last executing test programs: 7m8.22246424s ago: executing program 1 (id=1180): mmap$auto(0x0, 0x400108, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x7) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) capset$auto(&(0x7f0000000200)={0x20080522}, 0x0) ioctl$auto(r0, 0x4b41, 0x7) 7m6.722491619s ago: executing program 1 (id=1184): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44110}, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xf00) 7m6.258934933s ago: executing program 1 (id=1185): mmap$auto(0x0, 0x8001, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e00fbe18d073ba65c6df9cd1c8d10ea3ad6d7ac15"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) semctl$auto(0x7, 0x2, 0x13, 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyr5\x00', 0x600001, 0x0) r2 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bdi/1:13/stats\x00', 0xc0400, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x9, r2) mmap$auto(0x1000, 0x20009, 0x5, 0x79, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x10403e, 0x2, 0x4, 0x9, 0x1b386a3e) mmap$auto(0x91e, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x10001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal\x00', 0x10b142, 0x0) write$auto(0x3, 0x0, 0x5c8) r3 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x300, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000ffdbdf251a00000079ad900e6b97cbb5dd9ab6840ecc518bde4a26474a64d6df58f1fa469eda3e466a23087375e0d5cd5abc82cc21bf18f855c2614210d6ea602dc8fa2fa6d3f361a0f6ce7018a91d4d5efae8c7e8becbcdbfc0db66a5ff9a73df480befe3d7bd05ee3bf7177a07c2c488c59b20a88d4bbe30ab77a8eee184ed57bfca807573e4edb548be73afd33d7772989594980c5294722caedfeb4e99d26c119daec96b03834b"], 0x14}}, 0x40000) read$auto_tracing_entries_fops_trace(r3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyt1\x00', 0x510001, 0x0) timerfd_create$auto(0x9, 0x0) ioctl$auto(0x3, 0x5402, r6) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd5\x00', 0x14fa00, 0x0) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)=@info={0xffffffffffffffff, 0x7, 0x80}, 0x5) setsockopt$auto_SO_MARK(r3, 0x6, 0x24, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x1) sendfile$auto(0x3, r7, 0x0, 0x400000000006) 7m5.285474589s ago: executing program 1 (id=1195): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002) pipe2$auto(&(0x7f0000000080), 0x9) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x304, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x25d, 0x9, 0x0, 0x1, [@generic="49676b779b2a77a76a060bcd388839c7617a6c0e91505ef4d22e19af93c01df84cf62f00fdf276ac90aa6a448119459bacf16021823ca082454feaf2980e3d4280983336206e0e2bcd304c93c4349168eb968d0f7bdb80a4ac8726e67ac74f5aa17c75abe2e53abed76b3df15090dd50617324cd40d35d04a56ea2cf92b49c748c7e870c12b8835b0c495387e462b728f45daaa02dd2ee3fd577a5796e864e6782b77adc00f13bf3c7d9aad4ecbe8c348b9ed0", @typed={0x16, 0x50, 0x0, 0x0, @str='/dev/input/event1\x00'}, @generic="a62f85abfccfb6b3610b017dbe9f76ac1ff1968b7e9f181348393c747a9fd06325fb950abba24db680a3c0823bc0c7cfd50a2c502a43861176e4e6718dc77fb2b7713b322767d55a85c18d7999a7982e84ae3023ea05e317f8f6742a24f851d6267668adcfab330438f4be7100d2d5a347548f2e5eee2ed1bb5f263d45cc51f008ae913029bbe7f7ee95d6369e3842262ce7ecba99656007d0a4b396d20624fca65a3e773ffdba6236a337b88ba86ea430b1fd2d09d6edb6e4849ceef933d721fffe5f8e51b9531e0cdfe12ae6cc3de9a63841aee0904c05cd9005c0a5c7e17e324798c2c401", @generic="d66561711abf9ea0da97e1ab7327e6f61b786c335d43254a5255802396c0308963a4a84c80ca1d66bcd13f74f54702835494b330e0ca6448d84216c7419810673a33efd44af8b6133ae64f33bf312909fa5a04f78cb135e45553f8ea12384db4b9777a2b791be159d44a0b3f8466e1a74d91adba10728326e55225e157128f7e1522acccc77bae19cd76133c2a3391fd2405f52f12a5bf12a602f92bf7789b3dc8a85afa713447c2"]}, @MACSEC_ATTR_OFFLOAD={0x8d, 0x9, 0x0, 0x1, [@nested={0xc, 0x8b, 0x0, 0x1, [@typed={0x6, 0xd6, 0x0, 0x0, @str=')\x00'}]}, @generic="984d5707fc7f308e4f1bb513c28243af784351615c4e5f795e1dedacf7d10672fb74558096367c9b4db543bcfed7f41fe8ab7cc4b41178e2d71cfda4d85eb1021f9dc3b8c4467cec90019d16824ff8c322f32875ccfef02230599283a0c2c81b93fcdaaab9ab48f25ed10e9d5387aebabb40b01f5fcfbceb6ab14beaf2"]}]}, 0x304}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0x8000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r1, 0x1d, &(0x7f0000000480)="4e5793131c356b1ae91437fec140200ee4b2db144ce394b823a08af5634b16176766d7377d2f0f3183e670fb05ce5fd658fb179fb819cd4ba861295bfe7379ba3da012df191a743e115811ee07e2300c4e0666eaa35a086c551ba8d80d99b09cfea922c2100d49479d8bfd70ecdb5632572597ee7d1876e73c794aa2d11f96ce7586af22b31f483d35d68806cb92094430982d2ca78315986eb5fd273b3432aaa8ef7683c893a970c7ef7eeee8f7553d3d890e425c21a7f739e2b39ab6796efa777e512ac65ab8a59c9cc3aa69ad153d7b3f5af9b7b4d0e02243e64f5ec9a9bbe730b6ab13ae552161bbea49ce81702e3acb3ccf44dc", 0x9) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0xfffffffffffffe94, r0, 0x10, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) madvise$auto(0x991, 