d1d9b63b4e5164a76cad0b9f52788b868e52816fee5bbe710bacd96f304ebe9b94d2130f816dc6060b5bc4e87150ab148dc523f4ceb9e190a41a64702cd41ae47378aa5f5e07df6a844a948f8feefba7f8fe2cdee85cac842670bffb6d4e400e2fa96a5e38fcf39919547649a5ee6bfa15421fa784c80a1de0451e469335b6884d02685e9a7230bb3a986c09caad940a6c774c70da2e5192cba89cd2fb2e7048eee6a6ce565003d527e85ab8466083375b63c77d0081b03da6dc5b67548139efaf6fae7ad0662d4b6caa300273b33ca9a796ddb3c6321e6732ee16d7a6e7031185a56dd0704bc50bb40168a52a7dd16b8c27f6fb18e11531c72604a536220e9a6d915fe5a445d01c9294c6478b1de5ff70a84ea2223dc271ae158ff1874fdaa9b960335054176929b03506308a0fa92ccbefea43908ee716d204db73c0060a8395f48c350645c1f9d161c1904e078dea240926e2819917e40a22f8b84c3d5f26dd3c67e234447b028a58e63ac8c0976d9905bb96a46ac1907e2e0beb5661b1194b63bb526bdf1be20a9ffaf27580a6c44ad51ad81042c9415234b4a92dda2daef05b58eb59862c9df39f73f41a6b7b10e4c7b1de163d260683a3ac628b5c2bd62651bd16850a9c93cea2d7818c90183c44fa9c3a1e41b73df93eac1df895d202bd8e1f9cbb17528ea88df26c48b20eff28d6dff12de21feba47bd8b6a3b535818212c2e6859d2f6b434f7facfa37e07508eda1da2405b538faafa9e1f7e1094792de336ec5d9fcde98a1be0ad955364bcb005cbeff9cbf5377aa8cfc7e5e479bc4c77b054844252b7e5b12b8c9c2a8edaea685b54265b333b850019e7e91c85fb3da446533e630749105c24b30c7b3dd796e9c563df2c576bf53c81689875c2c3fbc053cf47a60dcfc33167d4c01764eee7f588a0c4d7fb00c6f1017d680651a3cf52478efefad4d8bf6b44498198216ad2d2a4148061a430eb39ad1426a79aaca5f25eadb19c64f6b09ed4250f7463128360931ee8f188ce8ecf96ac73328653ead5926bc4f0ce1c6653866bb8c904e8a09fef9cb0cba1e373550fd9ac90aede5dfa5265131c737c40f342f1726ec90f5499fd36835cac6379eb6d43e24178fd4b7588230415111e32ab21da5248ab0ee60920990e4413fccaf8954e1dc76bbf128e0dd0ac4986364d05fb77a4fb9d3c3bbc283f66d85ec4182f058ead85d168f0e9c39fb128255c88e978cac54814908028c76a30657ee9a10f7499b0b717d4dbcbef06da71c75bbc594422632a4281c2a0fa5cbeb8132d1c7b6e67346850c436aa45edfce475121ce0f5e1f546a992363e7a601f7d3a77084aef071e7405f43050f6e95b308a49be4ee5391e9c812a075e5ca559caa447d66e533a402009194e3987510fa71232cd3ef6efb6e07733a5985696975906f168b1e5640d93b9099d2f5588fe7aaadbdab397b6915d9efa5a7adbb63774"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x95}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x32, 0x1, "9bdcf1bc216f0db9f92c12a1ecf1ab04cef4d87036cbfd14bf68692581115d8c93bc12fea90cb4d65f430d8b04fb"}]}, {0x460, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf392}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x26}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xd098}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x78be7c42}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa3cd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x58, 0x2, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x49, 0x84, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @typed={0x5, 0x150, 0x0, 0x0, @str='\x00'}, @generic="30b2bb4c21bd2b87b32304ae02b24ee74a683eb55c1808cd362976cf5d03bc1541c08ab6657e378f8185471547", @typed={0x8, 0x10a, 0x0, 0x0, @fd}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x3f, 0x1, "b5145a79c9d74648a0c161ab350dda9dcfdc0ca34b0e798f23dd57b5b1b494db59243b211af75450a23df767aea4300835afbaf933e27ba5f5f2df"}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5b6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffff7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x92}]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x480, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd854}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x51}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x80000001}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5c}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x87}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2c0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7fc0000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "3426115143024e720e3821519d0646bfb6cb4602c6ea0adaae834ffb313733a87143e687ecd999b7f4854928f26f7a73743f6a597605c3db7c158dcaf266bd035cb6265974f2ae154a8321b5cffd32d1ca933e989a45cd51fc64123865ac3d2bc433214027c60fc674a87330c463d903e1de78837b644ec9c204328f98d266a7e9"}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xcb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ee}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9b, 0x1, "26fa99476118a5c4a448f0a588f4003079910a8b85f1e736dd2a723ab505224772b36a5918e3c0dabbd33389f130ec57bd298f798769c2d6d483a8cb952831c169a870248daeb8c493c31790d7d3f6a9cc261b97d68c60b04fbc830c049e70c98c9e050887c6ed215c581cd8c4ee3a691a4b73829434c4634451983daee5f8b0b9db7ff192743537de90c1592018b05bedf3102c256407"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5d, 0x1, "1f19b439d857abaff277a320e9654e6b3b0153789c6833f8973563ebcb4b0f2bb3ade90af72238f4cff71ef65c3af10b0fc443d30ec26a5f8586b727fbdc45d708018f6d8b47f15515bb53382efa2ef65ba707c3ceab51a2b5"}]}]}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_MAC={0xe4, 0x6, "8d6c632d5cead1ef5c158b30656b43c10d08c59c01d10dd91a0fe961c713da662562bdabe2622ca8143a80cb45efee0f54396ff568b260f3e5fd3339feea14c8cc27f76f4f78139798b77d8978989a790bdc5e0bfd2a33d2d1e9824a7189a82c12d3362e74adfeb3702c45ab3bb428781d148b8d2d9c53cd888573d15c29b1f1daf889f84d60a2403d1a1622e976e2eb7bef2a66233b43b2a0f80001ab1ee442cc98fa053a8cfa1520c0650347914872affebe67b0a189683856bd0d44d4c71bc9102857c9c946ea3f1bcf3642ec2b59ca26589968a332b34d8f5f7eb1343c71"}]}, 0x1c94}}, 0xc866b66d1f9458e7) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa4, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKR0_NAME={0x65, 0x102, "63ea66166d9254ea5d4d18bfdb6a99e6f39256ec8e54044b13a41cb15594033177c9a1dc965bf35afd5249b56a7114657e56097e4e53f509c6a357e660a71d8256ad83c3567c94e36cecd223213b04244b5e9706c9a697232b0e5b98eaf82a7eae"}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x80}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x1, 0xfffffffd) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) ioctl$auto_I2C_TIMEOUT(r6, 0x702, 0x0) socket(0x1d, 0x2, 0x6) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x4000000000000001) close_range$auto(0x2, 0x8, 0x0) r9 = socket(0x29, 0x2, 0x0) getsockopt$auto(r9, 0x119, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) 4.351622637s ago: executing program 2 (id=2113): futex$auto(&(0x7f0000000080)=0x1, 0x8, 0x3d, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40, 0xffffffffffffffff, 0xebb, 0xffffffffffffffff, 0xfffb) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/kvm/pf_emulate\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x2c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x1c1000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/sub1/hw_params\x00', 0x402, 0x0) write$auto(r4, 0x0, 0x7) read$auto(0x3, 0x0, 0x8080) 4.086434151s ago: executing program 6 (id=2114): close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x0}, &(0x7f00000001c0)=0x400) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, 0x0, 0x6a) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0x401) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2, 0x8000000000001, 0x8000000000000a}, 0xb, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r2, 0x0, 0x0) setsockopt$auto(r2, 0x497, 0x0, &(0x7f0000000140)='/dev/ptp0\x00', 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.989151091s ago: executing program 2 (id=2115): sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='\nA\x00\x00', @ANYRES16, @ANYBLOB="010325bd7040ffdbdf250a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x34000881}, 0xc040810) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) write$auto(r0, 0x0, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x22, 0xffffffffffffffff, 0x10000}, 0x10) fanotify_init$auto(0x6, 0x4) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) finit_module$auto(r2, &(0x7f0000000080)='/proc/irq/3/spurious\x00', 0x1) socket(0x1e, 0x2, 0x0) socketpair$auto(0x4, 0x0, 0xffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/3/spurious\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xe8142, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRESHEX=r1, @ANYRES8=r1], 0x18}, 0x1, 0x2000, 0x0, 0x40010}, 0x80) 3.83760088s ago: executing program 0 (id=2116): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr1/iflink\x00', 0x349c82, 0x0) r1 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)=@token_create={0x201, r0}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f0000000040)={0x5, 0x3, 0x8000000000004, 0x0, 0x3def5af, 0x4, '\x00', {0x8, 0x0, 0x4}}) r2 = ioctl$auto_TUNGETVNETLE2(r1, 0x800454dd, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x10001, 0xc0000000, 0xffffffffffffffff, 0x7, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0xb, 0xe5, 0x3}, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x24004004}, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_marker\x00', 0x341, 0x0) write$auto(0x3, 0x0, 0xfdef) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x1c9180, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000000)={0x4, 0x0, 0x5, 0xace}) shmctl$auto_SHM_UNLOCK(0x8909, 0xc, &(0x7f00000002c0)={{0x9, 0xffffffffffffffff, r6, 0x8, 0x1ff, 0x0, 0x9}, 0xc, 0x3, 0xc17e, 0xa, @raw=0x484, @inferred, 0x8004, 0x0, &(0x7f0000000140)="c9c1f48bf502b679f63f6d68e6471e6cffe015a47ddcf0cf65064ec0318a9ba48a0006cb759482598389524313e947226171a98541bcdfbebb59078585286d8d8f1b7d4f3c75373134663459fbd468332f783aee1ace7b4e5fb709db1c894390beb9354003c0568ae3f79c2bbde2f44d8293beda6399221160c4e4456dcf52e7a1d3c4cdfb6bb764818e859af8dbd9b5e5c4c9dcaaecec68e1c6719579288e97c8e93d36cb8c9b7a", &(0x7f0000000280)="0b1c1761f9bf3f0000000000000000"}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) close_range$auto(r5, r4, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) 3.518860103s ago: executing program 5 (id=2117): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0x100000df, 0x9b72, r0, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) mmap$auto(0x0, 0x400008, 0x100000df, 0x9b72, r0, 0x8000) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) (async) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) (async) 3.426233987s ago: executing program 6 (id=2118): capset$auto(&(0x7f0000000000)={0x80000000}, &(0x7f0000000040)={0x10, 0xfffff801}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) getsockopt$auto_SO_MARK(r1, 0xc, 0x24, &(0x7f0000000380)=')%\x00', &(0x7f0000000400)=0x8) write$auto(r0, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) socket(0x2, 0x3, 0x5) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x9, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0) read$auto_stats_fops_(r3, 0x0, 0x0) unshare$auto(0x3) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xffffdffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffff9, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x20000009, 0xbca7, 0xfffffffffffff000, 0x8000000, 0x0, 0x0, 0x693, [0x40002, 0x5a60, 0x4, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4b17, 0x2, 0x6, 0x9, 0x0, 0xfff, 0x5, 0xfffffbfffffffffb, 0xfffffffffffffffe, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xffff7fffffffffff, 0x0, 0x1ff, 0x8000000000000000, 0x0, 0x1, 0x0, 0x956, 0x101, 0x0, 0x59, 0x1000000000000000, 0x1, 0x40, 0x400, 0x97, 0x5, 0x4, 0xe17, 0x2, 0x6]}, 0x1fe, 0x1) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0) r5 = setfsgid$auto(0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) setresgid$auto(r5, 0x0, r5) 3.408651713s ago: executing program 2 (id=2119): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x43, &(0x7f0000000040)='\xa1\x00', 0x4) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$auto_SO_PEEK_OFF(r3, 0x0, 0x2a, 0x0, 0x6) mmap$auto(0x0, 0x9f, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) ioctl$auto_BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000140)={@raw, 0x2, &(0x7f00000000c0)=0x6, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r3, &(0x7f0000000300)='/3Cocw\x00\x03\x00\x00\x00\x17\x00\x00\x00ipt3\x00\xc3\xa9[/\xd4>p\xaeL@N&-\x1d\xb7\x86\xdc\xa8_3.\xa1\\\xee\xc7\xb4*8\xd6\xc04KDh\xc9\xca\xbe\x16\xca\xaaO\'\xfb\v\b\vM\x00e\xd6\xb9z\xdc\x12\x8f\x9d\x88\xad\xaav1\v\x06\xe79\xb9C\f\x875j\x00\x14\xa7\x7f\x1d\xf0\xf5\xc4\xe4nLc%\x80\xa95\xc3\xc2\xf0}\x05A\xa7\\\x9fC1\x9ci\x13\xbeq\xc8\'\xb8\x8amW\xf9\xe5\xf1\x1a\xe1\x8eTS\x97\xfbx\xb9#\xd9\x03\xcbz\x11\xb2\x04\\\xc0w\xeaS\xad8I$\xa0\x8c\xc4[\x04\xa4\x9a\x8b\xf5og\xee', 0x34b, 0x10000) mmap$auto(0x0, 0x0, 0x7ffffff7, 0x7fff, r0, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x9000, 0x8002, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x8fff, 0x3fffff, 0x200007, 0x11, 0xdd, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2.487122814s ago: executing program 5 (id=2120): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) (async) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94\xc8=8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc50Ov\v/@\xeemw\xb3\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x04:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=RH\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb9:\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0e\vd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf5\xa3\xe8\xd1\xd8\xfa\xedf$0$!\xb0\xe9\xca\xe8|\xef\xa2\xd5\xea\xdfg\xdf\bZw$\xea\x9b\xa5=dk\x89\xf1\x0fb\xeb#\xea\x17Oz\x1a\xce\xd0.\a\x8d\x89+\xee\v<\xcb\x8fV\xeeG-\x9ec\'\x04\xa4]\xd3\x02\x8f\x82\xd80\x8e\xbe[6\x16\xb4\xb0\x9c\xec<\xa5\xb1>a\xd0\xd6\xcd\xe6\xf3\x8e\x0eEs\xa1\xd1\x9a\"y\xa0\xb2h\xdc\xee\xd4\x81P\x0fl2\x10\x96\xe4\v\xd0', 0x9) (async) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20000805) (async) read$auto_proc_mounts_operations_mnt_namespace(r1, &(0x7f0000000000)=""/47, 0x2f) 2.460526082s ago: executing program 0 (id=2121): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) (async) mlock$auto(0xd, 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm0p/sub7/xrun_injection\x00', 0x0, 0x0) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) (async) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) (async) mlock$auto(0x8, 0x6) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) select$auto(0xfffffffe, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60b01, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x80202, 0x0) rt_sigprocmask$auto(0xb1, 0x0, 0x0, 0x7) (async) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) readahead$auto(r1, 0x9, 0x7fffffffffffffff) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x802, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/nr_requests\x00', 0xa022, 0x0) pwrite64$auto(r3, &(0x7f00000000c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7fff, 0xc) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/nfsfs/volumes\x00', 0x800, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/248, 0xf8) (async) write$auto(0xffffffffffffffff, 0x0, 0x1000000007e) (async) close_range$auto(0x2, 0x8, 0x0) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) 2.203673059s ago: executing program 2 (id=2122): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) umount2$auto(&(0x7f0000000240)='/proc/\x00\x18s/fs/bin\xe6mt[\xe9\xdf\xe2%\f\x16#9\x00\x00\x00\x00\x00\x00\xbe\xe6]\x01\x05\xac\xb4\x896\xd3\xe1|\x82\xa1\x7fB\x18|T\x9ev\x03\x00EM*\t\x91\xbbb\xc9X\xee<\xc4T\xf5dRw\xb6*A\x97\xf6\xf8\xeb\a\x95>B\xfb\xd3\x12YAm\x15\xad\x80n\xbe\x01.\x86*\x9d\x1e\xbdBp\xe6C\x06i\xd5\xd7\"Z0V\xa4\x80SCzA\x81|\x1c\xec\xc8\xdb\xa0C3\xcf1S\'<\x1d\xee\xb4v\x8aB\xd6\x87d\x86\xda+\xd5C\x11\x01\x93\xc3\xc1h\xde\xb7\xb10f5\xa4\xeaCG\x8bR\\\x1bM\x94:\xa0\xb2\b]\x05\xe1$\xfaG\xe9~/\xde\xccA\x018\xbc\xd2\'FvN\xdf\xed\xa9*\x17n\x04R3', 0x4) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), r1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x2}, 0x803}, 0xfffffff9, 0x14, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) mprotect$auto(0x200000000000, 0x806121, 0x6) 2.078012793s ago: executing program 5 (id=2123): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2c00, 0x0) ioctl$auto_MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000080)={0xfffffff8, 0x80, 0x0}) r2 = ioctl$auto_UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) r3 = timerfd_create$auto(0x0, 0x0) timerfd_gettime$auto(r3, &(0x7f0000000040)={{0x2, 0xd21}, {0x29e2, 0x3ff}}) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r5) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001900)={0x1c94, r4, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1b88, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x24, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x6}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b60, 0x5, 0x0, 0x1, [{0x102c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x95}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x32, 0x1, "9bdcf1bc216f0db9f92c12a1ecf1ab04cef4d87036cbfd14bf68692581115d8c93bc12fea90cb4d65f430d8b04fb"}]}, {0x460, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf392}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x26}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xd098}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x78be7c42}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa3cd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x58, 0x2, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x49, 0x84, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid=r5}, @typed={0x5, 0x150, 0x0, 0x0, @str='\x00'}, @generic="30b2bb4c21bd2b87b32304ae02b24ee74a683eb55c1808cd362976cf5d03bc1541c08ab6657e378f8185471547", @typed={0x8, 0x10a, 0x0, 0x0, @fd}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x3f, 0x1, "b5145a79c9d74648a0c161ab350dda9dcfdc0ca34b0e798f23dd57b5b1b494db59243b211af75450a23df767aea4300835afbaf933e27ba5f5f2df"}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5b6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffff7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x92}]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x480, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3f4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd854}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x51}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x80000001}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5c}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x87}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2c0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7fc0000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "3426115143024e720e3821519d0646bfb6cb4602c6ea0adaae834ffb313733a87143e687ecd999b7f4854928f26f7a73743f6a597605c3db7c158dcaf266bd035cb6265974f2ae154a8321b5cffd32d1ca933e989a45cd51fc64123865ac3d2bc433214027c60fc674a87330c463d903e1de78837b644ec9c204328f98d266a7e9"}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xcb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ee}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9b, 