0xffffffffffff0085, 0xff) socket(0x29, 0x2, 0x0) io_uring_setup$auto(0x59, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x0) unshare$auto(0x40000080) 7m3.640032534s ago: executing program 1 (id=1190): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x809, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x54, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) write$auto(r1, 0x0, 0x7) close_range$auto(0x2, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r2 = socket(0xa, 0x2, 0x88) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, &(0x7f00000001c0)="ce890a", 0x3) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb4, r4, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MESH_ID={0xf, 0x18, "289c6828106e819b23ce78"}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x59}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x80, 0x25, 0x0, 0x1, [@nested={0x7b, 0x6d, 0x0, 0x1, [@generic="8a199b73f0e98e1719deee317cc5b22870caf086c1bc364a07dde8a1c32afd8e", @generic="cb554f6b1eafcef679a7c900a47521ddcd3ac54fadd9b279dd97c2c1db3616325e4189d2c1e9735981674279bc4c1396778887024096b3fc40c01e1c25055c7d01394c7a6c5f57d7fc22a9933406f55a423ee7272097c1"]}]}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7m2.870616356s ago: executing program 1 (id=1192): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r0, 0x4008550d, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) move_pages$auto(0x1, 0x81000000f57, 0x0, 0x0, 0x0, 0x2) r1 = gettid() rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={r1, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r2, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c) r3 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r3, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) 6m47.177014453s ago: executing program 32 (id=1192): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r0, 0x4008550d, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) move_pages$auto(0x1, 0x81000000f57, 0x0, 0x0, 0x0, 0x2) r1 = gettid() rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={r1, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r2, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0xa, "01e983638bffff4993021400"}, 0x1c) r3 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r3, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) 2m49.033260961s ago: executing program 2 (id=1973): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r0 = socket(0xa, 0x3, 0x3b) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x8, 0xe) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x18, 0x5, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x60501, 0x0) ioctl$auto_MON_IOCG_STATS(r2, 0x80089203, 0x0) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) writev$auto(r3, 0x0, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 2m46.557256793s ago: executing program 2 (id=1984): sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0xc01) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.3/numa_node\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x100000001) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) getsockopt$auto(0x100000006, 0x0, 0x16, 0xfffffffffffffffe, 0x0) r1 = socket(0x1d, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@can, 0x55) r2 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) connect$auto(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x1}, 0x7f) r3 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r3, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) write$auto(0x3, 0x0, 0xfdef) r4 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x40042, 0x0) pread64$auto(r4, &(0x7f0000000000)='/sy\x00\x80\x00\x00\x00\x00\x00\x00/de`ug/kfence/\x00\x00\x00\x00cts\x00', 0x1000000008, 0x800) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) write$auto(r5, &(0x7f00000000c0)='\xc4\x1dR\x00\x003\x1bO\xbb\x98)\x7fTa1\xa3\xd0\x89\x1e\\\xff', 0x8587) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0x42440, 0x0) pread64$auto(r6, 0x0, 0x200000000004, 0x266) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) readv$auto(r5, 0x0, 0x1) 2m44.471979047s ago: executing program 2 (id=1987): mprotect$auto(0x110c238000, 0x1, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) getsockopt$auto(0x6, 0x29, 0x4e, 0x0, 0x0) madvise$auto(0x110c230000, 0x8031ca, 0x9) 2m43.251691694s ago: executing program 2 (id=1989): timer_create$auto(0x3, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101200, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x301, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) r2 = getpid() r3 = pidfd_open$auto(r2, 0x32b) setns(r3, 0x60020000) waitid$auto_P_PIDFD(0x3, r3, 0x0, 0x6, 0x0) fanotify_init$auto(0x5, 0x0) 2m40.973646967s ago: executing program 2 (id=1993): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socketcall$auto_SYS_ACCEPT(0x5, &(0x7f00000001c0)=0x372e) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000200), 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = io_uring_setup$auto(0x7, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) select$auto(0x5, &(0x7f00000000c0)={[0xeeda, 0x7, 0x4, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x0, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r4 = fcntl$auto_F_GETOWN(r1, 0x9, 0x7fff) ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000000140)={0x0, 0x3, 0x5, 0x9, 0x10001, 0xffffffffffffffff}) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r2) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000001880)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001840)={&(0x7f00000018c0)=ANY=[@ANYBLOB="b4160000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="3600200000d2edcd3ff67e13e8fc417002e8aa7d45607b1601f9d59fbc393e34fe", @ANYRES32=r1, @ANYBLOB="0800af00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x16b4}, 0x1, 0x0, 0x0, 0x4}, 0x20008030) 2m39.844505334s ago: executing program 2 (id=1995): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xfb74, 0x8000000001, 0x0, 0x1, 0x1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080025bd7000fddbdf25020000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x2002c810) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e26736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdd, 0xeb1, r7, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x4, 0xffffffffffbf0005, 0x6) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0xffffffffffffffff, &(0x7f0000000180)=@phonet={0x23, 0x92, 0x5, 0x8}, 0x54) mmap$auto(0x0, 0xe983, 0x2, 0xebe, 0xffffffffffffffff, 0x8000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) 2m39.82481688s ago: executing program 0 (id=1996): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x109002, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff00c}}) write$auto(r2, 0x0, 0x6) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$auto_KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000140)={0x5}) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x2) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/ifb0/statistics/rx_compressed\x00', 0x183902, 0x0) write$auto(r4, 0x0, 0x4) socket(0x22, 0x2, 0x3) setsockopt$auto(0x4, 0x88, 0x1, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) io_uring_setup$auto(0x9, 0x0) msgrcv$auto(0x0, 0x0, 0xf55c, 0x3, 0x4a4d) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x2, 0x0) getdents64$auto(r5, &(0x7f0000000200)={0x1ff, 0x2, 0x7, 0x4, "1378056e0b8d3b0532438779c56ae73dea25a56dc2e4ebf0c0d6c7402777655011468c04b1d16774f683766467522825a436d6024e90d33d352fe0b3eb1fb2c472cd91d763fbe1e34cb2df2ac7a30c870277cf13a3e9ea950fdccdb06de84565c145342e0c6cc7ceae7a1f77d5f1957d023275379138e00a273813c802812050f1cf29b821288f29cfd4a813af9e4e2de809f62957e05b63dc666b010b625481fe48635d51610a9c06f82b072ced922e0ce6a0"}, 0x95) openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)={0x0, 0x6c, 0x59}, 0x18) 2m38.736323091s ago: executing program 0 (id=1999): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101001, 0x0) socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x3, 0x5) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) getsockopt$auto_SO_OOBINLINE(r3, 0xd, 0xa, &(0x7f0000000040)='/dev/adsp1\x00', &(0x7f0000000080)=0x2) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r4, 0x0) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r4, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x1, 0x1060}, 0x5}, 0x9, 0x101) 2m37.019559805s ago: executing program 0 (id=2003): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x801, 0x106) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x21}, 0x20004080) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto_snd_pcm_f_ops_pcm(r0, &(0x7f0000000000)="ccff0fc1f06117935d8fe31a10", 0xd) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r3 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r3) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001900)={0x1c8c, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1b80, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x24, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x6}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1b58, 0x5, 0x0, 