0x1, "26fa99476118a5c4a448f0a588f4003079910a8b85f1e736dd2a723ab505224772b36a5918e3c0dabbd33389f130ec57bd298f798769c2d6d483a8cb952831c169a870248daeb8c493c31790d7d3f6a9cc261b97d68c60b04fbc830c049e70c98c9e050887c6ed215c581cd8c4ee3a691a4b73829434c4634451983daee5f8b0b9db7ff192743537de90c1592018b05bedf3102c256407"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5d, 0x1, "1f19b439d857abaff277a320e9654e6b3b0153789c6833f8973563ebcb4b0f2bb3ade90af72238f4cff71ef65c3af10b0fc443d30ec26a5f8586b727fbdc45d708018f6d8b47f15515bb53382efa2ef65ba707c3ceab51a2b5"}]}]}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_MAC={0xe4, 0x6, "8d6c632d5cead1ef5c158b30656b43c10d08c59c01d10dd91a0fe961c713da662562bdabe2622ca8143a80cb45efee0f54396ff568b260f3e5fd3339feea14c8cc27f76f4f78139798b77d8978989a790bdc5e0bfd2a33d2d1e9824a7189a82c12d3362e74adfeb3702c45ab3bb428781d148b8d2d9c53cd888573d15c29b1f1daf889f84d60a2403d1a1622e976e2eb7bef2a66233b43b2a0f80001ab1ee442cc98fa053a8cfa1520c0650347914872affebe67b0a189683856bd0d44d4c71bc9102857c9c946ea3f1bcf3642ec2b59ca26589968a332b34d8f5f7eb1343c71"}]}, 0x1c94}}, 0xc866b66d1f9458e7) sendmsg$auto_NL80211_CMD_STOP_AP(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa4, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKR0_NAME={0x65, 0x102, "63ea66166d9254ea5d4d18bfdb6a99e6f39256ec8e54044b13a41cb15594033177c9a1dc965bf35afd5249b56a7114657e56097e4e53f509c6a357e660a71d8256ad83c3567c94e36cecd223213b04244b5e9706c9a697232b0e5b98eaf82a7eae"}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x80}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x1, 0xfffffffd) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x80440, 0x0) ioctl$auto_I2C_TIMEOUT(r6, 0x702, 0x0) socket(0x1d, 0x2, 0x6) r7 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x4000000000000001) close_range$auto(0x2, 0x8, 0x0) r9 = socket(0x29, 0x2, 0x0) getsockopt$auto(r9, 0x119, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) 1.815602083s ago: executing program 5 (id=2124): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) sched_setscheduler$auto(0x0, 0x1, &(0x7f00000019c0)={0xb}) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) ftruncate$auto(r2, 0xa0) write$auto(r0, 0x0, 0x7) read$auto(0x3, 0x0, 0x8080) 1.789206229s ago: executing program 6 (id=2125): close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x0}, &(0x7f00000001c0)=0x400) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, 0x0, 0x6a) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0x401) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2, 0x8000000000001, 0x8000000000000a}, 0xb, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$auto(r2, 0x497, 0x0, &(0x7f0000000140)='/dev/ptp0\x00', 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.535089197s ago: executing program 5 (id=2126): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/hid/drivers/hid-accutouch/uevent\x00', 0x0, 0x0) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x341, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) r2 = socket(0xa, 0x2, 0x3a) bind$auto(r2, &(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0xc001}, 0x66) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(r3, &(0x7f0000000240)={{&(0x7f00000000c0)="6b35a56a68c247244a24b1d2e490ae829bc277574303c4d9eeb386080b1f36cceef82185708854ec21a66167faa9cd7267cc6752f28447e5ff4dd27d2a34397032d09c03b4bbf33266333395ab0b6a3d27e2469d054421f7f8d71917cb366105229f76d9740668a9cf8594b4c898d310fb000100c6a0b1e4532e9f253af476b554514de56c7f4004c7e58e2ed022494632a6808ce231bc170a6bb9e997ed342de2f1d5eea129a99d7a4be61e3990328a435d4ff17a8894c6a26e14f89985b61858344e2cf52719cb2e0837a6", 0x4, &(0x7f0000000000)={&(0x7f00000002c0)="26bb609c83d335772de43319f7e41ada487903d5e92cec779fdbfebf276b8ac4b35e6fc1a25b0b26244f9182d37a6ccc0d72afb7e1e5f611f9276bd35bed61721f00a3b261bf2313cb88d0cc6b6fbb9983c2e1ff15dd1ad3c7e6371e59d0767a4a5adf162a0dd0acfada91c9869ec548bd10", 0x7}, 0x2, 0x0, 0x8001, 0x101}, 0x3}, 0x5, 0x26a) getsockopt$auto_SO_ZEROCOPY(r3, 0x3, 0x3c, &(0x7f0000000380)='.\\K}\xc3\x00', &(0x7f0000001e40)=0xd) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) timer_create$auto(0x9, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mlock$auto(0x112, 0x80006) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="7201aa2e", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f00000001c0)={{0x0, 0x1, &(0x7f00000002c0)={0x0, 0xc4}, 0x4, 0x0, 0x5, 0xe18}, 0x6}, 0xffffffff, 0xffffffbe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) memfd_secret$auto(0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000000000000, 0x2, 0x48eb5, r0, 0x3) 1.470751281s ago: executing program 0 (id=2127): close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my=0x0}, &(0x7f00000001c0)=0x400) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, 0x0, 0x6a) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0x401) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x141401, 0x0) clock_adjtime$auto(0xfffffffffffffffb, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x2, 0x8000000000001, 0x8000000000000a}, 0xb, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r2, 0x0, 0x0) setsockopt$auto(r2, 0x497, 0x0, &(0x7f0000000140)='/dev/ptp0\x00', 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.164372719s ago: executing program 2 (id=2128): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x20000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4, 0x2020007, 0x3, 0xeb2, 0xfffffffffffffffa, 0x6) socket(0xa, 0x2, 0x0) socket(0x18, 0x5, 0x1) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, 0x0, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@_si_pad}, 0x6, &(0x7f0000000340)={{0x1c00000000000000, 0xc}, {0xfffffffffffffff7, 0x7ff}, 0x4, 0x2, 0x4, 0x100000000, 0xffffffffffffffff, 0x100000001, 0x4fcd, 0x2, 0xfffffffffffffbff, 0x7, 0x0, 0x0, 0x0, 0x8}) r3 = socket(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00'}) bind$auto(r3, 0x0, 0x6b) futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0xffff0000, 0x0, &(0x7f0000000440)=0x2, 0x2000005) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) msgsnd$auto(0xf0d, &(0x7f0000000140)={0x6, 0xfe}, 0x37, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) 926.772801ms ago: executing program 6 (id=2129): close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x0, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xffffffff}, {0x100, 0x1, 0x52, 0x85, 0x3, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=r6, @ANYBLOB="12000100898771f1c19f17790481008286dd000004"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00F\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a000000080001008000000008000200", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) kexec_load$auto(0xff, 0xfff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x402800, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r0, 0x84, 0x7b, 0x0, &(0x7f00000002c0)=0x1000c0) clone$auto(0x8, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x5) 201.557185ms ago: executing program 6 (id=2130): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socket(0xa, 0x801, 0x84) (rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x2c, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async, rerun: 64) r0 = socket(0x10, 0x2, 0x0) (rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x28, 0x1, 0x0) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x8102, 0x0) (async) acct$auto(&(0x7f00000000c0)='/dev/snd/midiC2D0\x00') (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) fcntl$auto_F_NOTIFY(r0, 0x402, 0x9000) (async, rerun: 64) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) (rerun: 64) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mremap$auto(0x1ff000, 0x100005, 0x86, 0x3, 0x2) (async, rerun: 32) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) (async, rerun: 32) fsopen$auto(0x0, 0x1) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) 0s ago: executing program 2 (id=2131): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x4000008000) sysfs$auto(0x2, 0x7, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, r0, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000003040)={0x0, 0xf595a695bc43bc0e, &(0x7f0000003000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYBLOB="6abb51daa8d5d3098c64533f895e7e0273b1ce363731a41d96cf6c6163ce2fb169e4de0247f0611293577a6bedf50a20f65b4be9d9a732ce25a892e79e6a37e6a21a059f0d97662c68ca580951b0c746efc29cfb786fc873862165f561f883faf99e3794f54e", @ANYBLOB="01002cbd7000fbdbdf250a0000000800010080000000"], 0x1c}}, 0x20048811) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}, 0x1, 0x0, 0x0, 0x41}, 0x40000) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000100), r1) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1074210}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002dbd7000fddbdf2501000000080001006401010108000b00ffffffff14000200ff02000014000c00ff010000000000000000000000000001000010000000000000400000"], 0x4c}}, 0x40810) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0xffffffffffffffff, 0x2}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000002c0)="0f742129a2e0c5ea1bb978a665e947c0909cd8746ab83298c5a94d79cf9df410e0ee29c77ff746c874762ba3909217279bda90773819d93b23122461037c34124918be2badca8d16dd7ae77831d7a25d2223b7e9db7b02403706179f324c4cf06129604c409f7cd15a2a247e7fdf8b9f8cf7ba84bec2ec797ee0720675e061fb227d96cde6f9d5a8314d143b11b61ff68d31ddeb") r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r6, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) kernel console output (not intermixed with test programs): 4][T11967] ? trace_contention_end+0x140/0x180 [ 501.152133][T11967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.152161][T11967] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 501.152195][T11967] ? do_alloc_pages+0xd1/0x250 [ 501.152229][T11967] ? do_alloc_pages+0xd1/0x250 [ 501.152269][T11967] ? __mutex_unlock_slowpath+0x15c/0x790 [ 501.152298][T11967] ? __snd_dma_alloc_pages+0xd2/0x150 [ 501.152324][T11967] __vmalloc_node_noprof+0xad/0xf0 [ 501.152357][T11967] ? __snd_dma_alloc_pages+0xd2/0x150 [ 501.152383][T11967] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 501.152425][T11967] __snd_dma_alloc_pages+0xd2/0x150 [ 501.152453][T11967] snd_dma_alloc_dir_pages+0x151/0x240 [ 501.152484][T11967] do_alloc_pages+0x113/0x250 [ 501.152524][T11967] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 501.152569][T11967] snd_pcm_hw_params+0x1729/0x1cb0 [ 501.152613][T11967] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 501.152653][T11967] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 501.152690][T11967] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 501.152730][T11967] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 501.152771][T11967] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 501.152818][T11967] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 501.152852][T11967] ? __pfx___mutex_lock+0x10/0x10 [ 501.152906][T11967] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 501.152945][T11967] snd_pcm_oss_set_channels+0x23a/0x370 [ 501.152980][T11967] ? __pfx_snd_pcm_oss_set_channels+0x10/0x10 [ 501.153035][T11967] snd_pcm_oss_ioctl+0x206f/0x3720 [ 501.153070][T11967] ? find_held_lock+0x2b/0x80 [ 501.153094][T11967] ? __fget_files+0x215/0x3d0 [ 501.153117][T11967] ? hook_file_ioctl_common+0x146/0x410 [ 501.153149][T11967] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 501.153186][T11967] ? __fget_files+0x21f/0x3d0 [ 501.153215][T11967] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 501.153250][T11967] __x64_sys_ioctl+0x18e/0x210 [ 501.153290][T11967] do_syscall_64+0x106/0xf80 [ 501.153313][T11967] ? clear_bhb_loop+0x40/0x90 [ 501.153344][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.153370][T11967] RIP: 0033:0x7f44a6f9c799 [ 501.153391][T11967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.153416][T11967] RSP: 002b:00007f44a7d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 501.153440][T11967] RAX: ffffffffffffffda RBX: 00007f44a7215fa0 RCX: 00007f44a6f9c799 [ 501.153457][T11967] RDX: 00002000000001c0 RSI: 00000000c0045006 RDI: 0000000000000005 [ 501.153473][T11967] RBP: 00007f44a7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 501.153488][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.153503][T11967] R13: 00007f44a7216038 R14: 00007f44a7215fa0 R15: 00007fffcb65fa58 [ 501.153535][T11967] [ 506.919463][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1204'. [ 507.045604][T12029] openvswitch: HfR: Dropping previously announced user features [ 507.711285][T11967] syz.0.1187: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 507.843848][T12047] sd 0:0:1:0: PR command failed: 1026 [ 507.849307][T12047] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 507.925852][T11967] CPU: 0 UID: 0 PID: 11967 Comm: syz.0.1187 Tainted: G U L syzkaller #0 PREEMPT(full) [ 507.925895][T11967] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 507.925904][T11967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.925919][T11967] Call Trace: [ 507.925928][T11967] [ 507.925937][T11967] dump_stack_lvl+0x100/0x190 [ 507.925982][T11967] warn_alloc.cold+0x95/0x1c1 [ 507.926026][T11967] ? __pfx_warn_alloc+0x10/0x10 [ 507.926063][T11967] ? lockdep_hardirqs_on+0x78/0x100 [ 507.926109][T11967] ? __get_vm_area_node+0x2c5/0x330 [ 507.926145][T11967] ? __get_vm_area_node+0x208/0x330 [ 507.926181][T11967] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 507.926217][T11967] ? lock_acquire+0x1cf/0x380 [ 507.926254][T11967] ? __snd_dma_alloc_pages+0xd2/0x150 [ 507.926281][T11967] ? rcu_is_watching+0x12/0xc0 [ 507.926322][T11967] ? trace_contention_end+0x140/0x180 [ 507.926360][T11967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.926387][T11967] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 507.926421][T11967] ? do_alloc_pages+0xd1/0x250 [ 507.926455][T11967] ? do_alloc_pages+0xd1/0x250 [ 507.926495][T11967] ? __mutex_unlock_slowpath+0x15c/0x790 [ 507.926524][T11967] ? __snd_dma_alloc_pages+0xd2/0x150 [ 507.926550][T11967] __vmalloc_node_noprof+0xad/0xf0 [ 507.926582][T11967] ? __snd_dma_alloc_pages+0xd2/0x150 [ 507.926609][T11967] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 507.926650][T11967] __snd_dma_alloc_pages+0xd2/0x150 [ 507.926679][T11967] snd_dma_alloc_dir_pages+0x151/0x240 [ 507.926709][T11967] do_alloc_pages+0x113/0x250 [ 507.926756][T11967] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 507.926801][T11967] snd_pcm_hw_params+0x1729/0x1cb0 [ 507.926846][T11967] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 507.926890][T11967] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 507.926928][T11967] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 507.926968][T11967] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 507.927008][T11967] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 507.927056][T11967] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 507.927091][T11967] ? __pfx___mutex_lock+0x10/0x10 [ 507.927136][T11967] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 507.927175][T11967] snd_pcm_oss_set_channels+0x23a/0x370 [ 507.927210][T11967] ? __pfx_snd_pcm_oss_set_channels+0x10/0x10 [ 507.927252][T11967] snd_pcm_oss_ioctl+0x206f/0x3720 [ 507.927286][T11967] ? find_held_lock+0x2b/0x80 [ 507.927310][T11967] ? __fget_files+0x215/0x3d0 [ 507.927333][T11967] ? hook_file_ioctl_common+0x146/0x410 [ 507.927365][T11967] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 507.927402][T11967] ? __fget_files+0x21f/0x3d0 [ 507.927431][T11967] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 507.927466][T11967] __x64_sys_ioctl+0x18e/0x210 [ 507.927507][T11967] do_syscall_64+0x106/0xf80 [ 507.927529][T11967] ? clear_bhb_loop+0x40/0x90 [ 507.927560][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.927586][T11967] RIP: 0033:0x7f44a6f9c799 [ 507.927607][T11967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.927632][T11967] RSP: 002b:00007f44a7d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.927655][T11967] RAX: ffffffffffffffda RBX: 00007f44a7215fa0 RCX: 00007f44a6f9c799 [ 507.927671][T11967] RDX: 00002000000001c0 RSI: 00000000c0045006 RDI: 0000000000000005 [ 507.927687][T11967] RBP: 00007f44a7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 507.927702][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.927717][T11967] R13: 00007f44a7216038 R14: 00007f44a7215fa0 R15: 00007fffcb65fa58 [ 507.927753][T11967] [ 508.290293][T12047] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 508.696021][T11967] Mem-Info: [ 508.715903][T11967] active_anon:13046 inactive_anon:0 isolated_anon:0 [ 508.715903][T11967] active_file:10241 inactive_file:47165 isolated_file:0 [ 508.715903][T11967] unevictable:768 dirty:589 writeback:0 [ 508.715903][T11967] slab_reclaimable:13562 slab_unreclaimable:90953 [ 508.715903][T11967] mapped:26622 shmem:5565 pagetables:1167 [ 508.715903][T11967] sec_pagetables:0 bounce:0 [ 508.715903][T11967] kernel_misc_reclaimable:0 [ 508.715903][T11967] free:1313299 free_pcp:14923 free_cma:0 [ 508.998114][T11967] Node 0 active_anon:41912kB inactive_anon:8kB active_file:40612kB inactive_file:188152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105920kB dirty:2348kB writeback:0kB shmem:10420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15488kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 509.118855][T11967] Node 1 active_anon:0kB inactive_anon:0kB active_file:352kB inactive_file:508kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:624kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 509.192466][T12048] kexec: Could not allocate control_code_buffer [ 509.219631][T11967] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 509.293205][T11967] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 509.309470][T11967] Node 0 DMA32 free:1307404kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41600kB inactive_anon:8kB active_file:40612kB inactive_file:188152kB unevictable:1536kB writepending:1672kB zspages:92kB present:3129332kB managed:2537300kB mlocked:0kB bounce:0kB free_pcp:65248kB local_pcp:65248kB free_cma:0kB [ 509.382999][T11967] lowmem_reserve[]: 0 0 1 1 1 [ 509.387787][T11967] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 509.457480][T11967] lowmem_reserve[]: 0 0 0 0 0 [ 509.472665][T11967] Node 1 Normal free:3938856kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:352kB inactive_file:508kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:624kB