0x1, [{0x102c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "1484ff9fdf6017594535a2a60f534834ad4e3affb84f0155bb92861e1b25c26705c2d89ad93c3f20cb0e431c3fc0bd38a03fbb3fa59ed3461ecc6ff5d579c0eec3af7f96d3b6a0324b66d632f03fb0818e4971fcde577a2192e25f5c972f513d5a4c396d25a57f6853a0acee306e99fbbadd7ec443b05f31ffc96678f254fabbaa2990b16915c46308c5ef49626c9aee45bf59d7d6239f8d327cd12cd5193c3bddc395be30f967b032c35c90bce1bf38cc0224b43989cb3bcf54ec3f0cbb95a53151e46abf7560378e5a168eecce353ac8689c78c6ca6241f27e1e8267684ab3883c0a6b2ba6c931f705aa2cd4b303df481012d16b3b8b44483ad173ecbdce506ed999a6e9e9a3ea239aab8ac2d201226625bfe60afe441e1bd8b7dfa93c913fe9cefde1aa01ae689a266c1b9a7186af865431b258f664b9783e40409e40aac6e7e016ffb21bef37c56a94b23de286e89467518885caa787f9cd8cdad711fcb2d1008d1edf0712273fadd484e90e4a02cd9bfd6fac23584d1a409b5c4911835527591a75cc35d0a43ff86e40b30b3d22a52b0b562202fb0736ea8dd312a3ef8a1b2e3e67347c1be5c05a29eb2951ab068001ad5b2636bfb227069e26a3278eac156a7868a094565d08a140c3775e8701654db2171de40eadd0d903f48c1bd78927c67f927418c38047630c986fc886577f884bcb5c8cbe5d8e86e9c53ceb05e872c0da7f212a52acc436f0c343fbf2c205446c6e9175631559a6694f8184fc47354cd61541ec4a26353ef4d6582c06886e325eb31d31fda3a9c751a0850cc98da22d17a71bad9814bb745ea45d9817f0547daa3ac0d319370a2a435efba1889b6c930631e99d23edbc9c749b2e1f45aa010bff466de15dcdbac5ccf0a9ab7550c5a536d7aceb43245b5e5dda1d06492495e399bf13a07cef71aeee44ba74fa00d225c1de0dc334476d0c1c7d13c2247ed38c2b1cbeae9dadc71fb7c01b7b8e0652b96fd200a59f1353d3f4cf943c22498a932fbb1800c556276f193317711a322bf5ff1c2de1481772c0236561270a1c49809e56b513a6f6fd198fe2b2ab04641a15467cc5c43df120ea17a5a6fb23d2ea97741309ed662100b076fd7ed8a12314e9af2be3f2acf1706f34561db7bec5b0d2c59cdfa32e3ca454c15b3ea2df8ec5789e8a5ae662f4a953f3255388eb129eb5ff82e3a7f2e14f8de74a622be886c9ee24942463bd3dd2b5b50531fcc4eec02c7a112f2dbb3fc6737b1dd7bf5f2e78feecaa481b49f7f326e06661305afca4f6588ecd10a4bc629c9ffb1bc8cd3105ace24bdb03d8415906612b26405c8f6724ae47a8b54a2e14fae7f48f1074f67e60ab0b24d1d6dd5b9ca3a0cf657d5ca250281bf659f2ba53ee303de018924aa2a408fcf1e9a5054e96afcd3f5594c05d364c211e28e97e010094350851b1254b87e8d2d2d0f867502604b8335db28565c7706cb3847764f7bf10bbcd35a7383d630015a8604b6ec24173ed5c05da0671c601cc10f29f7dca7364c171f440e58b30643ab5a324759fb1ed3024c5fa5f161043fb171944f17b9319301159715ed2783520ac3554b61840502a4655eeedcb355cb609877816e33c0537892d44fa3b9741bcfd7954f17dba4ad44add48cd61d7b109dc45bff3be45c666732bbdfd2abb9d733c66256030c140fc9333b821aeafe6a21ff53be26c9c655ccdaedbc9236e5598e5cca207ca89951514d4ba75017ea718ec819e90a3278c4d4c45b64201d927d5073a7e4e19b0c94e442a3c272d3b641c9c6dd817b43dda69413a5566e61e1559e45370578b1e7ea8f72dcf85b177a4a781707ec08608e72033c264043ed59a71115397ca38eb8ea5f7f07e31cb6c1f19156eb672dedc758b5f763705fb70e32eae5909123eeed8c5e87b118a662a87194e5c99218f2e939fdc292915755c8d09bf540a64db9338c02b342b5cf6468b3e0d125655678e3ecf03e77802d77a613fa8b678e986189222ee48f2f5cc0134215f2cb5f8453e1688772a6b0d46ff610cf03e3a6947b26b1aef5f3d5cb2293e801b2f4774ee180ca3287cba820fd2440b05dc320d9822a29659919d9cf59d8084c6a00c687b45a76cd573033373ee28ef34367891b7848eed7da6415a395968f5e5acf6e0eab8ace516125b41d40f87401f75ae311d156901aa9ec9bd8b9466be0f2f81855172120db86c244ee65d82c878584eda5c2aa9b685b11e065467f191cb040eebb969296fbd8a3a21d6d4681002ba7305098da9b5e0f437953c4792015797d80a12d223e1179aa15d124ffc5aea47c3ea4893e7c7fd8eae8fdde6c9418d36b90123ec4e05f6d36d68bff65c339f59811996da7b9ad5deeeeac9d84772314833435ceada04172f2e7e26313be9c484a155aa336f3b4e718a821e89fb7925342fb5fc60e27c7360bd0fd4e749eab670e65fb53f4352f8166985b76b884d927ef3164a9d592bc39e8cd833375a7dfd1a928923c519f14a1d41650b25f80434f42937d67dea01183ba46b16d7cda55b0a0d27a22bb53f19cf330af1bbb2a6355a571bce827236b08668ed2ce02d4b8ab1364b0ee68726e273e126cc8d756e4a16e8f101e878f5fb3bf420e07c3cf8cb4953289c83b76e99f9b2675d3bf0057ddbd12743e3f7ebef365a1db351a17755c7ef6329907b1b0fe61f53d4b6f67eca69074af22fb41b896293ed647857db952501f2edb29146f5740538d5de1071a155cb5ff60c66db110de4ea5bac07f5cb3b5b713135b0c27f28b994a8ae4a89465ea530833ed34b647787ffdeac93bace2f990b4935210eb09fbdb456602657fd0cc54deef30f473a7119410019ab31040b67792fdcc04774b69458d96758b9a9b313d8c8394e901bb52b87656d31e9436e5d70ea4297da61559757945457e9d4a37ffb3faecfddbbd35143dd35c6b7836868ef3d7018ccc84d235e8bac64f3ec961ab191b5535d9ae6a75514f57caaa5c3a89f7590d6f59c3d962d7a487121a4c12a3ee14869ce80f53b8677e47c0f7a2b0cef3dace4a28ab9f3e5b21a0fb0a6d64c40d63b9e3488333506b0567f6fd6184363759be639cda769e854560923dfa311ba5b16214ed03096dc0c3eee132c155bd5eda0c146cf48a22132edae5e8da3456d445517c75c2085cbe4a50835d00a48eec46b05d0da130664e5a8ed20f18730bdf8973a17e21d077caab293c6b07e265c286a8de425295be219478bdd79384ec46409e0d776a235ba8915511d3d4b08bd0b38759c02a538491160e6561e73245ad1cdbe0b3a1f656b3ede3f0d5aba03343b8200c8f4255909af65835936767fb28d969bdc6b54255695e52a620d7e203e76aba69d7adb4bb27a0dfab19fcffb7f1d5f92ee3141a8ad0447edcd2cb1e9cc6a9688829db4002c412a8bb16ad246da71b0e39529f2a620c6df669a62dd225a275e6280a76959019326c5c986bf09454ced91e175c1c84964914ed46c33ccad3e1384bb488298f318fd446beefe3c9eb8e58bb17d2a655672d36503267c076efebf7126ae7c735a81da24d29ed8553a1d78878e326e016bdc3d838346f27a1e6f89dd308ce756dd5bbb24351b7cde1c698e459ef20a13b78f203d5618d4aa80f914cc60003037de69d49f987be37c8cfbde84da1389a516f5a41bb485b77e6d8ff2db6eaaf7d3bbcb65363c1a2008f1284aca3b390e6659225b9687649df0ae8e4ede1093ffadffbeee9fd4152056e978c43bc253a563b11facf73d20fd3fe5c1b539f344c9983d025c31c171abad287a39744455eff8dd6108e20e1ad2c2844a8a7cabe24c5131cc2bd252317d8eb4107bbbfd664fbf6ef710d06b8d2e5f7ed522e32e1e0cef4291d6b3f3969672adf5a7e204b183090fd8940dbf97faed794a9d87166b7010177081840cda73bdddaa9df3f95ae38224b0014afaebe23bcad603b254369b5655c1e660632757add53491d8ad6022c4631c49ce504a7751cbbd2bd515e7942b45a43e7fcafa5e42eed610dc288186fb1b84710a70a2c3d141f700af5eed1aed8abfe3c50c3cb6747705ca0abd8cb2747e6d5f2be7bb417c305bb52ff06495f180a1ad3910bfb36154b86f2655b2c9ba3614100bdc1f1ede6122ed613d688bef7511060315b0455711b27fc07412a935d71c416a8b7c74dfe8ab7b026969aef8a743e56118859984501be667e70007a3e617f68de0d051bb055fb61936d9b2013a7cf1c1703a88ae7cde6711146fc7baf38a7fa4dfa57f63dc447e2980b9b1af4a3963467791ded55f292e32b1091290d6f7d71be7e9fdcee43c0d1d9b63b4e5164a76cad0b9f52788b868e52816fee5bbe710bacd96f304ebe9b94d2130f816dc6060b5bc4e87150ab148dc523f4ceb9e190a41a64702cd41ae47378aa5f5e07df6a844a948f8feefba7f8fe2cdee85cac842670bffb6d4e400e2fa96a5e38fcf39919547649a5ee6bfa15421fa784c80a1de0451e469335b6884d02685e9a7230bb3a986c09caad940a6c774c70da2e5192cba89cd2fb2e7048eee6a6ce565003d527e85ab8466083375b63c77d0081b03da6dc5b67548139efaf6fae7ad0662d4b6caa300273b33ca9a796ddb3c6321e6732ee16d7a6e7031185a56dd0704bc50bb40168a52a7dd16b8c27f6fb18e11531c72604a536220e9a6d915fe5a445d01c9294c6478b1de5ff70a84ea2223dc271ae158ff1874fdaa9b960335054176929b03506308a0fa92ccbefea43908ee716d204db73c0060a8395f48c350645c1f9d161c1904e078dea240926e2819917e40a22f8b84c3d5f26dd3c67e234447b028a58e63ac8c0976d9905bb96a46ac1907e2e0beb5661b1194b63bb526bdf1be20a9ffaf27580a6c44ad51ad81042c9415234b4a92dda2daef05b58eb59862c9df39f73f41a6b7b10e4c7b1de163d260683a3ac628b5c2bd62651bd16850a9c93cea2d7818c90183c44fa9c3a1e41b73df93eac1df895d202bd8e1f9cbb17528ea88df26c48b20eff28d6dff12de21feba47bd8b6a3b535818212c2e6859d2f6b434f7facfa37e07508eda1da2405b538faafa9e1f7e1094792de336ec5d9fcde98a1be0ad955364bcb005cbeff9cbf5377aa8cfc7e5e479bc4c77b054844252b7e5b12b8c9c2a8edaea685b54265b333b850019e7e91c85fb3da446533e630749105c24b30c7b3dd796e9c563df2c576bf53c81689875c2c3fbc053cf47a60dcfc33167d4c01764eee7f588a0c4d7fb00c6f1017d680651a3cf52478efefad4d8bf6b44498198216ad2d2a4148061a430eb39ad1426a79aaca5f25eadb19c64f6b09ed4250f7463128360931ee8f188ce8ecf96ac73328653ead5926bc4f0ce1c6653866bb8c904e8a09fef9cb0cba1e373550fd9ac90aede5dfa5265131c737c40f342f1726ec90f5499fd36835cac6379eb6d43e24178fd4b7588230415111e32ab21da5248ab0ee60920990e4413fccaf8954e1dc76bbf128e0dd0ac4986364d05fb77a4fb9d3c3bbc283f66d85ec4182f058ead85d168f0e9c39fb128255c88e978cac54814908028c76a30657ee9a10f7499b0b717d4dbcbef06da71c75bbc594422632a4281c2a0fa5cbeb8132d1c7b6e67346850c436aa45edfce475121ce0f5e1f546a992363e7a601f7d3a77084aef071e7405f43050f6e95b308a49be4ee5391e9c812a075e5ca559caa447d66e533a402009194e3987510fa71232cd3ef6efb6e07733a5985696975906f168b1e5640d93b9099d2f5588fe7aaadbdab397b6915d9efa5a7adbb63774"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x95}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x32, 0x1, "9bdcf1bc216f0db9f92c12a1ecf1ab04cef4d87036cbfd14bf68692581115d8c93bc12fea90cb4d65f430d8b04fb"}]}, {0x460, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf392}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x26}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xd098}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x78be7c42}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa3cd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x58, 0x2, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x49, 0x84, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid=r3}, @typed={0x5, 0x150, 0x0, 0x0, @str='\x00'}, @generic="30b2bb4c21bd2b87b32304ae02b24ee74a683eb55c1808cd362976cf5d03bc1541c08ab6657e378f8185471547", @typed={0x8, 0x10a, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x3f, 0x1, "b5145a79c9d74648a0c161ab350dda9dcfdc0ca34b0e798f23dd57b5b1b494db59243b211af75450a23df767aea4300835afbaf933e27ba5f5f2df"}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5b6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffff7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x92}]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x478, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x3ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xfc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x100}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd854}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x51}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x80000001}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5c}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x87}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2c0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7fc0000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "3426115143024e720e3821519d0646bfb6cb4602c6ea0adaae834ffb313733a87143e687ecd999b7f4854928f26f7a73743f6a597605c3db7c158dcaf266bd035cb6265974f2ae154a8321b5cffd32d1ca933e989a45cd51fc64123865ac3d2bc433214027c60fc674a87330c463d903e1de78837b644ec9c204328f98d266a7e9"}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xcb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ee}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9b, 