local_pcp:624kB free_cma:0kB [ 509.544840][T11967] lowmem_reserve[]: 0 0 0 0 0 [ 509.554919][T11967] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 509.581862][T11967] Node 0 DMA32: 6587*4kB (UME) 3748*8kB (UME) 2302*16kB (UME) 631*32kB (UME) 340*64kB (UME) 451*128kB (UME) 309*256kB (UME) 182*512kB (UM) 88*1024kB (UME) 2*2048kB (U) 207*4096kB (M) = 1307212kB [ 509.625723][T11967] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 509.727778][T11967] Node 1 Normal: 4*4kB (UM) 3*8kB (U) 4*16kB (U) 6*32kB (U) 4*64kB (UM) 6*128kB (M) 3*256kB (M) 3*512kB (UM) 1*1024kB (M) 5*2048kB (UM) 958*4096kB (M) = 3938856kB [ 509.843253][T11967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 509.932844][T11967] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 510.014163][T11967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 510.089416][T11967] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 510.168033][T11967] 60332 total pagecache pages [ 510.250155][T11967] 6 pages in swap cache [ 510.254382][T11967] Free swap = 124996kB [ 510.299328][T11967] Total swap = 124996kB [ 510.328534][T11967] 2097051 pages RAM [ 510.332399][T11967] 0 pages HighMem/MovableOnly [ 510.400442][T11967] 430847 pages reserved [ 510.404654][T11967] 0 pages cma reserved [ 510.934306][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1212'. [ 512.433966][ T9845] Bluetooth: hci2: Malformed Event: 0x13 [ 512.974897][T12096] futex_wake_op: syz.2.1216 tries to shift op by -2048; fix this program [ 513.142724][T12096] futex_wake_op: syz.2.1216 tries to shift op by -2048; fix this program [ 513.203718][ T9845] Bluetooth: hci0: Malformed HCI Event [ 516.138872][T12158] FAULT_INJECTION: forcing a failure. [ 516.138872][T12158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.260843][T12158] CPU: 0 UID: 0 PID: 12158 Comm: syz.2.1229 Tainted: G U L syzkaller #0 PREEMPT(full) [ 516.260891][T12158] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 516.260900][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.260915][T12158] Call Trace: [ 516.260922][T12158] [ 516.260931][T12158] dump_stack_lvl+0x100/0x190 [ 516.260973][T12158] should_fail_ex.cold+0x5/0xa [ 516.261001][T12158] _copy_from_user+0x2e/0xd0 [ 516.261032][T12158] get_timespec64+0x8b/0x1b0 [ 516.261060][T12158] ? __pfx_get_timespec64+0x10/0x10 [ 516.261086][T12158] ? ktime_get+0x200/0x300 [ 516.261118][T12158] __x64_sys_futex+0x21a/0x4d0 [ 516.261154][T12158] ? __pfx___x64_sys_futex+0x10/0x10 [ 516.261198][T12158] do_syscall_64+0x106/0xf80 [ 516.261220][T12158] ? clear_bhb_loop+0x40/0x90 [ 516.261250][T12158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.261274][T12158] RIP: 0033:0x7f17d159c799 [ 516.261294][T12158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.261316][T12158] RSP: 002b:00007ffe1388f828 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 516.261337][T12158] RAX: ffffffffffffffda RBX: 000000000007e5c9 RCX: 00007f17d159c799 [ 516.261353][T12158] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f17d1815fac [ 516.261367][T12158] RBP: 0000000000000032 R08: 0000000000000000 R09: 0000000000000000 [ 516.261381][T12158] R10: 00007ffe1388f930 R11: 0000000000000246 R12: 00007ffe1388f950 [ 516.261395][T12158] R13: 00007f17d1815fac R14: 000000000007e5fb R15: 00007ffe1388f930 [ 516.261424][T12158] [ 518.421561][T12194] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1235'. [ 518.541579][T12195] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1235'. [ 519.377747][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1239'. [ 523.735593][T12260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 526.423825][T12306] FAULT_INJECTION: forcing a failure. [ 526.423825][T12306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.603381][T12306] CPU: 0 UID: 0 PID: 12306 Comm: syz.2.1257 Tainted: G U L syzkaller #0 PREEMPT(full) [ 526.603422][T12306] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 526.603431][T12306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.603445][T12306] Call Trace: [ 526.603452][T12306] [ 526.603460][T12306] dump_stack_lvl+0x100/0x190 [ 526.603500][T12306] should_fail_ex.cold+0x5/0xa [ 526.603528][T12306] _copy_from_user+0x2e/0xd0 [ 526.603559][T12306] copy_msghdr_from_user+0x9f/0x4f0 [ 526.603591][T12306] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 526.603624][T12306] ? rcu_is_watching+0x12/0xc0 [ 526.603661][T12306] ? ___sys_recvmsg+0x177/0x1a0 [ 526.603687][T12306] ? kfree+0x2ec/0x6b0 [ 526.603723][T12306] ___sys_recvmsg+0xdd/0x1a0 [ 526.603752][T12306] ? __pfx____sys_recvmsg+0x10/0x10 [ 526.603796][T12306] ? __pfx___might_resched+0x10/0x10 [ 526.603838][T12306] do_recvmmsg+0x301/0x760 [ 526.603871][T12306] ? __pfx_do_recvmmsg+0x10/0x10 [ 526.603898][T12306] ? ksys_write+0x190/0x250 [ 526.603920][T12306] ? ksys_write+0x190/0x250 [ 526.603947][T12306] ? __mutex_unlock_slowpath+0x15c/0x790 [ 526.603981][T12306] ? __fget_files+0x21f/0x3d0 [ 526.604016][T12306] __x64_sys_recvmmsg+0x22a/0x280 [ 526.604041][T12306] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 526.604072][T12306] do_syscall_64+0x106/0xf80 [ 526.604093][T12306] ? clear_bhb_loop+0x40/0x90 [ 526.604122][T12306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.604146][T12306] RIP: 0033:0x7f17d159c799 [ 526.604170][T12306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.604193][T12306] RSP: 002b:00007f17d23e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 526.604215][T12306] RAX: ffffffffffffffda RBX: 00007f17d1816180 RCX: 00007f17d159c799 [ 526.604231][T12306] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 526.604244][T12306] RBP: 00007f17d23e2090 R08: 0000000000000000 R09: 0000000000000000 [ 526.604258][T12306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.604272][T12306] R13: 00007f17d1816218 R14: 00007f17d1816180 R15: 00007ffe1388f6c8 [ 526.604302][T12306] [ 527.057189][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1264'. [ 528.984946][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 529.148292][T12329] openvswitch: HfR: Dropping previously announced user features [ 529.936076][T12327] Process accounting paused [ 530.450748][T12368] FAULT_INJECTION: forcing a failure. [ 530.450748][T12368] name failslab, interval 1, probability 0, space 0, times 0 [ 530.523687][T12368] CPU: 0 UID: 0 PID: 12368 Comm: syz.0.1273 Tainted: G U L syzkaller #0 PREEMPT(full) [ 530.523731][T12368] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 530.523741][T12368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.523760][T12368] Call Trace: [ 530.523768][T12368] [ 530.523778][T12368] dump_stack_lvl+0x100/0x190 [ 530.523821][T12368] should_fail_ex.cold+0x5/0xa [ 530.523852][T12368] should_failslab+0xc2/0x120 [ 530.523880][T12368] __kmalloc_cache_noprof+0x7a/0x6f0 [ 530.523915][T12368] ? percpu_ref_init+0xec/0x3f0 [ 530.523942][T12368] ? __pfx_css_release+0x10/0x10 [ 530.523978][T12368] percpu_ref_init+0xec/0x3f0 [ 530.524000][T12368] ? init_and_link_css+0x33a/0x710 [ 530.524036][T12368] cgroup_apply_control_enable+0x51e/0xbd0 [ 530.524095][T12368] cgroup_mkdir+0x57f/0x1330 [ 530.524124][T12368] ? __pfx_cgroup_mkdir+0x10/0x10 [ 530.524150][T12368] kernfs_iop_mkdir+0x111/0x190 [ 530.524172][T12368] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 530.524212][T12368] vfs_mkdir+0x361/0x850 [ 530.524252][T12368] filename_mkdirat+0x48b/0x5e0 [ 530.524284][T12368] ? __pfx_filename_mkdirat+0x10/0x10 [ 530.524314][T12368] ? strncpy_from_user+0x19d/0x2d0 [ 530.524347][T12368] ? do_getname+0x191/0x390 [ 530.524383][T12368] __x64_sys_mkdir+0x6b/0x90 [ 530.524412][T12368] do_syscall_64+0x106/0xf80 [ 530.524435][T12368] ? clear_bhb_loop+0x40/0x90 [ 530.524466][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.524492][T12368] RIP: 0033:0x7f44a6f9c799 [ 530.524512][T12368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.524536][T12368] RSP: 002b:00007f44a7d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 530.524560][T12368] RAX: ffffffffffffffda RBX: 00007f44a7215fa0 RCX: 00007f44a6f9c799 [ 530.524577][T12368] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 530.524592][T12368] RBP: 00007f44a7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 530.524607][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.524622][T12368] R13: 00007f44a7216038 R14: 00007f44a7215fa0 R15: 00007fffcb65fa58 [ 530.524653][T12368] [ 530.527201][T12373] FAULT_INJECTION: forcing a failure. [ 530.527201][T12373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.878490][T12373] CPU: 0 UID: 0 PID: 12373 Comm: syz.2.1274 Tainted: G U L syzkaller #0 PREEMPT(full) [ 531.878533][T12373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 531.878542][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.878556][T12373] Call Trace: [ 531.878580][T12373] [ 531.878602][T12373] dump_stack_lvl+0x100/0x190 [ 531.878653][T12373] should_fail_ex.cold+0x5/0xa [ 531.878682][T12373] _copy_from_user+0x2e/0xd0 [ 531.878718][T12373] copy_msghdr_from_user+0x9f/0x4f0 [ 531.878750][T12373] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 531.878784][T12373] ? rcu_is_watching+0x12/0xc0 [ 531.878821][T12373] ? ___sys_recvmsg+0x177/0x1a0 [ 531.878848][T12373] ? kfree+0x2ec/0x6b0 [ 531.878884][T12373] ___sys_recvmsg+0xdd/0x1a0 [ 531.878914][T12373] ? __pfx____sys_recvmsg+0x10/0x10 [ 531.878959][T12373] ? __pfx___might_resched+0x10/0x10 [ 531.879001][T12373] do_recvmmsg+0x301/0x760 [ 531.879035][T12373] ? __pfx_do_recvmmsg+0x10/0x10 [ 531.879062][T12373] ? ksys_write+0x190/0x250 [ 531.879084][T12373] ? ksys_write+0x190/0x250 [ 531.879111][T12373] ? __mutex_unlock_slowpath+0x15c/0x790 [ 531.879145][T12373] ? __fget_files+0x21f/0x3d0 [ 531.879175][T12373] __x64_sys_recvmmsg+0x22a/0x280 [ 531.879199][T12373] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 531.879231][T12373] do_syscall_64+0x106/0xf80 [ 531.879251][T12373] ? clear_bhb_loop+0x40/0x90 [ 531.879281][T12373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.879305][T12373] RIP: 0033:0x7f17d159c799 [ 531.879324][T12373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.879346][T12373] RSP: 002b:00007f17d23e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 531.879368][T12373] RAX: ffffffffffffffda RBX: 00007f17d1816180 RCX: 00007f17d159c799 [ 531.879384][T12373] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 531.879397][T12373] RBP: 00007f17d23e2090 R08: 0000000000000000 R09: 0000000000000000 [ 531.879411][T12373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.879425][T12373] R13: 00007f17d1816218 R14: 00007f17d1816180 R15: 00007ffe1388f6c8 [ 531.879454][T12373] [ 532.841128][T12400] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 532.883147][T12400] QAT: failed to copy from user cfg_data. [ 533.165737][T12404] misc userio: Invalid payload size [ 535.572575][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 536.783114][T12476] zram0: detected capacity change from 0 to 16 [ 539.472091][T12520] capability: warning: `syz.3.1299' uses 32-bit capabilities (legacy support in use) [ 540.582865][ T9845] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 544.768642][ T30] audit: type=1800 audit(1774669438.873:8): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1317" name="sr0" dev="devtmpfs" ino=2893 res=0 errno=0 [ 544.925775][ T30] audit: type=1800 audit(1774669438.973:9): pid=12604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1317" name="sr0" dev="devtmpfs" ino=2893 res=0 errno=0 [ 545.685952][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'. [ 545.882852][ T9845] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 547.273300][T12625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1320'. [ 547.493874][T12625] openvswitch: HfR: Dropping previously announced user features [ 548.107267][ T9845] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 548.152790][T12636] futex_wake_op: syz.0.1324 tries to shift op by -2048; fix this program [ 550.432348][T12683] sd 0:0:1:0: PR command failed: 1026 [ 550.437829][T12683] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 550.540539][T12683] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 550.827062][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1332'. [ 552.901466][T12711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1334'. [ 553.069574][T12711] openvswitch: HfR: Dropping previously announced user features [ 553.341592][T12721] openvswitch: netlink: IP tunnel dst address not specified [ 553.499209][T12721] random: crng reseeded on system resumption [ 553.974471][T12721] hub 1-0:1.0: USB hub found [ 554.047243][T12721] hub 1-0:1.0: 1 port detected [ 555.515477][ T9845] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 556.056409][T12752] FAULT_INJECTION: forcing a failure. [ 556.056409][T12752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.135882][T12752] CPU: 0 UID: 0 PID: 12752 Comm: syz.2.1345 Tainted: G U L syzkaller #0 PREEMPT(full) [ 556.135928][T12752] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 556.135937][T12752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.136112][T12752] Call Trace: [ 556.136123][T12752] [ 556.136132][T12752] dump_stack_lvl+0x100/0x190 [ 556.136176][T12752] should_fail_ex.cold+0x5/0xa [ 556.136206][T12752] strncpy_from_user+0x3b/0x2d0 [ 556.136240][T12752] do_getname+0x78/0x390 [ 556.136276][T12752] do_sys_openat2+0xc5/0x1e0 [ 556.136316][T12752] ? __pfx_do_sys_openat2+0x10/0x10 [ 556.136362][T12752] __x64_sys_openat+0x12d/0x210 [ 556.136402][T12752] ? __pfx___x64_sys_openat+0x10/0x10 [ 556.136448][T12752] do_syscall_64+0x106/0xf80 [ 556.136471][T12752] ? clear_bhb_loop+0x40/0x90 [ 556.136502][T12752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.136527][T12752] RIP: 0033:0x7f17d159c799 [ 556.136549][T12752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.136574][T12752] RSP: 002b:00007f17d2424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.136597][T12752] RAX: ffffffffffffffda RBX: 00007f17d1815fa0 RCX: 00007f17d159c799 [ 556.136614][T12752] RDX: 0000000000181482 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 556.136630][T12752] RBP: 00007f17d1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 556.136645][T12752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.136661][T12752] R13: 00007f17d1816038 R14: 00007f17d1815fa0 R15: 00007ffe1388f6c8 [ 556.136692][T12752] [ 556.455376][T12760] sg_write: data in/out 2097116/215 bytes for SCSI command 0x0-- guessing data in; [ 556.455376][T12760] program syz.2.1347 not setting count and/or reply_len properly [ 558.616051][T12796] netlink: 'syz.2.1354': attribute type 1 has an invalid length. [ 558.882889][T12793] futex_wake_op: syz.1.1353 tries to shift op by -2048; fix this program [ 559.049805][T12793] futex_wake_op: syz.1.1353 tries to shift op by -2048; fix this program [ 561.174068][T12804] Process accounting resumed [ 561.393764][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.402775][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.421615][T12824] input: jJǸ-9%vJ86 as /devices/virtual/input/input18 [ 563.079841][T12847] sd 0:0:1:0: PR command failed: 1026 [ 563.111718][T12847] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 563.170653][T12847] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 565.873115][T12876] FAULT_INJECTION: forcing a failure. [ 565.873115][T12876] name failslab, interval 1, probability 0, space 0, times 0 [ 565.976902][T12876] CPU: 0 UID: 0 PID: 12876 Comm: syz.2.1370 Tainted: G U L syzkaller #0 PREEMPT(full) [ 565.976946][T12876] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 565.976955][T12876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 565.976971][T12876] Call Trace: [ 565.976979][T12876] [ 565.976989][T12876] dump_stack_lvl+0x100/0x190 [ 565.977032][T12876] should_fail_ex.cold+0x5/0xa [ 565.977063][T12876] should_failslab+0xc2/0x120 [ 565.977090][T12876] __kmalloc_cache_noprof+0x7a/0x6f0 [ 565.977126][T12876] ? __v4l2_subdev_state_alloc+0x53/0x410 [ 565.977175][T12876] __v4l2_subdev_state_alloc+0x53/0x410 [ 565.977212][T12876] subdev_open+0xa6/0x510 [ 565.977245][T12876] v4l2_open+0x1d2/0x490 [ 565.977271][T12876] ? __pfx_v4l2_open+0x10/0x10 [ 565.977296][T12876] chrdev_open+0x234/0x6a0 [ 565.977323][T12876] ? __pfx_apparmor_file_open+0x10/0x10 [ 565.977350][T12876] ? __pfx_chrdev_open+0x10/0x10 [ 565.977379][T12876] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 565.977413][T12876] do_dentry_open+0x6d8/0x1660 [ 565.977440][T12876] ? __pfx_chrdev_open+0x10/0x10 [ 565.977473][T12876] vfs_open+0x82/0x3f0 [ 565.977509][T12876] path_openat+0x208c/0x31a0 [ 565.977542][T12876] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 565.977582][T12876] ? stack_depot_save_flags+0x27/0x9d0 [ 565.977616][T12876] ? __pfx_path_openat+0x10/0x10 [ 565.977645][T12876] ? kasan_save_stack+0x3f/0x50 [ 565.977666][T12876] ? kasan_save_stack+0x30/0x50 [ 565.977688][T12876] ? kasan_save_track+0x14/0x30 [ 565.977713][T12876] ? __kasan_slab_alloc+0x89/0x90 [ 565.977737][T12876] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 565.977776][T12876] ? do_getname+0x35/0x390 [ 565.977811][T12876] do_file_open+0x20e/0x430 [ 565.977840][T12876] ? __pfx_do_file_open+0x10/0x10 [ 565.977891][T12876] ? find_held_lock+0x2b/0x80 [ 565.977914][T12876] ? __might_fault+0xc5/0x140 [ 565.977951][T12876] ? __might_fault+0xc5/0x140 [ 565.977991][T12876] file_open_name+0x198/0x3b0 [ 565.978026][T12876] ? __pfx_file_open_name+0x10/0x10 [ 565.978066][T12876] ? do_getname+0x191/0x390 [ 565.978102][T12876] acct_on+0xa4/0x9e0 [ 565.978141][T12876] ? __pfx_acct_on+0x10/0x10 [ 565.978185][T12876] ? bpf_lsm_capable+0x9/0x10 [ 565.978212][T12876] ? security_capable+0x80/0x260 [ 565.978258][T12876] __x64_sys_acct+0x81/0x1e0 [ 565.978296][T12876] ? lockdep_hardirqs_on+0x78/0x100 [ 565.978337][T12876] do_syscall_64+0x106/0xf80 [ 565.978360][T12876] ? clear_bhb_loop+0x40/0x90 [ 565.978391][T12876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.978417][T12876] RIP: 0033:0x7f17d159c799 [ 565.978438][T12876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.978462][T12876] RSP: 002b:00007f17d2424028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 565.978486][T12876] RAX: ffffffffffffffda RBX: 00007f17d1815fa0 RCX: 00007f17d159c799 [ 565.978502][T12876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 565.978517][T12876] RBP: 00007f17d1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 565.978533][T12876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.978548][T12876] R13: 00007f17d1816038 R14: 00007f17d1815fa0 R15: 00007ffe1388f6c8 [ 565.978579][T12876] [ 566.663995][ T9845] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 566.861579][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1372'. [ 566.862292][T12881] openvswitch: HfR: Dropping previously announced user features [ 568.150728][ T30] audit: type=1800 audit(1774669462.353:10): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1376" name="discovery_nqn" dev="configfs" ino=139900 res=0 errno=0 [ 570.466192][T12942] FAULT_INJECTION: forcing a failure. [ 570.466192][T12942] name failslab, interval 1, probability 0, space 0, times 0 [ 570.559611][T12942] CPU: 0 UID: 0 PID: 12942 Comm: syz.2.1385 Tainted: G U L syzkaller #0 PREEMPT(full) [ 570.559654][T12942] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 570.559664][T12942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 570.559679][T12942] Call Trace: [ 570.559687][T12942] [ 570.559696][T12942] dump_stack_lvl+0x100/0x190 [ 570.559739][T12942] should_fail_ex.cold+0x5/0xa [ 570.559769][T12942] should_failslab+0xc2/0x120 [ 570.559797][T12942] __kmalloc_cache_noprof+0x7a/0x6f0 [ 570.559832][T12942] ? do_inotify_init+0xa4/0x5e0 [ 570.559866][T12942] ? mutex_init_lockep+0x110/0x150 [ 570.559907][T12942] do_inotify_init+0xa4/0x5e0 [ 570.559944][T12942] __x64_sys_inotify_init1+0x30/0x40 [ 570.559980][T12942] do_syscall_64+0x106/0xf80 [ 570.560002][T12942] ? clear_bhb_loop+0x40/0x90 [ 570.560033][T12942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.560067][T12942] RIP: 0033:0x7f17d159c799 [ 570.560091][T12942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.560116][T12942] RSP: 002b:00007f17d2424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 570.560139][T12942] RAX: ffffffffffffffda RBX: 00007f17d1815fa0 RCX: 00007f17d159c799 [ 570.560156][T12942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 570.560171][T12942] RBP: 00007f17d1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 570.560186][T12942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.560201][T12942] R13: 00007f17d1816038 R14: 00007f17d1815fa0 R15: 00007ffe1388f6c8 [ 570.560233][T12942] [ 571.807039][T12954] QAT: Stopping all acceleration devices. [ 572.972262][T12974] QAT: Invalid ioctl 35077 [ 575.155610][ T9849] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 579.015547][T12993] can: request_module (can-proto-3) failed. [ 580.323846][ T9849] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 582.148707][T13062] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1405'. [ 584.111306][T13081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1409'. [ 584.240148][T13081] openvswitch: HfR: Dropping previously announced user features [ 584.389452][T13087] vivid-007: ================= START STATUS ================= [ 584.457941][T13087] vivid-007: Generate PTS: true [ 584.577160][T13087] vivid-007: Generate SCR: true [ 584.629520][T13087] tpg source WxH: 320x240 (Y'CbCr) [ 584.634688][T13087] tpg field: 1 [ 584.713013][T13087] tpg crop: (0,0)/320x240 [ 584.749381][T13087] tpg compose: (0,0)/320x240 [ 584.754033][T13087] tpg colorspace: 8 [ 584.757842][T13087] tpg transfer function: 0/2 [ 584.917877][T13087] tpg Y'CbCr encoding: 0/1 [ 584.922350][T13087] tpg quantization: 0/2 [ 584.926508][T13087] tpg RGB range: 0/2 [ 585.024235][T13087] vivid-007: ================== END STATUS ================== [ 590.159793][ T30] audit: type=1800 audit(1774669484.476:11): pid=13157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1426" name="version" dev="configfs" ino=150819 res=0 errno=0 [ 590.229642][T13157] FAULT_INJECTION: forcing a failure. [ 590.229642][T13157] name failslab, interval 1, probability 0, space 0, times 0 [ 590.333767][T13157] CPU: 0 UID: 0 PID: 13157 Comm: syz.2.1426 Tainted: G U L syzkaller #0 PREEMPT(full) [ 590.333812][T13157] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 590.333821][T13157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 590.333836][T13157] Call Trace: [ 590.333844][T13157] [ 590.333854][T13157] dump_stack_lvl+0x100/0x190 [ 590.333897][T13157] should_fail_ex.cold+0x5/0xa [ 590.333927][T13157] should_failslab+0xc2/0x120 [ 590.333956][T13157] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 590.333995][T13157] ? __pmd_alloc+0xbf/0x950 [ 590.334030][T13157] __pmd_alloc+0xbf/0x950 [ 590.334065][T13157] __handle_mm_fault+0xa99/0x2b60 [ 590.334104][T13157] ? mt_find+0x45e/0x8e0 [ 590.334131][T13157] ? __pfx___handle_mm_fault+0x10/0x10 [ 590.334165][T13157] ? __pfx_mt_find+0x10/0x10 [ 590.334207][T13157] ? find_vma+0xbf/0x140 [ 590.334231][T13157] ? __pfx_find_vma+0x10/0x10 [ 590.334260][T13157] handle_mm_fault+0x36d/0xa20 [ 590.334301][T13157] do_user_addr_fault+0x74c/0x12f0 [ 590.334335][T13157] exc_page_fault+0x6f/0xd0 [ 590.334377][T13157] asm_exc_page_fault+0x26/0x30 [ 590.334402][T13157] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 590.334435][T13157] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 590.334461][T13157] RSP: 0018:ffffc90007787d50 EFLAGS: 00050206 [ 590.334480][T13157] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000000000d0 [ 590.334495][T13157] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90007787db0 [ 590.334511][T13157] RBP: 00000000000000d0 R08: 0000000000000001 R09: fffff52000ef0fcf [ 590.334526][T13157] R10: ffffc90007787e7f R11: 0000000000000000 R12: 0000000000000000 [ 590.334541][T13157] R13: ffffc90007787db0 R14: 0000000000000000 R15: 0000000000000000 [ 590.334672][T13157] _copy_from_user+0x98/0xd0 [ 590.334717][T13157] __do_sys_adjtimex+0x94/0x140 [ 590.334748][T13157] ? __pfx___do_sys_adjtimex+0x10/0x10 [ 590.334777][T13157] ? __pfx_do_futex+0x10/0x10 [ 590.334839][T13157] do_syscall_64+0x106/0xf80 [ 590.334863][T13157] ? clear_bhb_loop+0x40/0x90 [ 590.334894][T13157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.334920][T13157] RIP: 0033:0x7f17d159c799 [ 590.334942][T13157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.334967][T13157] RSP: 002b:00007f17d2424028 EFLAGS: 00000246 ORIG_RAX: 000000000000009f [ 590.334990][T13157] RAX: ffffffffffffffda RBX: 00007f17d1815fa0 RCX: 00007f17d159c799 [ 590.335007][T13157] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 590.335022][T13157] RBP: 00007f17d1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 590.335037][T13157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 590.335052][T13157] R13: 00007f17d1816038 R14: 00007f17d1815fa0 R15: 00007ffe1388f6c8 [ 590.335085][T13157] [ 590.779249][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 590.788985][T13162] openvswitch: HfR: Dropping previously announced user features [ 591.648385][T13149] Process accounting paused [ 597.506917][T13263] FAULT_INJECTION: forcing a failure. [ 597.506917][T13263] name fail_futex, interval 1, probability 0, space 0, times 0 [ 597.561844][T13263] CPU: 0 UID: 0 PID: 13263 Comm: syz.2.1451 Tainted: G U L syzkaller #0 PREEMPT(full) [ 597.561885][T13263] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 597.561893][T13263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.561907][T13263] Call Trace: [ 597.561914][T13263] [ 597.561924][T13263] dump_stack_lvl+0x100/0x190 [ 597.561964][T13263] should_fail_ex.cold+0x5/0xa [ 597.561992][T13263] get_futex_key+0x1d2/0x1620 [ 597.562025][T13263] ? __pfx_get_futex_key+0x10/0x10 [ 597.562060][T13263] ? rcu_is_watching+0x12/0xc0 [ 597.562097][T13263] ? vfs_writev+0x1d5/0xe10 [ 597.562132][T13263] ? kfree+0x2ec/0x6b0 [ 597.562171][T13263] futex_wake+0xea/0x530 [ 597.562210][T13263] ? __pfx_futex_wake+0x10/0x10 [ 597.562249][T13263] ? do_writev+0x214/0x340 [ 597.562292][T13263] do_futex+0x32b/0x350 [ 597.562324][T13263] ? __pfx_do_futex+0x10/0x10 [ 597.562358][T13263] ? __fget_files+0x21f/0x3d0 [ 597.562384][T13263] __x64_sys_futex+0x34f/0x4d0 [ 597.562419][T13263] ? __pfx___x64_sys_futex+0x10/0x10 [ 597.562452][T13263] ? __pfx_do_writev+0x10/0x10 [ 597.562496][T13263] do_syscall_64+0x106/0xf80 [ 597.562519][T13263] ? clear_bhb_loop+0x40/0x90 [ 597.562548][T13263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.562573][T13263] RIP: 0033:0x7f17d159c799 [ 597.562591][T13263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.562614][T13263] RSP: 002b:00007f17d24240e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 597.562637][T13263] RAX: ffffffffffffffda RBX: 00007f17d1815fa8 RCX: 00007f17d159c799 [ 597.562652][T13263] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f17d1815fac [ 597.562667][T13263] RBP: 00007f17d1815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 597.562681][T13263] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 597.562694][T13263] R13: 00007f17d1816038 R14: 00007ffe1388f5e0 R15: 00007ffe1388f6c8 [ 597.562724][T13263] [ 599.544202][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 608.708699][T13437] random: crng reseeded on system resumption [ 608.806336][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 608.910089][T13442] openvswitch: HfR: Dropping previously announced user features [ 610.679570][T13466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1492'. [ 610.899701][T13466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.023718][T13466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.163226][T13466] bond0 (unregistering): Released all slaves [ 612.316095][T13465] Process accounting resumed [ 615.980891][T13524] netlink: 'syz.0.1502': attribute type 33 has an invalid length. [ 616.051448][T13524] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1502'. [ 616.094361][T13524] netlink: 'syz.0.1502': attribute type 33 has an invalid length. [ 616.166349][T13524] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1502'. [ 616.231370][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1506'. [ 617.394977][T13547] bdi 7:2: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 618.899434][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 619.139861][T13559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1516'. [ 619.275810][T13559] openvswitch: HfR: Dropping previously announced user features [ 620.189615][T13587] sd 0:0:1:0: PR command failed: 1026 [ 620.226423][T13587] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 620.273007][T13587] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 620.671328][ T30] audit: type=1800 audit(1774669515.130:12): pid=13600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1529" name="version" dev="configfs" ino=166755 res=0 errno=0 [ 622.538806][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.545361][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.563944][T13611] Process accounting resumed [ 624.745336][T13649] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 624.908436][T13649] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 624.991168][T13649] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 625.152484][T13649] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 626.752162][ T9849] Bluetooth: hci0: command 0x0406 tx timeout [ 626.916981][ T9849] Bluetooth: hci1: command 0x0406 tx timeout [ 626.996549][ T9849] Bluetooth: hci2: command 0x0406 tx timeout [ 627.163740][ T9849] Bluetooth: hci3: command 0x0406 tx timeout [ 628.784288][T13690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 628.889746][T13690] openvswitch: HfR: Dropping previously announced user features [ 634.227327][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 634.331463][T13781] openvswitch: HfR: Dropping previously announced user features [ 634.544614][T13791] FAULT_INJECTION: forcing a failure. [ 634.544614][T13791] name failslab, interval 1, probability 0, space 0, times 0 [ 634.706382][T13791] CPU: 0 UID: 0 PID: 13791 Comm: syz.0.1562 Tainted: G U L syzkaller #0 PREEMPT(full) [ 634.706425][T13791] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 634.706435][T13791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.706450][T13791] Call Trace: [ 634.706458][T13791] [ 634.706467][T13791] dump_stack_lvl+0x100/0x190 [ 634.706511][T13791] should_fail_ex.cold+0x5/0xa [ 634.706541][T13791] should_failslab+0xc2/0x120 [ 634.706569][T13791] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 634.706609][T13791] ? alloc_inode+0x183/0x250 [ 634.706644][T13791] ? find_inode_fast+0x1fa/0x910 [ 634.706684][T13791] alloc_inode+0x183/0x250 [ 634.706718][T13791] iget_locked+0x1d9/0x6d0 [ 634.706754][T13791] ? __pfx_iget_locked+0x10/0x10 [ 634.706789][T13791] ? kernfs_root+0xee/0x2a0 [ 634.706825][T13791] ? kernfs_root+0xee/0x2a0 [ 634.706868][T13791] kernfs_get_inode+0x46/0x470 [ 634.706904][T13791] kernfs_iop_lookup+0x1a7/0x2d0 [ 634.706946][T13791] lookup_open.isra.0+0x631/0x11b0 [ 634.707000][T13791] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 634.707056][T13791] ? mnt_get_write_access+0x1e9/0x2f0 [ 634.707097][T13791] path_openat+0xa98/0x31a0 [ 634.707134][T13791] ? __pfx_path_openat+0x10/0x10 [ 634.707173][T13791] do_file_open+0x20e/0x430 [ 634.707203][T13791] ? __pfx_do_file_open+0x10/0x10 [ 634.707253][T13791] ? alloc_fd+0x476/0x790 [ 634.707281][T13791] ? do_getname+0x191/0x390 [ 634.707317][T13791] do_sys_openat2+0x10d/0x1e0 [ 634.707357][T13791] ? __pfx_do_sys_openat2+0x10/0x10 [ 634.707406][T13791] __x64_sys_openat+0x12d/0x210 [ 634.707442][T13791] ? __pfx___x64_sys_openat+0x10/0x10 [ 634.707489][T13791] do_syscall_64+0x106/0xf80 [ 634.707512][T13791] ? clear_bhb_loop+0x40/0x90 [ 634.707543][T13791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.707570][T13791] RIP: 0033:0x7f44a6f9c799 [ 634.707590][T13791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.707615][T13791] RSP: 002b:00007f44a51d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 634.707639][T13791] RAX: ffffffffffffffda RBX: 00007f44a7216180 RCX: 00007f44a6f9c799 [ 634.707655][T13791] RDX: 0000000000100802 RSI: 0000200000001740 RDI: ffffffffffffff9c [ 634.707671][T13791] RBP: 00007f44a7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 634.707687][T13791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.707701][T13791] R13: 00007f44a7216218 R14: 00007f44a7216180 R15: 00007fffcb65fa58 [ 634.707733][T13791] [ 636.481849][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 636.571273][T13802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 640.736796][ T30] audit: type=1800 audit(1774669535.294:13): pid=13860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1577" name="version" dev="configfs" ino=176316 res=0 errno=0 [ 643.495254][T13897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 644.355289][T13917] vhci_hcd vhci_hcd.2: invalid port number 16 [ 644.396512][T13917] vhci_hcd vhci_hcd.2: invalid port number 16 [ 644.474373][T13915] ima: policy update failed [ 644.510548][ T30] audit: type=1802 audit(1774669539.082:14): pid=13915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1591" res=0 errno=0 [ 645.358815][T13935] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 646.440627][T13929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 646.518955][T13929] openvswitch: HfR: Dropping previously announced user features [ 646.537765][T13941] FAULT_INJECTION: forcing a failure. [ 646.537765][T13941] name failslab, interval 1, probability 0, space 0, times 0 [ 646.681117][T13941] CPU: 0 UID: 0 PID: 13941 Comm: syz.0.1597 Tainted: G U L syzkaller #0 PREEMPT(full) [ 646.681161][T13941] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 646.681170][T13941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.681186][T13941] Call Trace: [ 646.681193][T13941] [ 646.681202][T13941] dump_stack_lvl+0x100/0x190 [ 646.681245][T13941] should_fail_ex.cold+0x5/0xa [ 646.681275][T13941] should_failslab+0xc2/0x120 [ 646.681303][T13941] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 646.681343][T13941] ? __proc_create+0x2cb/0x8c0 [ 646.681372][T13941] __proc_create+0x2cb/0x8c0 [ 646.681397][T13941] ? __pfx___proc_create+0x10/0x10 [ 646.681425][T13941] ? _raw_write_unlock+0x28/0x50 [ 646.681464][T13941] ? proc_register+0x559/0x8a0 [ 646.681492][T13941] proc_create_reg+0x75/0x170 [ 646.681520][T13941] proc_create_data+0x86/0x110 [ 646.681545][T13941] ? __pfx_proc_create_data+0x10/0x10 [ 646.681572][T13941] ? cache_register_net+0x137/0x5e0 [ 646.681598][T13941] ? cache_register_net+0x137/0x5e0 [ 646.681629][T13941] cache_register_net+0x25a/0x5e0 [ 646.681657][T13941] gss_svc_init_net+0x14e/0x640 [ 646.681694][T13941] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 646.681720][T13941] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 646.681760][T13941] ops_init+0x1e2/0x5f0 [ 646.681787][T13941] setup_net+0x118/0x3a0 [ 646.681811][T13941] ? __pfx_setup_net+0x10/0x10 [ 646.681833][T13941] ? lockdep_init_map_type+0x5c/0x250 [ 646.681869][T13941] ? mutex_init_lockep+0x110/0x150 [ 646.681909][T13941] copy_net_ns+0x46f/0x7c0 [ 646.681937][T13941] create_new_namespaces+0x3ea/0xac0 [ 646.681971][T13941] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 646.682002][T13941] ksys_unshare+0x473/0xad0 [ 646.682036][T13941] ? __pfx_ksys_unshare+0x10/0x10 [ 646.682088][T13941] __x64_sys_unshare+0x31/0x40 [ 646.682129][T13941] do_syscall_64+0x106/0xf80 [ 646.682152][T13941] ? clear_bhb_loop+0x40/0x90 [ 646.682183][T13941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.682209][T13941] RIP: 0033:0x7f44a6f9c799 [ 646.682229][T13941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.682253][T13941] RSP: 002b:00007f44a7d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 646.682276][T13941] RAX: ffffffffffffffda RBX: 00007f44a7215fa0 RCX: 00007f44a6f9c799 [ 646.682292][T13941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 646.682307][T13941] RBP: 00007f44a7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 646.682323][T13941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.682338][T13941] R13: 00007f44a7216038 R14: 00007f44a7215fa0 R15: 00007fffcb65fa58 [ 646.682368][T13941] [ 648.206580][T13958] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1602'. [ 651.740746][T14025] FAULT_INJECTION: forcing a failure. [ 651.740746][T14025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 651.828466][T14025] CPU: 0 UID: 0 PID: 14025 Comm: syz.0.1617 Tainted: G U L syzkaller #0 PREEMPT(full) [ 651.828506][T14025] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 651.828514][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 651.828528][T14025] Call Trace: [ 651.828535][T14025] [ 651.828543][T14025] dump_stack_lvl+0x100/0x190 [ 651.828584][T14025] should_fail_ex.cold+0x5/0xa [ 651.828609][T14025] ? prepare_alloc_pages+0x16d/0x5f0 [ 651.828640][T14025] should_fail_alloc_page+0xeb/0x140 [ 651.828668][T14025] prepare_alloc_pages+0x1f0/0x5f0 [ 651.828702][T14025] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 651.828748][T14025] ? bpf_ksym_find+0x124/0x1c0 [ 651.828779][T14025] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 651.828807][T14025] ? is_bpf_text_address+0x94/0x1a0 [ 651.828845][T14025] ? kernel_text_address+0x8d/0x100 [ 651.828882][T14025] ? __kernel_text_address+0xd/0x30 [ 651.828918][T14025] ? unwind_get_return_address+0x59/0xa0 [ 651.828947][T14025] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 651.829000][T14025] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 651.829035][T14025] ? __lock_acquire+0x4a5/0x2630 [ 651.829070][T14025] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.829096][T14025] ? policy_nodemask+0xed/0x4f0 [ 651.829125][T14025] alloc_pages_mpol+0x1fb/0x550 [ 651.829152][T14025] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 651.829185][T14025] alloc_pages_noprof+0x131/0x390 [ 651.829213][T14025] __pmd_alloc+0x3b/0x950 [ 651.829245][T14025] __handle_mm_fault+0xa99/0x2b60 [ 651.829282][T14025] ? mt_find+0x45e/0x8e0 [ 651.829307][T14025] ? __pfx___handle_mm_fault+0x10/0x10 [ 651.829338][T14025] ? __pfx_mt_find+0x10/0x10 [ 651.829377][T14025] ? find_vma+0xbf/0x140 [ 651.829400][T14025] ? __pfx_find_vma+0x10/0x10 [ 651.829426][T14025] handle_mm_fault+0x36d/0xa20 [ 651.829465][T14025] do_user_addr_fault+0x74c/0x12f0 [ 651.829497][T14025] exc_page_fault+0x6f/0xd0 [ 651.829536][T14025] asm_exc_page_fault+0x26/0x30 [ 651.829560][T14025] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 651.829592][T14025] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 651.829615][T14025] RSP: 0018:ffffc9000745f9b0 EFLAGS: 00050206 [ 651.829634][T14025] RAX: 0000000000000001 RBX: 0000000000000076 RCX: 0000000000000076 [ 651.829648][T14025] RDX: 0000000000000001 RSI: ffff888041384100 RDI: 0000000000000000 [ 651.829663][T14025] RBP: ffffc9000745fbc0 R08: 0000000000000000 R09: ffffed100827082e [ 651.829678][T14025] R10: ffff888041384175 R11: 0000000000000000 R12: ffff888041384100 [ 651.829692][T14025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000076 [ 651.829728][T14025] _copy_to_iter+0x4c5/0x1720 [ 651.829763][T14025] ? __pfx__copy_to_iter+0x10/0x10 [ 651.829791][T14025] ? hctx_tags_show+0xaf/0xd0 [ 651.829827][T14025] ? single_next+0xd/0x40 [ 651.829857][T14025] ? single_stop+0x9/0x10 [ 651.829886][T14025] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 651.829934][T14025] seq_read_iter+0x691/0x1270 [ 651.829973][T14025] ? aa_file_perm+0x7f3/0x14d0 [ 651.830016][T14025] seq_read+0x33b/0x4c0 [ 651.830053][T14025] ? __pfx_seq_read+0x10/0x10 [ 651.830111][T14025] full_proxy_read+0x135/0x1a0 [ 651.830147][T14025] ? __pfx_full_proxy_read+0x10/0x10 [ 651.830184][T14025] vfs_read+0x1e4/0xb30 [ 651.830210][T14025] ? __pfx_vfs_read+0x10/0x10 [ 651.830229][T14025] ? find_held_lock+0x2b/0x80 [ 651.830251][T14025] ? __fget_files+0x215/0x3d0 [ 651.830273][T14025] ? __fget_files+0x215/0x3d0 [ 651.830301][T14025] ? __fget_files+0x21f/0x3d0 [ 651.830331][T14025] __x64_sys_pread64+0x1eb/0x250 [ 651.830356][T14025] ? __pfx___x64_sys_pread64+0x10/0x10 [ 651.830389][T14025] do_syscall_64+0x106/0xf80 [ 651.830410][T14025] ? clear_bhb_loop+0x40/0x90 [ 651.830439][T14025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.830462][T14025] RIP: 0033:0x7f44a6f9c799 [ 651.830480][T14025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.830502][T14025] RSP: 002b:00007f44a7d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 651.830523][T14025] RAX: ffffffffffffffda RBX: 00007f44a7215fa0 RCX: 00007f44a6f9c799 [ 651.830538][T14025] RDX: 000000001000f42d RSI: 0000000000000000 RDI: 0000000000000003 [ 651.830551][T14025] RBP: 00007f44a7d7d090 R08: 0000000000000000 R09: 0000000000000000 [ 651.830565][T14025] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 651.830579][T14025] R13: 00007f44a7216038 R14: 00007f44a7215fa0 R15: 00007fffcb65fa58 [ 651.830609][T14025] [ 652.387005][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 652.397416][T14014] openvswitch: HfR: Dropping previously announced user features [ 652.453794][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 652.466248][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1619'. [ 653.616231][T14039] Process accounting paused [ 657.032799][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1635'. [ 657.110997][T14102] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1635'. [ 657.548076][T14111] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1637'. [ 657.901990][T14116] Invalid ELF header magic: != ELF [ 657.998420][T14111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.333223][T14111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.484573][T14111] bond0 (unregistering): Released all slaves [ 659.325894][T14129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1642'. [ 659.475446][T14129] openvswitch: HfR: Dropping previously announced user features [ 663.011122][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 663.111233][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1653'. [ 664.475027][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 664.516515][T14194] openvswitch: HfR: Dropping previously announced user features [ 665.489098][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 665.573173][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1663'. [ 665.721674][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1663'. [ 667.456788][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1669'. [ 667.552802][T14235] openvswitch: HfR: Dropping previously announced user features [ 671.723825][T14288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1683'. [ 671.832704][T14288] openvswitch: HfR: Dropping previously announced user features [ 674.746782][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 677.392317][T14369] nvme_fcloop: unknown parameter or missing value '1' [ 678.052784][T14376] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1704'. [ 678.158671][T14359] kexec: Could not allocate control_code_buffer [ 678.861778][T14388] netlink: 'syz.3.1707': attribute type 1 has an invalid length. [ 679.943321][T14396] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 680.038355][T14396] tipc: Started in network mode [ 680.070607][T14396] tipc: Node identity ffffffff, cluster identity 4711 [ 680.129846][T14396] tipc: Node number set to 4294967295 [ 681.881751][ T30] audit: type=1800 audit(1774669576.617:15): pid=14426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1715" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 683.569984][T14444] Process accounting resumed [ 683.690713][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.700050][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.395425][T14452] FAULT_INJECTION: forcing a failure. [ 684.395425][T14452] name failslab, interval 1, probability 0, space 0, times 0 [ 684.431231][T14454] FAULT_INJECTION: forcing a failure. [ 684.431231][T14454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 684.462168][T14452] CPU: 0 UID: 0 PID: 14452 Comm: syz.2.1722 Tainted: G U L syzkaller #0 PREEMPT(full) [ 684.462210][T14452] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 684.462220][T14452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 684.462235][T14452] Call Trace: [ 684.462243][T14452] [ 684.462253][T14452] dump_stack_lvl+0x100/0x190 [ 684.462296][T14452] should_fail_ex.cold+0x5/0xa [ 684.462327][T14452] should_failslab+0xc2/0x120 [ 684.462354][T14452] __kmalloc_cache_noprof+0x7a/0x6f0 [ 684.462389][T14452] ? trace_pid_list_alloc+0x2fe/0x480 [ 684.462436][T14452] trace_pid_list_alloc+0x2fe/0x480 [ 684.462480][T14452] trace_pid_write+0x110/0x460 [ 684.462522][T14452] ? __pfx_trace_pid_write+0x10/0x10 [ 684.462589][T14452] event_pid_write.isra.0+0x1e4/0x800 [ 684.462617][T14452] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 684.462652][T14452] vfs_write+0x2aa/0x1070 [ 684.462677][T14452] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 684.462706][T14452] ? __pfx_vfs_write+0x10/0x10 [ 684.462730][T14452] ? __fget_files+0x215/0x3d0 [ 684.462761][T14452] ? __fget_files+0x21f/0x3d0 [ 684.462793][T14452] ksys_write+0x12a/0x250 [ 684.462817][T14452] ? __pfx_ksys_write+0x10/0x10 [ 684.462850][T14452] do_syscall_64+0x106/0xf80 [ 684.462874][T14452] ? clear_bhb_loop+0x40/0x90 [ 684.462904][T14452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.462930][T14452] RIP: 0033:0x7f17d159c799 [ 684.462950][T14452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.462975][T14452] RSP: 002b:00007f17d2424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 684.462998][T14452] RAX: ffffffffffffffda RBX: 00007f17d1815fa0 RCX: 00007f17d159c799 [ 684.463014][T14452] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 684.463029][T14452] RBP: 00007f17d1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 684.463044][T14452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.463059][T14452] R13: 00007f17d1816038 R14: 00007f17d1815fa0 R15: 00007ffe1388f6c8 [ 684.463091][T14452] [ 684.709359][T14454] CPU: 0 UID: 0 PID: 14454 Comm: syz.0.1723 Tainted: G U L syzkaller #0 PREEMPT(full) [ 684.709400][T14454] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 684.709409][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 684.709423][T14454] Call Trace: [ 684.709430][T14454] [ 684.709439][T14454] dump_stack_lvl+0x100/0x190 [ 684.709479][T14454] should_fail_ex.cold+0x5/0xa [ 684.709508][T14454] _copy_from_user+0x2e/0xd0 [ 684.709540][T14454] do_sock_getsockopt+0x30b/0x3d0 [ 684.709569][T14454] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 684.709599][T14454] ? 0xffffffffff600000 [ 684.709627][T14454] __sys_getsockopt+0x133/0x1d0 [ 684.709664][T14454] ? 0xffffffffff600000 [ 684.709681][T14454] ? __pfx_ksys_write+0x10/0x10 [ 684.709709][T14454] ? __x64_sys_getsockopt+0xbd/0x160 [ 684.709744][T14454] __x64_sys_getsockopt+0xbd/0x160 [ 684.709779][T14454] ? do_syscall_64+0x95/0xf80 [ 684.709802][T14454] ? lockdep_hardirqs_on+0x78/0x100 [ 684.709841][T14454] do_syscall_64+0x106/0xf80 [ 684.709862][T14454] ? clear_bhb_loop+0x40/0x90 [ 684.709891][T14454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.709916][T14454] RIP: 0033:0x7f44a6f9c799 [ 684.709934][T14454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.709957][T14454] RSP: 002b:00007f44a7d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 684.709978][T14454] RAX: ffffffffffffffda RBX: 00007f44a7215fa0 RCX: 00007f44a6f9c799 [ 684.709994][T14454] RDX: 000000000000271c RSI: 0000000000000114 RDI: 0000000000000003 [ 684.710008][T14454] RBP: 00007f44a7d7d090 R08: 0000000000000000 R09: 0000000000000000 [ 684.710021][T14454] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000001 [ 684.710035][T14454] R13: 00007f44a7216038 R14: 00007f44a7215fa0 R15: 00007fffcb65fa58 [ 684.710056][T14454] ? 0xffffffffff600000 [ 684.710081][T14454] [ 686.807622][T14468] FAULT_INJECTION: forcing a failure. [ 686.807622][T14468] name failslab, interval 1, probability 0, space 0, times 0 [ 686.901700][T14468] CPU: 0 UID: 0 PID: 14468 Comm: syz.2.1727 Tainted: G U L syzkaller #0 PREEMPT(full) [ 686.901744][T14468] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 686.901754][T14468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.901769][T14468] Call Trace: [ 686.901776][T14468] [ 686.901786][T14468] dump_stack_lvl+0x100/0x190 [ 686.901829][T14468] should_fail_ex.cold+0x5/0xa [ 686.901859][T14468] should_failslab+0xc2/0x120 [ 686.901886][T14468] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 686.901926][T14468] ? acpi_ut_create_generic_state+0x61/0xc0 [ 686.901963][T14468] acpi_ut_create_generic_state+0x61/0xc0 [ 686.901994][T14468] acpi_ds_scope_stack_push+0x70/0x790 [ 686.902029][T14468] acpi_ds_init_aml_walk+0x2d8/0x680 [ 686.902066][T14468] acpi_ps_execute_method+0x39d/0xe90 [ 686.902117][T14468] acpi_ns_evaluate+0x640/0x1670 [ 686.902162][T14468] acpi_evaluate_object+0x420/0xe00 [ 686.902188][T14468] ? kasan_save_stack+0x30/0x50 [ 686.902210][T14468] ? kasan_save_track+0x14/0x30 [ 686.902238][T14468] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 686.902276][T14468] acpi_evaluate_integer+0xdf/0x220 [ 686.902316][T14468] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 686.902368][T14468] ? __pfx_status_show+0x10/0x10 [ 686.902394][T14468] status_show+0xa0/0x120 [ 686.902420][T14468] ? __pfx_status_show+0x10/0x10 [ 686.902454][T14468] dev_attr_show+0x52/0xa0 [ 686.902487][T14468] ? __pfx_dev_attr_show+0x10/0x10 [ 686.902520][T14468] sysfs_kf_seq_show+0x217/0x3a0 [ 686.902559][T14468] seq_read_iter+0x32f/0x1270 [ 686.902612][T14468] kernfs_fop_read_iter+0x46c/0x610 [ 686.902643][T14468] ? rw_verify_area+0xce/0x6d0 [ 686.902681][T14468] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 686.902713][T14468] vfs_read+0x825/0xb30 [ 686.902740][T14468] ? __pfx_vfs_read+0x10/0x10 [ 686.902782][T14468] ksys_read+0x12a/0x250 [ 686.902806][T14468] ? __pfx_ksys_read+0x10/0x10 [ 686.902838][T14468] do_syscall_64+0x106/0xf80 [ 686.902861][T14468] ? clear_bhb_loop+0x40/0x90 [ 686.902892][T14468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.902919][T14468] RIP: 0033:0x7f17d159c799 [ 686.902940][T14468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.902965][T14468] RSP: 002b:00007f17d2424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 686.902988][T14468] RAX: ffffffffffffffda RBX: 00007f17d1815fa0 RCX: 00007f17d159c799 [ 686.903005][T14468] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 686.903021][T14468] RBP: 00007f17d1632c99 R08: 0000000000000000 R09: 0000000000000000 [ 686.903036][T14468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.903051][T14468] R13: 00007f17d1816038 R14: 00007f17d1815fa0 R15: 00007ffe1388f6c8 [ 686.903083][T14468] [ 686.903187][T14468] ACPI Error: [ 688.028438][ T9845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 688.041806][ T9845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 688.050511][ T9845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 688.070178][ T9845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 688.080085][ T9845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 688.240189][T14468] ffff88807ce1f000 walk still has a scope list (20251212/dswstate-694) [ 688.697806][T14488] FAULT_INJECTION: forcing a failure. [ 688.697806][T14488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 688.783373][T14488] CPU: 0 UID: 0 PID: 14488 Comm: syz.2.1732 Tainted: G U L syzkaller #0 PREEMPT(full) [ 688.783413][T14488] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 688.783422][T14488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 688.783436][T14488] Call Trace: [ 688.783444][T14488] [ 688.783453][T14488] dump_stack_lvl+0x100/0x190 [ 688.783494][T14488] should_fail_ex.cold+0x5/0xa [ 688.783523][T14488] _copy_to_user+0x32/0xd0 [ 688.783555][T14488] simple_read_from_buffer+0xcb/0x170 [ 688.783596][T14488] proc_fail_nth_read+0x1af/0x230 [ 688.783628][T14488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 688.783660][T14488] ? rw_verify_area+0xce/0x6d0 [ 688.783695][T14488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 688.783725][T14488] vfs_read+0x1e4/0xb30 [ 688.783750][T14488] ? __pfx_vfs_read+0x10/0x10 [ 688.783771][T14488] ? __fget_files+0x215/0x3d0 [ 688.783801][T14488] ? __fget_files+0x21f/0x3d0 [ 688.783832][T14488] ksys_read+0x12a/0x250 [ 688.783853][T14488] ? __pfx_ksys_read+0x10/0x10 [ 688.783884][T14488] do_syscall_64+0x106/0xf80 [ 688.783907][T14488] ? clear_bhb_loop+0x40/0x90 [ 688.783936][T14488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.783961][T14488] RIP: 0033:0x7f17d155cfce [ 688.783980][T14488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 688.784002][T14488] RSP: 002b:00007f17d2423fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 688.784024][T14488] RAX: ffffffffffffffda RBX: 00007f17d24246c0 RCX: 00007f17d155cfce [ 688.784040][T14488] RDX: 000000000000000f RSI: 00007f17d24240a0 RDI: 0000000000000004 [ 688.784054][T14488] RBP: 00007f17d2424090 R08: 0000000000000000 R09: 0000000000000000 [ 688.784068][T14488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 688.784084][T14488] R13: 00007f17d1816038 R14: 00007f17d1815fa0 R15: 00007ffe1388f6c8 [ 688.784115][T14488] [ 689.383389][T14474] chnl_net:caif_netlink_parms(): no params data found [ 689.774057][T14474] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.815522][T14474] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.914526][T14474] bridge_slave_0: entered allmulticast mode [ 689.981671][T14474] bridge_slave_0: entered promiscuous mode [ 690.070994][T14474] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.127292][T14474] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.134857][ T9849] Bluetooth: hci4: command tx timeout [ 690.168727][T14474] bridge_slave_1: entered allmulticast mode [ 690.212126][T14474] bridge_slave_1: entered promiscuous mode [ 690.553561][T14474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.615163][T14474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.912186][T14474] team0: Port device team_slave_0 added [ 690.948950][T14474] team0: Port device team_slave_1 added [ 691.261927][T14474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.303265][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.439059][T14474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.541042][T14474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.563182][T14474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.673540][T14474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.199588][T14474] hsr_slave_0: entered promiscuous mode [ 692.207294][ T9849] Bluetooth: hci4: command tx timeout [ 692.244110][T14474] hsr_slave_1: entered promiscuous mode [ 692.271026][T14474] debugfs: 'hsr0' already exists in 'hsr' [ 692.305818][T14474] Cannot create hsr debugfs directory [ 692.774514][ T9849] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 693.341256][T14474] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 693.414713][T14474] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 693.476877][T14474] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 693.545007][T14474] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 694.003204][T14474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.110913][T14474] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.175795][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.182954][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.265213][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.272407][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.282162][ T9849] Bluetooth: hci4: command tx timeout [ 695.373502][T14474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.931653][ T9845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 695.943824][ T9845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 695.957433][ T9845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 695.977539][ T9845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 695.985279][ T9845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 696.345687][ T9845] Bluetooth: hci4: command tx timeout [ 696.860826][T14474] veth0_vlan: entered promiscuous mode [ 696.974509][T14474] veth1_vlan: entered promiscuous mode [ 697.071662][T14554] chnl_net:caif_netlink_parms(): no params data found [ 697.268970][T14474] veth0_macvtap: entered promiscuous mode [ 697.407914][T14474] veth1_macvtap: entered promiscuous mode [ 697.611313][T14554] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.657364][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.701641][T14554] bridge_slave_0: entered allmulticast mode [ 697.741219][T14554] bridge_slave_0: entered promiscuous mode [ 697.791774][T14554] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.830693][T14554] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.873429][T14554] bridge_slave_1: entered allmulticast mode [ 697.917241][T14554] bridge_slave_1: entered promiscuous mode [ 698.000612][T14474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.016710][ T9845] Bluetooth: hci5: command tx timeout [ 698.104928][T14474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.168311][T14554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.228675][T14554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.493744][ T9405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.551262][ T9405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.617120][T14554] team0: Port device team_slave_0 added [ 699.657988][T14554] team0: Port device team_slave_1 added [ 699.706076][ T9405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.752554][ T9405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.990208][T14554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.051390][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.091705][ T9845] Bluetooth: hci5: command tx timeout [ 700.230153][T14554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.317924][T14554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.370533][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.544270][T14554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.927696][T14554] hsr_slave_0: entered promiscuous mode [ 701.028806][T14554] hsr_slave_1: entered promiscuous mode [ 701.029537][T14554] debugfs: 'hsr0' already exists in 'hsr' [ 701.029559][T14554] Cannot create hsr debugfs directory [ 701.154550][T14584] netlink: 'syz.2.1747': attribute type 2 has an invalid length. [ 701.162788][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.162837][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.470453][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.470477][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.158710][ T9845] Bluetooth: hci5: command tx timeout [ 702.167232][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1748'. [ 702.244573][T14592] vhci_hcd vhci_hcd.2: invalid port number 16 [ 702.279642][T14582] openvswitch: HfR: Dropping previously announced user features [ 702.293276][T14554] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 702.323518][T14592] vhci_hcd vhci_hcd.2: invalid port number 16 [ 702.381980][T14554] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 702.410713][T14590] ima: policy update failed [ 702.475607][ T30] audit: type=1802 audit(1774669597.314:16): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1749" res=0 errno=0 [ 702.523683][T14554] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 702.610029][T14554] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 703.236690][T14554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.384268][T14554] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.469504][ T9853] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.476720][ T9853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.709223][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.716446][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.942505][T14554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 704.228693][ T9845] Bluetooth: hci5: command tx timeout [ 704.357276][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1754'. [ 705.341035][T14554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.711704][T14626] random: crng reseeded on system resumption [ 706.944473][T14629] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1755'. [ 707.063480][T14554] veth0_vlan: entered promiscuous mode [ 707.140794][T14554] veth1_vlan: entered promiscuous mode [ 707.250610][T14641] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1755'. [ 707.471964][T14666] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 707.704965][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 707.714458][T14554] veth0_macvtap: entered promiscuous mode [ 707.793544][T14554] veth1_macvtap: entered promiscuous mode [ 707.933735][T14661] openvswitch: HfR: Dropping previously announced user features [ 708.034808][T14554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.365153][T14554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.657858][ T9853] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.718025][ T9853] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.147103][ T9853] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.200086][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1764'. [ 709.223943][ T9853] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.877057][ T9853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.943913][ T9853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.095698][T11380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.159409][T11380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.793613][T14701] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 712.407424][T14708] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 712.750784][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1770'. [ 712.928215][T14711] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 712.979724][T14696] openvswitch: HfR: Dropping previously announced user features [ 714.058220][T14722] Process accounting paused [ 714.402199][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'. [ 714.936891][T14740] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1783'. [ 714.997621][T14740] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1783'. [ 715.102961][T14740] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1783'. [ 715.356458][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1783'. [ 715.529013][T14740] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1783'. [ 715.529242][T14740] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1783'. [ 715.529482][T14744] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1783'. [ 715.675616][T14740] netlink: 306 bytes leftover after parsing attributes in process `syz.4.1783'. [ 716.750897][ T30] audit: type=1807 audit(1774669611.661:17): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 716.883840][ T30] audit: type=1802 audit(1774669611.681:18): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1786" res=0 errno=0 [ 717.030139][T14759] ima: policy update failed [ 717.191319][ T30] audit: type=1802 audit(1774669612.103:19): pid=14759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1786" res=0 errno=0 [ 719.346467][T14771] __nla_validate_parse: 1 callbacks suppressed [ 719.346488][T14771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1789'. [ 719.497963][T14779] bond0: invalid ARP target specified [ 719.597661][T14779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1792'. [ 719.616682][T14771] openvswitch: HfR: Dropping previously announced user features [ 719.670353][T14783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1792'. [ 720.341481][T14790] sock: sock_set_timeout: `syz.2.1795' (pid 14790) tries to set negative timeout [ 722.862861][T14818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1799'. [ 723.078891][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1798'. [ 723.252383][T14826] vhci_hcd vhci_hcd.2: invalid port number 16 [ 723.272669][T14806] HfR: entered promiscuous mode [ 723.297887][T14826] vhci_hcd vhci_hcd.2: invalid port number 16 [ 723.403988][T14825] ima: policy update failed [ 723.441535][ T30] audit: type=1802 audit(1774669618.383:20): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1803" res=0 errno=0 [ 726.414250][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 726.503678][T14839] openvswitch: HfR: Dropping previously announced user features [ 726.647320][T14855] vhci_hcd vhci_hcd.2: invalid port number 16 [ 726.712251][T14855] vhci_hcd vhci_hcd.2: invalid port number 16 [ 726.821292][T14854] ima: policy update failed [ 726.872425][ T30] audit: type=1802 audit(1774669621.819:21): pid=14854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1810" res=0 errno=0 [ 727.015622][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1806'. [ 727.380399][T14838] openvswitch: HfR: Dropping previously announced user features [ 727.472784][T14864] random: crng reseeded on system resumption [ 729.525370][T14875] sd 0:0:1:0: PR command failed: 1026 [ 729.602403][T14875] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 729.644582][T14875] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 730.788845][T14889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1816'. [ 731.442777][T14889] openvswitch: HfR: Dropping previously announced user features [ 733.309755][T14898] kexec: Could not allocate control_code_buffer [ 733.683745][T14917] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1824'. [ 734.806860][T14925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1825'. [ 734.939672][T14925] HfR: entered promiscuous mode [ 735.982501][T14935] vhci_hcd vhci_hcd.2: invalid port number 16 [ 736.027502][T14935] vhci_hcd vhci_hcd.2: invalid port number 16 [ 736.124137][T14934] ima: policy update failed [ 736.172930][ T30] audit: type=1802 audit(1774669631.172:22): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1828" res=0 errno=0 [ 738.643894][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1835'. [ 740.988923][T14976] FAULT_INJECTION: forcing a failure. [ 740.988923][T14976] name failslab, interval 1, probability 0, space 0, times 0 [ 741.064596][T14976] CPU: 0 UID: 0 PID: 14976 Comm: syz.4.1838 Tainted: G U L syzkaller #0 PREEMPT(full) [ 741.064640][T14976] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 741.064650][T14976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.064664][T14976] Call Trace: [ 741.064672][T14976] [ 741.064680][T14976] dump_stack_lvl+0x100/0x190 [ 741.064724][T14976] should_fail_ex.cold+0x5/0xa [ 741.064754][T14976] should_failslab+0xc2/0x120 [ 741.064782][T14976] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 741.064821][T14976] ? create_new_namespaces+0x30/0xac0 [ 741.064848][T14976] ? rcu_is_watching+0x12/0xc0 [ 741.064892][T14976] create_new_namespaces+0x30/0xac0 [ 741.064918][T14976] ? bpf_lsm_capable+0x9/0x10 [ 741.064945][T14976] ? security_capable+0x80/0x260 [ 741.064990][T14976] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 741.065021][T14976] ksys_unshare+0x473/0xad0 [ 741.065064][T14976] ? __pfx_ksys_unshare+0x10/0x10 [ 741.065107][T14976] __x64_sys_unshare+0x31/0x40 [ 741.065140][T14976] do_syscall_64+0x106/0xf80 [ 741.065163][T14976] ? clear_bhb_loop+0x40/0x90 [ 741.065193][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.065219][T14976] RIP: 0033:0x7f4bf4b9c799 [ 741.065238][T14976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.065262][T14976] RSP: 002b:00007f4bf599f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 741.065286][T14976] RAX: ffffffffffffffda RBX: 00007f4bf4e16090 RCX: 00007f4bf4b9c799 [ 741.065302][T14976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 741.065317][T14976] RBP: 00007f4bf4c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 741.065332][T14976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.065347][T14976] R13: 00007f4bf4e16128 R14: 00007f4bf4e16090 R15: 00007fff4ab7f6e8 [ 741.065378][T14976] [ 741.742873][T14977] mkiss: ax0: crc mode is auto. [ 743.490545][T15010] netlink: 'syz.2.1847': attribute type 11 has an invalid length. [ 743.583127][T15010] netlink: 'syz.2.1847': attribute type 11 has an invalid length. [ 743.655475][T15010] netlink: 'syz.2.1847': attribute type 11 has an invalid length. [ 744.021625][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 744.093017][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1849'. [ 744.118068][T15016] Process accounting resumed [ 744.259282][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 744.840945][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 744.857462][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.791586][T15030] kexec: Could not allocate control_code_buffer [ 753.071914][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1861'. [ 753.139399][T15080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 753.145521][T15080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 753.211141][T15080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 753.250023][T15080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 753.296835][T15080] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 753.313628][T15080] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 753.536090][T15080] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 753.572220][T15080] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 753.626408][T15080] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 753.675643][T15080] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 754.537047][T15087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 754.994153][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1867'. [ 755.131789][T15095] ima: policy update failed [ 755.136983][ T30] audit: type=1807 audit(1774669650.222:23): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 755.188430][ T9849] Bluetooth: hci1: command 0x0406 tx timeout [ 755.194613][ T9845] Bluetooth: hci0: command 0x0406 tx timeout [ 755.223127][ T30] audit: type=1802 audit(1774669650.222:24): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1867" res=0 errno=0 [ 755.268480][ T9849] Bluetooth: hci4: command 0x0c1a tx timeout [ 755.274556][ T9849] Bluetooth: hci3: command 0x0406 tx timeout [ 755.280872][ T9845] Bluetooth: hci2: command 0x0406 tx timeout [ 755.369538][ T30] audit: type=1802 audit(1774669650.222:25): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1867" res=0 errno=0 [ 755.585584][T15098] Bluetooth: hci5: command 0x0c1a tx timeout [ 757.337592][T15098] Bluetooth: hci4: command 0x0c1a tx timeout [ 757.655952][T15098] Bluetooth: hci5: command 0x0c1a tx timeout [ 758.656479][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1871'. [ 758.727765][T15109] openvswitch: HfR: Dropping previously announced user features [ 759.407822][T15098] Bluetooth: hci4: command 0x0c1a tx timeout [ 759.728252][T15098] Bluetooth: hci5: command 0x0c1a tx timeout [ 760.932028][T15129] ptrace attach of "./syz-executor exec"[5837] was attempted by ""[15129] [ 761.618188][T14476] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 761.637374][T14476] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 761.645826][T14476] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 761.655281][T14476] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 761.663276][T14476] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 763.223332][T15147] chnl_net:caif_netlink_parms(): no params data found [ 763.708010][T14476] Bluetooth: hci6: command tx timeout [ 764.055235][T15147] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.118202][T15147] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.175003][T15147] bridge_slave_0: entered allmulticast mode [ 764.244994][T15147] bridge_slave_0: entered promiscuous mode [ 764.309430][T15147] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.374976][T15147] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.468918][T15147] bridge_slave_1: entered allmulticast mode [ 764.525338][T15147] bridge_slave_1: entered promiscuous mode [ 765.202296][T15147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 765.355653][T15147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 765.637023][T15147] team0: Port device team_slave_0 added [ 765.691847][T15147] team0: Port device team_slave_1 added [ 765.719656][T15182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 765.780521][T14476] Bluetooth: hci6: command tx timeout [ 765.806065][T15190] vhci_hcd vhci_hcd.2: invalid port number 16 [ 765.847853][T15190] vhci_hcd vhci_hcd.2: invalid port number 16 [ 765.909864][T15189] ima: policy update failed [ 765.919300][T15182] openvswitch: HfR: Dropping previously announced user features [ 765.929265][T15147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.956593][ T30] audit: type=1802 audit(1774669661.092:26): pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1881" res=0 errno=0 [ 765.985330][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.145276][T15147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.219104][T15147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.277363][T15147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.473253][T15147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.863836][T15147] hsr_slave_0: entered promiscuous mode [ 766.918320][T15147] hsr_slave_1: entered promiscuous mode [ 766.962739][T15147] debugfs: 'hsr0' already exists in 'hsr' [ 766.968751][T15147] Cannot create hsr debugfs directory [ 767.848975][T14476] Bluetooth: hci6: command tx timeout [ 768.820429][T15147] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 769.100470][T15147] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 769.140769][T15147] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 769.226331][T15147] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 769.920546][T14476] Bluetooth: hci6: command tx timeout [ 770.273051][T15147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 770.420778][T15147] 8021q: adding VLAN 0 to HW filter on device team0 [ 770.525461][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.532713][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.586384][T15243] vhci_hcd vhci_hcd.2: invalid port number 16 [ 770.592606][T15243] vhci_hcd vhci_hcd.2: invalid port number 16 [ 