0x1, "26fa99476118a5c4a448f0a588f4003079910a8b85f1e736dd2a723ab505224772b36a5918e3c0dabbd33389f130ec57bd298f798769c2d6d483a8cb952831c169a870248daeb8c493c31790d7d3f6a9cc261b97d68c60b04fbc830c049e70c98c9e050887c6ed215c581cd8c4ee3a691a4b73829434c4634451983daee5f8b0b9db7ff192743537de90c1592018b05bedf3102c256407"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5d, 0x1, "1f19b439d857abaff277a320e9654e6b3b0153789c6833f8973563ebcb4b0f2bb3ade90af72238f4cff71ef65c3af10b0fc443d30ec26a5f8586b727fbdc45d708018f6d8b47f15515bb53382efa2ef65ba707c3ceab51a2b5"}]}]}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_MAC={0xe4, 0x6, "8d6c632d5cead1ef5c158b30656b43c10d08c59c01d10dd91a0fe961c713da662562bdabe2622ca8143a80cb45efee0f54396ff568b260f3e5fd3339feea14c8cc27f76f4f78139798b77d8978989a790bdc5e0bfd2a33d2d1e9824a7189a82c12d3362e74adfeb3702c45ab3bb428781d148b8d2d9c53cd888573d15c29b1f1daf889f84d60a2403d1a1622e976e2eb7bef2a66233b43b2a0f80001ab1ee442cc98fa053a8cfa1520c0650347914872affebe67b0a189683856bd0d44d4c71bc9102857c9c946ea3f1bcf3642ec2b59ca26589968a332b34d8f5f7eb1343c71"}]}, 0x1c8c}}, 0xc866b66d1f9458e7) 2m36.635112373s ago: executing program 0 (id=2005): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x2, 0x0) r1 = io_uring_setup$auto(0x7, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r2, 0x0, 0x557, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) uname$auto(0x0) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x30, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r0) sendmsg$auto_L2TP_CMD_NOOP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9, 0x7400000) r5 = socket(0x22, 0x2, 0x1) fstat$auto(r5, 0x0) r6 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r6, 0x3b88, 0x38) 2m36.167549632s ago: executing program 0 (id=2007): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mkdir$auto(0x0, 0x8001) mount$auto(0x0, 0x0, 0x0, 0x3, 0x0) unshare$auto(0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/usb/drivers/ark3116/unbind\x00', 0x652800, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyv1\x00', 0x20540, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000003c0)) madvise$auto(0x5, 0x1, 0x9) write$auto(r0, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xee\x0f_o\xc0\xee?\xce\xa3\x04\x95Hq\xf4\x00\x00\x00\x00\x00\x00\x006\xe0\xb1d)X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x80000000000) write$auto(r0, 0x0, 0x10000007) listen$auto(0x3, 0x81) mmap$auto(0xf0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)="30624bf1", 0x4) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r5) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r3, @ANYRES8=r4, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32, @ANYBLOB="069757214043e7ed599c300fa5ad433488064eef7dcda7661783004160fbb743985d86809716a4b11b0f8e16d891e1971aa46e7bbc1f22aec51b5c00a557c6c4f0545bf3768158afcb39314acdd40e61f446995c"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x10bb41, 0x0) mmap$auto(0x0, 0x43fc, 0x1, 0x40eb2, r3, 0x300000000000) 2m35.104648511s ago: executing program 0 (id=2011): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x92106405, r0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r1, 0xc0285628, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) socketpair$auto(0x2, 0x0, 0x7, &(0x7f0000000000)=0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 2m24.317149382s ago: executing program 33 (id=1995): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xfb74, 0x8000000001, 0x0, 0x1, 0x1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080025bd7000fddbdf25020000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x2002c810) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e26736600d8efe42d132b72f30c54315aa74a5b8107cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdd, 0xeb1, r7, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x4, 0xffffffffffbf0005, 0x6) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0xffffffffffffffff, &(0x7f0000000180)=@phonet={0x23, 0x92, 0x5, 0x8}, 0x54) mmap$auto(0x0, 0xe983, 0x2, 0xebe, 0xffffffffffffffff, 0x8000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) 2m19.874287699s ago: executing program 34 (id=2011): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x92106405, r0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) ioctl$auto(r1, 0xc0285628, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) socketpair$auto(0x2, 0x0, 0x7, &(0x7f0000000000)=0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) 56.987317768s ago: executing program 6 (id=2235): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0x2, 0x1) r2 = bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r1, 0x10000}, 0x10) poll$auto(&(0x7f00000000c0)={r2, 0x3, 0xb}, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x2002c810) 56.653792387s ago: executing program 6 (id=2238): r0 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x7, 0x2, 0x0, 0x1, 0xffffffffffffffff, 0x7f, "3078ff6793f26d6e6cdafa5c535f7923", 0x0, 0xffffffffffffffff, 0x9, 0x8001, 0x101, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x80000000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D1p\x00', 0x309000, 0x0) sendmsg$auto_NL80211_CMD_SET_KEY(r0, &(0x7f0000000dc0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000d80)={&(0x7f0000000180)={0xbf0, r6, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x49}, @NL80211_ATTR_BEACON_TAIL={0x79b, 0xf, "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"}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x1}, @NL80211_ATTR_MBSSID_ELEMS={0x423, 0x133, 0x0, 0x1, [@generic="d4ee91ddddcfe888645e890fae570e5138fbfb", @nested={0x1b1, 0x105, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @ipv4=@loopback}, @typed={0x4, 0xa6}, @generic="ba192f4344", @generic="ec81f6809422a306a47a6b2b7b596fa22b9fc968589dd8f4cb30", @generic="deb8a3ec44635b2a9ddc99e295334503a59e1d401f54cb22da1241a0fd7f3fc882e783e31aee9d52526a64d7553cb95993e7a765a9bb3ada4178caceea2442baaea5559a4c8bf50221676d8d811d4373771670d7f0cf5818b7d1c5b03f7e5892283ffc7d6f02a830a6af5c147633bf37a4911d26e274644b41cb8f8eba3ca2e426525964d9050d320a005353498c71e791bcbf19", @generic="246b8172e2e2c1d9df23ef8ee88aa9cccccbd40a64445f486e599c20bd236e4828e157d47a2d6b791b51a43ffb21bd57a4969f57cd7cb7c5c6b2860cdf49345a82d9cc475a7ea91c3e1049bfbf601ad41a4e6bed095f476425fbda9f28e8313945375a69a4599339954a7d161286c22e69446f822c146412961d8921aa0af4dd", @generic="97775f9264e321ee07db90b27c91da8335d4732e02453b0766745e4833fc0a1cda812efe94b504eccaa2d73519855b2fff13cd576f82017eda9005173f146b6d659b264ae2bd96ce5537e2d2ebc809c40a938e3a9980a26b48ac9599122df338c02f5d015f4576d41defdd05e160"]}, @nested={0xc8, 0xf5, 0x0, 0x1, [@typed={0xa, 0xd3, 0x0, 0x0, @str='@}(-#\x00'}, @generic="1d8bad44e9c1f291240ca560baf5a60896a1f930a734550b12f04c6267e57f521c634783f65d8503e64cb5ad803f8c2b0f3780daa369b4d7765e05a6ef7d260026be72ee9000dd4ed84202cbc2288d46bb48f48f69bbdd548e8fe53531fbe08e37d9284b506730528cbdf3e73500c07951333afb9b8b328fa8443c345fab66b698c760df3d4f04b772ffc656f4e76adedd56a011c055ec5a7aed24a7186a6b408eb65d50fa2fcbec", @typed={0xb, 0xc2, 0x0, 0x0, @str='\xf0-([!:\x00'}, @nested={0x4, 0xf2}]}, @nested={0xb4, 0x11b, 0x0, 0x1, [@typed={0x98, 0xfd, 0x0, 0x0, @binary="40e4fe392bf78e4654c3610258ef76fec65ed7918ca5100348d1082f10df0319ecd9c43b0a595ff5b1c9c89dc3869d690a53d76d89bf6170f8f03843a6c741eb8c8426639bd73fe9f6eb770975c62c0e0c507ab9f2bd852a8eb7994e948e7927f3ccf2937c52d56026bd31de2388e696d56f9c9fc80a97275770e033243153b83732ce797f19cd1ef6183f4400c67f341afb2a00"}, @typed={0x8, 0xfc, 0x0, 0x0, @u32}, @typed={0x8, 0x59, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x3d}, @nested={0x4, 0x108}]}, @nested={0xdc, 0xce, 0x0, 0x1, [@typed={0xc, 0xc2, 0x0, 0x0, @u64=0xe}, @nested={0x4, 0x66}, @nested={0x4, 0x89}, @typed={0x7, 0xc1, 0x0, 0x0, @str='g:\x00'}, @generic="759c2c19cdfcfb39b66155f7409dbbb364a24b6bd06b4506d793b30686910bae1222c85f439070c3e890d4e3d28f8fa435722ecc176f8a77adc50a7fcbfbe2abd222457f7a377c3e44678532629299182eee2c7769cc47fd5fa33948bd429b0ab0a5d59b795270dd9ed00542ceecc53f52ab43527c05a3ea0bf1aaaed35e7e791bc0ebf943d6c24ec6eb6eaadf399c8e0c23d4ec18a31ac5936e77b5d5f99c369a2d6574d21e7647ae61209c75f00d5c0fee65048680e713af3f3677"]}]}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xff}]}, 0xbf0}, 0x1, 0x0, 0x0, 0x84c7}, 0x80) read$auto(r3, &(0x7f0000000e00)='\xf0-([!:\x00', 0x75) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e80)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000ec0)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r8, &(0x7f0000001140)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f0000000f00)={0x1d8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_FEC_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEC_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfe3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}]}, @ETHTOOL_A_FEC_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000040}, 0x404c080) r11 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000011c0), r1) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x40, r11, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_THROUGHPUT={0x8}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r12 = syz_clone(0x200000, &(0x7f00000012c0)="5cef1ff3b838fe0f4aa88555edc4e2b7938a22207e4a390a9d164d0e25971826182500ecf45cd5b9c9eeaaefd4c930fce4bebca30ad5d08c3bf6eba39df54931d0f0a54901eff70a838aee11c86314f9d111cfc10e38fa5c3ce82a3c32a195bcc5188a87b7556f058436dc136de24f94d05db88be08ce535818bb6423060658631", 0x81, &(0x7f0000001380), &(0x7f00000013c0), &(0x7f0000001400)="1ac4d97e15ef488ca5e632633082ef314b589d29b4553ff0ca7c4c66e896c000a460f919bfc16cedaf0df66bd0e9338e0097036a349287d558d2077c9b37a9483a7ca2c1e39eb72ba75deb49b706c0") r13 = clone3$auto(&(0x7f0000001480)={0x8000000000000000, 0x8000000000000000, 0x7ff, 0x80000001, 0x3, 0x3, 0x3, 0x6, 0x9, 0x2, 0x4}, 