770.675494][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.682683][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.709765][T15242] ima: policy update failed [ 770.757063][ T30] audit: type=1802 audit(1774669665.925:27): pid=15242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1889" res=0 errno=0 [ 770.982154][T15147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 771.150151][T15245] futex_wake_op: syz.5.1890 tries to shift op by -2048; fix this program [ 772.321241][T15147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.906125][T15147] veth0_vlan: entered promiscuous mode [ 773.975943][T15147] veth1_vlan: entered promiscuous mode [ 774.162949][T15147] veth0_macvtap: entered promiscuous mode [ 774.305471][T15147] veth1_macvtap: entered promiscuous mode [ 774.425064][T15279] netlink: 'syz.2.1894': attribute type 2 has an invalid length. [ 774.437550][T15147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.484479][T15147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.493594][T15279] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1894'. [ 774.583345][ T9406] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.637073][ T9406] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.705123][ T9406] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.794863][ T9406] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.219296][ T9853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.279170][ T9853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.478257][T15290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.516965][T15290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.702361][T15284] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 775.766095][T15284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 775.793322][T15284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 775.799499][T15284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 775.860509][T15284] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 775.892052][T15284] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 775.931423][T15284] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 775.952306][T15284] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 776.038218][T15284] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 776.581244][T15275] Process accounting paused [ 776.610183][T15308] vhci_hcd vhci_hcd.2: invalid port number 16 [ 776.638959][T15308] vhci_hcd vhci_hcd.2: invalid port number 16 [ 777.439663][T15311] bridge0: port 3(vlan0) entered blocking state [ 777.562333][T15287] Bluetooth: hci0: command 0x0406 tx timeout [ 777.575799][T15311] bridge0: port 3(vlan0) entered disabled state [ 777.644513][T15311] vlan0: entered allmulticast mode [ 777.721869][T15287] Bluetooth: hci1: command 0x0406 tx timeout [ 777.772063][T15311] veth0_vlan: entered allmulticast mode [ 777.804998][T15287] Bluetooth: hci3: command 0x0406 tx timeout [ 777.811328][T15287] Bluetooth: hci2: command 0x0406 tx timeout [ 777.831535][T15311] vlan0: entered promiscuous mode [ 777.881501][T15328] Bluetooth: hci4: command 0x0c1a tx timeout [ 777.924071][T15311] bridge0: port 3(vlan0) entered blocking state [ 777.930515][T15311] bridge0: port 3(vlan0) entered forwarding state [ 777.963988][T15328] Bluetooth: hci6: command 0x0c1a tx timeout [ 777.970502][T15328] Bluetooth: hci5: command 0x0c1a tx timeout [ 778.835650][T15351] FAULT_INJECTION: forcing a failure. [ 778.835650][T15351] name failslab, interval 1, probability 0, space 0, times 0 [ 778.912349][T15351] CPU: 0 UID: 0 PID: 15351 Comm: syz.5.1907 Tainted: G U L syzkaller #0 PREEMPT(full) [ 778.912392][T15351] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 778.912402][T15351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.912418][T15351] Call Trace: [ 778.912426][T15351] [ 778.912436][T15351] dump_stack_lvl+0x100/0x190 [ 778.912480][T15351] should_fail_ex.cold+0x5/0xa [ 778.912516][T15351] ? __register_sysctl_table+0xbe4/0x1650 [ 778.912541][T15351] should_failslab+0xc2/0x120 [ 778.912569][T15351] __kmalloc_noprof+0xe0/0x850 [ 778.912616][T15351] __register_sysctl_table+0xbe4/0x1650 [ 778.912648][T15351] ? __pfx___register_sysctl_table+0x10/0x10 [ 778.912672][T15351] ? is_module_address+0x69/0xf0 [ 778.912705][T15351] ? register_net_sysctl_sz+0x222/0x430 [ 778.912733][T15351] ? __asan_memcpy+0x20/0x60 [ 778.912770][T15351] ? kmemdup_noprof+0x49/0x60 [ 778.912796][T15351] ipv6_sysctl_net_init+0x180/0x2b0 [ 778.912826][T15351] ? __pfx_ipv6_sysctl_net_init+0x10/0x10 [ 778.912855][T15351] ops_init+0x1e2/0x5f0 [ 778.912881][T15351] setup_net+0x118/0x3a0 [ 778.912905][T15351] ? __pfx_setup_net+0x10/0x10 [ 778.912927][T15351] ? lockdep_init_map_type+0x5c/0x250 [ 778.912963][T15351] ? mutex_init_lockep+0x110/0x150 [ 778.913004][T15351] copy_net_ns+0x46f/0x7c0 [ 778.913033][T15351] create_new_namespaces+0x3ea/0xac0 [ 778.913068][T15351] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 778.913099][T15351] ksys_unshare+0x473/0xad0 [ 778.913134][T15351] ? __pfx_ksys_unshare+0x10/0x10 [ 778.913178][T15351] __x64_sys_unshare+0x31/0x40 [ 778.913211][T15351] do_syscall_64+0x106/0xf80 [ 778.913233][T15351] ? clear_bhb_loop+0x40/0x90 [ 778.913264][T15351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.913290][T15351] RIP: 0033:0x7fea9b39c799 [ 778.913311][T15351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.913336][T15351] RSP: 002b:00007fea9c2b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 778.913360][T15351] RAX: ffffffffffffffda RBX: 00007fea9b615fa0 RCX: 00007fea9b39c799 [ 778.913381][T15351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 778.913397][T15351] RBP: 00007fea9b432c99 R08: 0000000000000000 R09: 0000000000000000 [ 778.913412][T15351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.913427][T15351] R13: 00007fea9b616038 R14: 00007fea9b615fa0 R15: 00007ffefd591fe8 [ 778.913459][T15351] [ 779.374300][T15351] sysctl could not get directory: /net/ipv6/icmp -12 [ 780.030880][T15328] Bluetooth: hci6: command 0x0c1a tx timeout [ 780.607191][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1912'. [ 780.692437][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1912'. [ 782.103007][T15328] Bluetooth: hci6: command 0x0c1a tx timeout [ 783.558290][ T30] audit: type=1800 audit(1774669678.775:28): pid=15425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1921" name="discovery_nqn" dev="configfs" ino=245523 res=0 errno=0 [ 783.869354][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1922'. [ 783.920690][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1922'. [ 785.697096][T15462] block nbd0: NBD_DISCONNECT [ 786.824604][T15487] futex_wake_op: syz.6.1938 tries to shift op by -2048; fix this program [ 786.968175][T15487] futex_wake_op: syz.6.1938 tries to shift op by -2048; fix this program [ 788.003590][T15505] device-mapper: ioctl: device name cannot contain '/' [ 788.380958][T15328] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 788.641142][T15505] vhci_hcd vhci_hcd.2: invalid port number 194 [ 788.745260][T15505] vhci_hcd vhci_hcd.2: invalid port number 194 [ 789.261507][T15522] bridge0: port 3(bond0) entered blocking state [ 789.289573][T15522] bridge0: port 3(bond0) entered disabled state [ 789.332157][T15522] bond0: entered allmulticast mode [ 789.383074][T15522] bond_slave_0: entered allmulticast mode [ 789.418250][T15522] bond_slave_1: entered allmulticast mode [ 789.456974][T15522] bond0: entered promiscuous mode [ 789.493970][T15522] bond_slave_0: entered promiscuous mode [ 789.533808][T15522] bond_slave_1: entered promiscuous mode [ 789.563522][T15522] bridge0: port 3(bond0) entered blocking state [ 789.570329][T15522] bridge0: port 3(bond0) entered forwarding state [ 790.383831][T15292] Bluetooth: hci3: command 0x0406 tx timeout [ 790.892485][T15538] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1950'. [ 790.999772][T15538] HfR: entered promiscuous mode [ 791.693325][T15565] netlink: 'syz.5.1957': attribute type 1 has an invalid length. [ 792.161823][T15572] FAULT_INJECTION: forcing a failure. [ 792.161823][T15572] name failslab, interval 1, probability 0, space 0, times 0 [ 792.229355][T15572] CPU: 0 UID: 0 PID: 15572 Comm: syz.5.1959 Tainted: G U L syzkaller #0 PREEMPT(full) [ 792.229399][T15572] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 792.229408][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.229424][T15572] Call Trace: [ 792.229432][T15572] [ 792.229441][T15572] dump_stack_lvl+0x100/0x190 [ 792.229484][T15572] should_fail_ex.cold+0x5/0xa [ 792.229515][T15572] should_failslab+0xc2/0x120 [ 792.229543][T15572] __kmalloc_cache_noprof+0x7a/0x6f0 [ 792.229577][T15572] ? snd_virmidi_output_open+0xc4/0x670 [ 792.229615][T15572] snd_virmidi_output_open+0xc4/0x670 [ 792.229652][T15572] open_substream+0x480/0x9e0 [ 792.229690][T15572] rawmidi_open_priv+0x595/0x6f0 [ 792.229732][T15572] snd_rawmidi_open+0x4c9/0xba0 [ 792.229775][T15572] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 792.229815][T15572] ? __pfx_default_wake_function+0x10/0x10 [ 792.229846][T15572] ? kobject_get_unless_zero+0x156/0x200 [ 792.229879][T15572] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 792.229916][T15572] snd_open+0x22d/0x4c0 [ 792.229946][T15572] ? __pfx_snd_open+0x10/0x10 [ 792.229975][T15572] chrdev_open+0x234/0x6a0 [ 792.230001][T15572] ? __pfx_apparmor_file_open+0x10/0x10 [ 792.230029][T15572] ? __pfx_chrdev_open+0x10/0x10 [ 792.230065][T15572] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 792.230101][T15572] do_dentry_open+0x6d8/0x1660 [ 792.230127][T15572] ? __pfx_chrdev_open+0x10/0x10 [ 792.230162][T15572] vfs_open+0x82/0x3f0 [ 792.230203][T15572] path_openat+0x208c/0x31a0 [ 792.230241][T15572] ? __pfx_path_openat+0x10/0x10 [ 792.230279][T15572] do_file_open+0x20e/0x430 [ 792.230309][T15572] ? __pfx_do_file_open+0x10/0x10 [ 792.230357][T15572] ? alloc_fd+0x476/0x790 [ 792.230386][T15572] ? do_getname+0x191/0x390 [ 792.230422][T15572] do_sys_openat2+0x10d/0x1e0 [ 792.230457][T15572] ? __pfx_do_sys_openat2+0x10/0x10 [ 792.230494][T15572] ? find_held_lock+0x2b/0x80 [ 792.230525][T15572] __x64_sys_openat+0x12d/0x210 [ 792.230561][T15572] ? __pfx___x64_sys_openat+0x10/0x10 [ 792.230608][T15572] do_syscall_64+0x106/0xf80 [ 792.230630][T15572] ? clear_bhb_loop+0x40/0x90 [ 792.230661][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.230687][T15572] RIP: 0033:0x7fea9b39c799 [ 792.230707][T15572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.230732][T15572] RSP: 002b:00007fea9c2b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 792.230755][T15572] RAX: ffffffffffffffda RBX: 00007fea9b615fa0 RCX: 00007fea9b39c799 [ 792.230772][T15572] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 792.230788][T15572] RBP: 00007fea9b432c99 R08: 0000000000000000 R09: 0000000000000000 [ 792.230803][T15572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.230818][T15572] R13: 00007fea9b616038 R14: 00007fea9b615fa0 R15: 00007ffefd591fe8 [ 792.230850][T15572] [ 792.555961][T15578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'. [ 792.653466][T15328] Bluetooth: hci3: command 0x0406 tx timeout [ 792.831109][T15583] sctp: [Deprecated]: syz.0.1962 (pid 15583) Use of int in maxseg socket option. [ 792.831109][T15583] Use struct sctp_assoc_value instead [ 793.605617][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1965'. [ 795.501685][T15623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1971'. [ 795.928463][T15633] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1973'. [ 795.990063][T15638] netlink: 218 bytes leftover after parsing attributes in process `syz.5.1974'. [ 797.019930][T15641] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1976'. [ 797.033078][T15660] netlink: 93 bytes leftover after parsing attributes in process `syz.6.1977'. [ 798.466936][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 798.578698][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 798.996542][T15683] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1982'. [ 799.225836][T15685] FAULT_INJECTION: forcing a failure. [ 799.225836][T15685] name failslab, interval 1, probability 0, space 0, times 0 [ 799.320258][T15685] CPU: 0 UID: 0 PID: 15685 Comm: syz.2.1983 Tainted: G U L syzkaller #0 PREEMPT(full) [ 799.320302][T15685] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 799.320311][T15685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.320327][T15685] Call Trace: [ 799.320335][T15685] [ 799.320344][T15685] dump_stack_lvl+0x100/0x190 [ 799.320389][T15685] should_fail_ex.cold+0x5/0xa [ 799.320419][T15685] should_failslab+0xc2/0x120 [ 799.320447][T15685] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 799.320487][T15685] ? __pmd_alloc+0xbf/0x950 [ 799.320522][T15685] __pmd_alloc+0xbf/0x950 [ 799.320555][T15685] move_page_tables+0x3224/0x4500 [ 799.320596][T15685] ? __pfx_copy_vma+0x10/0x10 [ 799.320645][T15685] ? __pfx_move_page_tables+0x10/0x10 [ 799.320709][T15685] ? finish_task_switch.isra.0+0x200/0xb80 [ 799.320742][T15685] copy_vma_and_data+0x25c/0x7c0 [ 799.320784][T15685] ? __pfx_copy_vma_and_data+0x10/0x10 [ 799.320835][T15685] ? __vma_start_write+0x17f/0x280 [ 799.320869][T15685] ? __pfx___vma_start_write+0x10/0x10 [ 799.320912][T15685] move_vma+0x51b/0x1890 [ 799.320958][T15685] ? __pfx_move_vma+0x10/0x10 [ 799.320999][T15685] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 799.321030][T15685] ? cap_mmap_addr+0x4b/0x120 [ 799.321053][T15685] ? bpf_lsm_mmap_addr+0x9/0x30 [ 799.321077][T15685] ? security_mmap_addr+0x71/0x1e0 [ 799.321111][T15685] ? __get_unmapped_area+0x255/0x3e0 [ 799.321144][T15685] ? vrm_set_new_addr+0x204/0x290 [ 799.321184][T15685] mremap_to+0x1b7/0x450 [ 799.321224][T15685] do_mremap+0xb76/0x2130 [ 799.321274][T15685] ? __pfx_do_mremap+0x10/0x10 [ 799.321319][T15685] ? ksys_write+0x190/0x250 [ 799.321350][T15685] __do_sys_mremap+0x126/0x170 [ 799.321389][T15685] ? __pfx___do_sys_mremap+0x10/0x10 [ 799.321443][T15685] ? __x64_sys_futex+0x34f/0x4d0 [ 799.321495][T15685] do_syscall_64+0x106/0xf80 [ 799.321519][T15685] ? clear_bhb_loop+0x40/0x90 [ 799.321550][T15685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.321577][T15685] RIP: 0033:0x7f17d159c799 [ 799.321597][T15685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.321620][T15685] RSP: 002b:00007f17d2424028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 799.321643][T15685] RAX: ffffffffffffffda RBX: 00007f17d1815fa0 RCX: 00007f17d159c799 [ 799.321660][T15685] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 799.321680][T15685] RBP: 00007f17d1632c99 R08: 0000000100000000 R09: 0000000000000000 [ 799.321695][T15685] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 799.321710][T15685] R13: 00007f17d1816038 R14: 00007f17d1815fa0 R15: 00007ffe1388f6c8 [ 799.321741][T15685] [ 800.936432][T15712] futex_wake_op: syz.2.1990 tries to shift op by -2048; fix this program [ 800.993935][T15712] futex_wake_op: syz.2.1990 tries to shift op by -2048; fix this program [ 801.145784][T15721] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 801.281450][T15721] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 801.886635][T15733] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 801.901358][T15736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1995'. [ 802.394024][T15741] input: jJǼ-9%vlQ J86 as /devices/virtual/input/input23 [ 802.820821][T15747] ima: policy update failed [ 802.843349][ T30] audit: type=1802 audit(1774669698.156:29): pid=15747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1998" res=0 errno=0 [ 803.138388][T15292] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 803.801313][T15767] FAULT_INJECTION: forcing a failure. [ 803.801313][T15767] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 803.866880][T15767] CPU: 0 UID: 0 PID: 15767 Comm: syz.0.2002 Tainted: G U L syzkaller #0 PREEMPT(full) [ 803.866922][T15767] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 803.866931][T15767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.866945][T15767] Call Trace: [ 803.866954][T15767] [ 803.866963][T15767] dump_stack_lvl+0x100/0x190 [ 803.867006][T15767] should_fail_ex.cold+0x5/0xa [ 803.867031][T15767] ? prepare_alloc_pages+0x16d/0x5f0 [ 803.867065][T15767] should_fail_alloc_page+0xeb/0x140 [ 803.867095][T15767] prepare_alloc_pages+0x1f0/0x5f0 [ 803.867124][T15767] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 803.867155][T15767] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 803.867201][T15767] ? __kernel_text_address+0xd/0x30 [ 803.867239][T15767] ? unwind_get_return_address+0x59/0xa0 [ 803.867268][T15767] ? arch_stack_walk+0xa6/0xf0 [ 803.867306][T15767] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 803.867345][T15767] ? __pfx_stack_trace_save+0x10/0x10 [ 803.867371][T15767] ? stack_depot_save_flags+0x27/0x9d0 [ 803.867405][T15767] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 803.867444][T15767] ? pcpu_get_vm_areas+0x520/0x55d0 [ 803.867469][T15767] ? pcpu_create_chunk+0x254/0x730 [ 803.867514][T15767] ? pcpu_create_chunk+0x254/0x730 [ 803.867549][T15767] ? pcpu_alloc_noprof+0x18c4/0x1c50 [ 803.867594][T15767] ? bpf_map_alloc_percpu+0x9a/0xf0 [ 803.867618][T15767] ? htab_map_alloc+0x1054/0x14e0 [ 803.867640][T15767] ? map_create+0x84e/0x2ba0 [ 803.867662][T15767] ? __sys_bpf+0x2091/0x4b90 [ 803.867688][T15767] ? __x64_sys_bpf+0x7b/0xc0 [ 803.867717][T15767] ? do_syscall_64+0x106/0xf80 [ 803.867740][T15767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.867768][T15767] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 803.867796][T15767] ? policy_nodemask+0xed/0x4f0 [ 803.867826][T15767] alloc_pages_mpol+0x1fb/0x550 [ 803.867855][T15767] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 803.867890][T15767] alloc_pages_noprof+0x131/0x390 [ 803.867920][T15767] get_free_pages_noprof+0x10/0xb0 [ 803.867946][T15767] __kasan_populate_vmalloc+0xa0/0x210 [ 803.867992][T15767] pcpu_get_vm_areas+0x2df1/0x55d0 [ 803.868042][T15767] ? __pfx_pcpu_get_vm_areas+0x10/0x10 [ 803.868078][T15767] pcpu_create_chunk+0x254/0x730 [ 803.868119][T15767] pcpu_alloc_noprof+0x18c4/0x1c50 [ 803.868171][T15767] bpf_map_alloc_percpu+0x9a/0xf0 [ 803.868196][T15767] ? __pfx_bpf_map_alloc_percpu+0x10/0x10 [ 803.868225][T15767] ? __pfx___might_resched+0x10/0x10 [ 803.868263][T15767] ? __bpf_map_area_alloc+0x13a/0x200 [ 803.868298][T15767] htab_map_alloc+0x1054/0x14e0 [ 803.868332][T15767] ? __pfx_htab_map_mem_usage+0x10/0x10 [ 803.868356][T15767] map_create+0x84e/0x2ba0 [ 803.868379][T15767] ? futex_unqueue+0x13d/0x2c0 [ 803.868412][T15767] ? __futex_wait+0x256/0x300 [ 803.868458][T15767] ? __pfx_map_create+0x10/0x10 [ 803.868481][T15767] ? __might_fault+0xc5/0x140 [ 803.868517][T15767] ? __might_fault+0xc5/0x140 [ 803.868566][T15767] __sys_bpf+0x2091/0x4b90 [ 803.868605][T15767] ? __pfx___sys_bpf+0x10/0x10 [ 803.868634][T15767] ? __pfx_futex_wait+0x10/0x10 [ 803.868681][T15767] ? do_writev+0x214/0x340 [ 803.868728][T15767] ? do_futex+0x192/0x350 [ 803.868779][T15767] ? xfd_validate_state+0x129/0x190 [ 803.868824][T15767] __x64_sys_bpf+0x7b/0xc0 [ 803.868853][T15767] ? lockdep_hardirqs_on+0x78/0x100 [ 803.868895][T15767] do_syscall_64+0x106/0xf80 [ 803.868917][T15767] ? clear_bhb_loop+0x40/0x90 [ 803.868948][T15767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.868973][T15767] RIP: 0033:0x7f44a6f9c799 [ 803.868994][T15767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.869018][T15767] RSP: 002b:00007f44a7d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 803.869042][T15767] RAX: ffffffffffffffda RBX: 00007f44a7215fa0 RCX: 00007f44a6f9c799 [ 803.869058][T15767] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 803.869074][T15767] RBP: 00007f44a7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 803.869089][T15767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.869104][T15767] R13: 00007f44a7216038 R14: 00007f44a7215fa0 R15: 00007fffcb65fa58 [ 803.869136][T15767] [ 804.740217][T15776] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2006'. [ 805.193417][T15785] ima: policy update failed [ 805.238998][ T30] audit: type=1802 audit(1774669700.557:30): pid=15785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2008" res=0 errno=0 [ 805.999761][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.006154][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.219312][T15804] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 806.542641][T15835] input: f as /devices/virtual/input/input24 [ 806.850760][T15817] cgroup: fork rejected by pids controller in /syz0 [ 807.255946][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'. [ 807.339225][T15817] Process accounting resumed [ 810.092574][T15894] futex_wake_op: syz.2.2027 tries to shift op by -1; fix this program [ 811.041938][T15911] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2031'. [ 813.016031][T15946] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2037'. [ 814.046876][T15962] futex_wake_op: syz.2.2042 tries to shift op by -2048; fix this program [ 814.267181][T15963] futex_wake_op: syz.2.2042 tries to shift op by -2048; fix this program [ 814.297672][T15963] futex_wake_op: syz.2.2042 tries to shift op by -2048; fix this program [ 814.343242][T15963] 0x000000000001-0x000000020000 : "" [ 814.438112][T15963] ftl_cs: FTL header corrupt! [ 815.568783][T15981] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 815.796562][T15980] openvswitch: HfR: Dropping previously announced user features [ 818.925346][T16018] FAULT_INJECTION: forcing a failure. [ 818.925346][T16018] name failslab, interval 1, probability 0, space 0, times 0 [ 819.004939][T16018] CPU: 0 UID: 0 PID: 16018 Comm: syz.0.2053 Tainted: G U L syzkaller #0 PREEMPT(full) [ 819.004982][T16018] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 819.004992][T16018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 819.005008][T16018] Call Trace: [ 819.005018][T16018] [ 819.005027][T16018] dump_stack_lvl+0x100/0x190 [ 819.005070][T16018] should_fail_ex.cold+0x5/0xa [ 819.005100][T16018] should_failslab+0xc2/0x120 [ 819.005127][T16018] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 819.005176][T16018] ? __anon_vma_prepare+0x344/0x5e0 [ 819.005218][T16018] __anon_vma_prepare+0x344/0x5e0 [ 819.005254][T16018] ? rcu_read_unlock+0x2d/0xb0 [ 819.005294][T16018] __vmf_anon_prepare+0x11f/0x250 [ 819.005327][T16018] do_wp_page+0xe4d/0x4f00 [ 819.005364][T16018] ? __pfx_do_wp_page+0x10/0x10 [ 819.005397][T16018] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 819.005444][T16018] __handle_mm_fault+0x1ac8/0x2b60 [ 819.005484][T16018] ? mt_find+0x45e/0x8e0 [ 819.005511][T16018] ? __pfx___handle_mm_fault+0x10/0x10 [ 819.005545][T16018] ? __pfx_mt_find+0x10/0x10 [ 819.005586][T16018] ? find_vma+0xbf/0x140 [ 819.005610][T16018] ? __pfx_find_vma+0x10/0x10 [ 819.005638][T16018] handle_mm_fault+0x36d/0xa20 [ 819.005679][T16018] do_user_addr_fault+0x74c/0x12f0 [ 819.005713][T16018] exc_page_fault+0x6f/0xd0 [ 819.005754][T16018] asm_exc_page_fault+0x26/0x30 [ 819.005778][T16018] RIP: 0010:__put_user_4+0xd/0x20 [ 819.005819][T16018] Code: 66 89 01 31 c9 0f 01 ca e9 c0 d0 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 97 d0 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 819.005843][T16018] RSP: 0018:ffffc9000444fcd0 EFLAGS: 00050202 [ 819.005862][T16018] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000038 [ 819.005878][T16018] RDX: 0000000000080000 RSI: ffffffff82562ef1 RDI: ffffffff8c1b16a0 [ 819.005893][T16018] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001ca [ 819.005907][T16018] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000007040000 [ 819.005922][T16018] R13: 00000000000003ff R14: 0000000000000400 R15: 0000000000000000 [ 819.005946][T16018] ? __might_fault+0x111/0x140 [ 819.005986][T16018] __sys_sendmmsg+0x239/0x430 [ 819.006030][T16018] ? __pfx___sys_sendmmsg+0x10/0x10 [ 819.006079][T16018] ? __pfx_do_futex+0x10/0x10 [ 819.006127][T16018] ? xfd_validate_state+0x129/0x190 [ 819.006178][T16018] __x64_sys_sendmmsg+0x9c/0x100 [ 819.006218][T16018] ? lockdep_hardirqs_on+0x78/0x100 [ 819.006260][T16018] do_syscall_64+0x106/0xf80 [ 819.006282][T16018] ? clear_bhb_loop+0x40/0x90 [ 819.006313][T16018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.006338][T16018] RIP: 0033:0x7f44a6f9c799 [ 819.006358][T16018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.006382][T16018] RSP: 002b:00007f44a7d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 819.006403][T16018] RAX: ffffffffffffffda RBX: 00007f44a7215fa0 RCX: 00007f44a6f9c799 [ 819.006420][T16018] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 819.006435][T16018] RBP: 00007f44a7032c99 R08: 0000000000000000 R09: 0000000000000000 [ 819.006449][T16018] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.006464][T16018] R13: 00007f44a7216038 R14: 00007f44a7215fa0 R15: 00007fffcb65fa58 [ 819.006495][T16018] [ 822.651659][T16059] WARNING! power/level is deprecated; use power/control instead [ 824.043296][T16085] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2070'. [ 825.955978][T16120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2075'. [ 826.037650][T16120] openvswitch: HfR: Dropping previously announced user features [ 828.842454][T16160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2081'. [ 830.466082][T16189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2089'. [ 830.639413][T16189] openvswitch: HfR: Dropping previously announced user features [ 830.795063][T16206] FAULT_INJECTION: forcing a failure. [ 830.795063][T16206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.874482][T16206] CPU: 0 UID: 0 PID: 16206 Comm: syz.6.2092 Tainted: G U L syzkaller #0 PREEMPT(full) [ 830.874523][T16206] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 830.874532][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.874547][T16206] Call Trace: [ 830.874561][T16206] [ 830.874570][T16206] dump_stack_lvl+0x100/0x190 [ 830.874611][T16206] should_fail_ex.cold+0x5/0xa [ 830.874641][T16206] _copy_to_user+0x32/0xd0 [ 830.874673][T16206] simple_read_from_buffer+0xcb/0x170 [ 830.874715][T16206] proc_fail_nth_read+0x1af/0x230 [ 830.874747][T16206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.874779][T16206] ? rw_verify_area+0xce/0x6d0 [ 830.874815][T16206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 830.874846][T16206] vfs_read+0x1e4/0xb30 [ 830.874872][T16206] ? __pfx_vfs_read+0x10/0x10 [ 830.874894][T16206] ? __fget_files+0x215/0x3d0 [ 830.874924][T16206] ? __fget_files+0x21f/0x3d0 [ 830.874954][T16206] ksys_read+0x12a/0x250 [ 830.874976][T16206] ? __pfx_ksys_read+0x10/0x10 [ 830.875007][T16206] do_syscall_64+0x106/0xf80 [ 830.875028][T16206] ? clear_bhb_loop+0x40/0x90 [ 830.875058][T16206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.875082][T16206] RIP: 0033:0x7f28b935cfce [ 830.875101][T16206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 830.875123][T16206] RSP: 002b:00007f28ba1a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 830.875145][T16206] RAX: ffffffffffffffda RBX: 00007f28ba1aa6c0 RCX: 00007f28b935cfce [ 830.875160][T16206] RDX: 000000000000000f RSI: 00007f28ba1aa0a0 RDI: 0000000000000004 [ 830.875175][T16206] RBP: 00007f28ba1aa090 R08: 0000000000000000 R09: 0000000000000000 [ 830.875189][T16206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.875203][T16206] R13: 00007f28b9616038 R14: 00007f28b9615fa0 R15: 00007fffe8d13368 [ 830.875233][T16206] [ 831.501323][T16209] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 832.670222][T16236] openvswitch: netlink: IPv6 tunnel dst address is zero [ 833.878130][T16251] vivid-007: ================= START STATUS ================= [ 833.915066][T16251] vivid-007: Generate PTS: true [ 833.941768][T16251] vivid-007: Generate SCR: true [ 834.033123][T16251] tpg source WxH: 320x240 (Y'CbCr) [ 834.076567][T16251] tpg field: 1 [ 834.080008][T16251] tpg crop: (0,0)/320x240 [ 834.206391][T16251] tpg compose: (0,0)/320x240 [ 834.286657][T16251] tpg colorspace: 8 [ 834.314660][T16251] tpg transfer function: 0/2 [ 834.396711][T16251] tpg Y'CbCr encoding: 0/1 [ 834.434229][T16251] tpg quantization: 0/2 [ 834.478529][T16251] tpg RGB range: 0/2 [ 834.518109][T16251] vivid-007: ================== END STATUS ================== [ 834.699305][T16264] futex_wake_op: syz.0.2103 tries to shift op by -2048; fix this program [ 834.835091][T16272] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2107'. [ 834.901618][T16257] kexec: Could not allocate control_code_buffer [ 834.932812][T16264] futex_wake_op: syz.0.2103 tries to shift op by -2048; fix this program [ 835.002935][T16271] 0x000000000001-0x000000020000 : "" [ 835.232471][T16271] ftl_cs: FTL header corrupt! [ 835.265283][T16274] FAULT_INJECTION: forcing a failure. [ 835.265283][T16274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.346521][T16274] CPU: 0 UID: 0 PID: 16274 Comm: syz.5.2108 Tainted: G U L syzkaller #0 PREEMPT(full) [ 835.346562][T16274] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 835.346571][T16274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.346585][T16274] Call Trace: [ 835.346592][T16274] [ 835.346601][T16274] dump_stack_lvl+0x100/0x190 [ 835.346642][T16274] should_fail_ex.cold+0x5/0xa [ 835.346671][T16274] _copy_from_iter+0x1f4/0x1690 [ 835.346709][T16274] ? __pfx__copy_from_iter+0x10/0x10 [ 835.346738][T16274] ? rcu_is_watching+0x12/0xc0 [ 835.346777][T16274] ? trace_kmalloc+0x101/0x130 [ 835.346802][T16274] ? __kasan_kmalloc+0xaa/0xb0 [ 835.346842][T16274] ? __kmalloc_noprof+0x320/0x850 [ 835.346884][T16274] kernfs_fop_write_iter+0x186/0x5f0 [ 835.346916][T16274] vfs_write+0x6ac/0x1070 [ 835.346940][T16274] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 835.346970][T16274] ? __pfx_vfs_write+0x10/0x10 [ 835.347010][T16274] ksys_write+0x12a/0x250 [ 835.347033][T16274] ? __pfx_ksys_write+0x10/0x10 [ 835.347064][T16274] do_syscall_64+0x106/0xf80 [ 835.347087][T16274] ? clear_bhb_loop+0x40/0x90 [ 835.347116][T16274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.347141][T16274] RIP: 0033:0x7fea9b39c799 [ 835.347160][T16274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.347182][T16274] RSP: 002b:00007fea9c2b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 835.347204][T16274] RAX: ffffffffffffffda RBX: 00007fea9b615fa0 RCX: 00007fea9b39c799 [ 835.347225][T16274] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 835.347239][T16274] RBP: 00007fea9c2b8090 R08: 0000000000000000 R09: 0000000000000000 [ 835.347253][T16274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.347266][T16274] R13: 00007fea9b616038 R14: 00007fea9b615fa0 R15: 00007ffefd591fe8 [ 835.347296][T16274] [ 835.960687][T16278] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2109'. [ 838.755845][T16300] Process accounting paused [ 839.140410][T16331] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[16331] [ 841.616253][T16371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2131'. [ 841.663539][ T31] INFO: task syz.3.1711:14398 blocked for more than 143 seconds. [ 841.674437][ T31] Tainted: G U L syzkaller #0 [ 841.706553][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 841.752520][ T31] task:syz.3.1711 state:D stack:27304 pid:14398 tgid:14397 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 841.822992][ T31] Call Trace: [ 841.847306][ T31] [ 841.864980][ T31] __schedule+0xfee/0x6120 [ 841.891289][ T31] ? __lock_acquire+0x4a5/0x2630 [ 841.922111][ T31] ? __pfx___schedule+0x10/0x10 [ 841.951694][ T31] ? find_held_lock+0x2b/0x80 [ 841.987035][ T31] ? schedule+0x2bf/0x390 [ 842.016062][ T31] schedule+0xdd/0x390 [ 842.052972][ T31] schedule_preempt_disabled+0x13/0x30 [ 842.101540][ T31] __mutex_lock+0xc9a/0x1b90 [ 842.126260][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 842.166526][ T31] ? __lock_acquire+0x4a5/0x2630 [ 842.205002][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 842.238443][ T31] ? net_generic+0xea/0x2a0 [ 842.264178][ T31] ? net_generic+0xea/0x2a0 [ 842.305432][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 842.328823][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 842.354977][ T31] nfsd_umount+0x3b/0x60 [ 842.386595][ T31] deactivate_locked_super+0xc1/0x1b0 [ 842.417350][ T31] deactivate_super+0xe7/0x110 [ 842.445483][ T31] cleanup_mnt+0x21f/0x450 [ 842.468025][ T31] task_work_run+0x150/0x240 [ 842.503256][ T31] ? __pfx_task_work_run+0x10/0x10 [ 842.530026][ T31] ? __x64_sys_mount+0x23e/0x310 [ 842.562215][ T31] exit_to_user_mode_loop+0x100/0x4a0 [ 842.605700][ T31] do_syscall_64+0x668/0xf80 [ 842.644301][ T31] ? clear_bhb_loop+0x40/0x90 [ 842.673889][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.719743][ T31] RIP: 0033:0x7feeddb9c799 [ 842.757316][ T31] RSP: 002b:00007feede9d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 842.800170][ T31] RAX: fffffffffffffffe RBX: 00007feedde15fa0 RCX: 00007feeddb9c799 [ 842.866465][ T31] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000000 [ 842.900769][ T31] RBP: 00007feeddc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 842.957031][ T31] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 842.991440][ T31] R13: 00007feedde16038 R14: 00007feedde15fa0 R15: 00007ffc835bd5b8 [ 843.028915][ T31] [ 843.060017][ T31] [ 843.060017][ T31] Showing all locks held in the system: [ 843.138403][ T31] 1 lock held by khungtaskd/31: [ 843.171027][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 843.218846][ T31] 3 locks held by syz-executor/5825: [ 843.247341][ T31] 2 locks held by syz.1.1687/14314: [ 843.279234][ T31] #0: ffffffff906c2490 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 843.326679][ T31] #1: ffffffff8ec589a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 843.387019][ T31] 2 locks held by syz.3.1711/14398: [ 843.440640][ T31] #0: ffff88807cf1e0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 843.505517][ T31] #1: ffffffff8ec589a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 843.554204][ T31] 2 locks held by syz-executor/14474: [ 843.575627][ T31] #0: ffff8880378b40e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 843.614204][ T31] #1: ffffffff8ec589a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 843.647430][ T31] 1 lock held by syz-executor/14554: [ 843.665586][ T31] 2 locks held by syz.6.2129/16364: [ 843.682698][ T31] 1 lock held by syz.6.2130/16365: [ 843.707479][ T31] #0: ffffffff8e7f3180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 843.740133][ T31] [ 843.781979][ T31] ============================================= [ 843.781979][ T31] [ 843.803295][ T31] NMI backtrace for cpu 0 [ 843.803319][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 843.803360][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 843.803369][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 843.803383][ T31] Call Trace: [ 843.803390][ T31] [ 843.803399][ T31] dump_stack_lvl+0x100/0x190 [ 843.803440][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 843.803480][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 843.803517][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 843.803552][ T31] sys_info+0x141/0x190 [ 843.803578][ T31] watchdog+0xd25/0x1050 [ 843.803610][ T31] ? __pfx_watchdog+0x10/0x10 [ 843.803634][ T31] ? __kthread_parkme+0x18c/0x230 [ 843.803666][ T31] ? kthread+0x13a/0x450 [ 843.803696][ T31] ? __pfx_watchdog+0x10/0x10 [ 843.803718][ T31] kthread+0x370/0x450 [ 843.803748][ T31] ? __pfx_kthread+0x10/0x10 [ 843.803782][ T31] ret_from_fork+0x754/0xd80 [ 843.803820][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 843.803858][ T31] ? __switch_to+0x7b4/0x1120 [ 843.803885][ T31] ? __pfx_kthread+0x10/0x10 [ 843.803919][ T31] ret_from_fork_asm+0x1a/0x30 [ 843.803959][ T31] [ 844.363733][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 844.371118][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 844.382108][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 844.387327][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.397513][ T31] Call Trace: [ 844.400817][ T31] [ 844.403765][ T31] dump_stack_lvl+0x100/0x190 [ 844.408499][ T31] vpanic+0x552/0x970 [ 844.412618][ T31] ? __pfx_vpanic+0x10/0x10 [ 844.417251][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 844.423621][ T31] panic+0xd1/0xe0 [ 844.427480][ T31] ? __pfx_panic+0x10/0x10 [ 844.432304][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 844.439397][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 844.446135][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 844.453251][ T31] ? watchdog.cold+0x198/0x1ca [ 844.458274][ T31] ? watchdog+0xd35/0x1050 [ 844.463179][ T31] watchdog.cold+0x1a9/0x1ca [ 844.467993][ T31] ? __pfx_watchdog+0x10/0x10 [ 844.472724][ T31] ? __kthread_parkme+0x18c/0x230 [ 844.477895][ T31] ? kthread+0x13a/0x450 [ 844.482192][ T31] ? __pfx_watchdog+0x10/0x10 [ 844.486952][ T31] kthread+0x370/0x450 [ 844.491063][ T31] ? __pfx_kthread+0x10/0x10 [ 844.495691][ T31] ret_from_fork+0x754/0xd80 [ 844.500324][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 844.505559][ T31] ? __switch_to+0x7b4/0x1120 [ 844.510259][ T31] ? __pfx_kthread+0x10/0x10 [ 844.514908][ T31] ret_from_fork_asm+0x1a/0x30 [ 844.519823][ T31] [ 844.523044][ T31] Kernel Offset: disabled [ 844.527412][ T31] Rebooting in 86400 seconds..