0xfffffffffffffff0) msgctl$auto(0xf, 0x3, &(0x7f0000001580)={{0x7, 0xffffffffffffffff, 0xee01, 0x0, 0x5, 0x6, 0x796}, &(0x7f0000001500)=0x8, &(0x7f0000001540)=0x6, 0x7, 0x350, 0x5, 0x0, 0xffffffffffffffff, 0x3, 0x7, 0x8, @inferred=0xffffffffffffffff, @raw=0x4ef}) waitid$auto_P_PID(0x1, r12, &(0x7f0000001600)={@siginfo_0_0={0xf8, 0x4, 0x9, @_sigchld={r13, r14, 0x0, 0x8, 0x2}}}, 0x2, &(0x7f0000001680)={{0xd, 0x54d}, {0x6, 0x5}, 0x7, 0x2, 0x80000001, 0x800, 0x4, 0x4, 0x0, 0x9, 0x201b9b09, 0x3, 0x9, 0x5, 0x1ff, 0x7}) fstatfs$auto(r3, &(0x7f0000001740)={0x100, 0x8000, 0x5, 0x3, 0x1, 0x8, 0x800, {[0x8, 0x6]}, 0xffffffff, 0x5, 0xfff, [0x2, 0x7, 0xcfe, 0x9]}) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000017c0), r8) r18 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001840), r4) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xa4, r18, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_SE_APDU={0x4c, 0x19, "a911e162411781ef03cf310021fd024e1c2e47585d5e914c3679ab78977858a75d788da158f4853c072b349b9c991f72d562df472f47bd6e556d3ad808eb5d9346f740de771069bd"}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x8}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, '\xf0-([!:\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x5}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x6}, @NFC_ATTR_DEVICE_NAME={0x7, 0x2, '-,^'}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xfffffe97}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4c004}, 0x8800) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000019c0)={'bond_slave_1\x00', 0x0}) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000001a00)=@bpf_attr_3={0x5, 0x3d, 0x4, 0xfffffffffffff6c0, 0x6, 0x400, 0x5, 0x8, 0xff, "d9174598ab3404f50710bb79eb32dae6", r19, 0x7622, r8, 0x4, 0x40, 0x80000001, 0x6, 0x9, 0xe, 0x0, @attach_btf_obj_fd=r5, 0x8000, 0x9, 0xbd, 0xb14, 0x9, r7, r3}, 0x80) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001ac0)=@query={@target_ifindex=r10, 0xf, 0xffff, 0x3, 0x2, @prog_cnt=0x4, 0x0, 0xfff00000, 0x1000, 0xb, 0x2}, 0x1) msgctl$auto_IPC_SET(0x6, 0x1, &(0x7f0000001c00)={{0x4c14, r17, r15, 0xec, 0x9693, 0xffff, 0x5}, &(0x7f0000001b80)=0x4, &(0x7f0000001bc0)=0xac, 0x81, 0x5, 0x6, 0x9, 0x1, 0x3, 0x81a, 0x3a, @inferred=r16, @inferred=r12}) r26 = ioctl$auto_SW_SYNC_IOC_INC(r22, 0x40045701, &(0x7f0000001c80)=0x7ff) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000001cc0)=@bpf_attr_0={0x0, 0x1, 0x7, 0xffff, 0x1, r0, 0xfffffff9, "744987952930210c780f0538bc20fd99", r2, r22, 0x7, 0x2, 0x0, 0xc6, r0, r26}, 0xf3d) r27 = signalfd4$auto(r21, &(0x7f0000001d80)={0x8}, 0x0, 0x80) r28 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000001e00), r24) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(r27, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x3c, r28, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@VDPA_ATTR_DEV_NET_CFG_MTU={0x6, 0xd, 0x8}, @VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x3ff}, @VDPA_ATTR_MGMTDEV_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/sequencer\x00', 0x40080, 0x0) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r23, &(0x7f00000020c0)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002080)={&(0x7f0000002000)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r9}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r25}, @NET_SHAPER_A_CAPS_IFINDEX={0x8}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r19}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r19}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r20}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r2}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r20}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000851) 55.981198818s ago: executing program 6 (id=2239): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x801, 0x106) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x21}, 0x20004080) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto_snd_pcm_f_ops_pcm(r0, &(0x7f0000000000)="ccff0fc1f06117935d8fe31a10", 0xd) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r3 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r3) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000001900)={0x1b98, r2, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0x1a8c, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x24, 0x5, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x6}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x1a64, 0x5, 0x0, 0x1, [{0x102c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "1484ff9fdf6017594535a2a60f534834ad4e3affb84f0155bb92861e1b25c26705c2d89ad93c3f20cb0e431c3fc0bd38a03fbb3fa59ed3461ecc6ff5d579c0eec3af7f96d3b6a0324b66d632f03fb0818e4971fcde577a2192e25f5c972f513d5a4c396d25a57f6853a0acee306e99fbbadd7ec443b05f31ffc96678f254fabbaa2990b16915c46308c5ef49626c9aee45bf59d7d6239f8d327cd12cd5193c3bddc395be30f967b032c35c90bce1bf38cc0224b43989cb3bcf54ec3f0cbb95a53151e46abf7560378e5a168eecce353ac8689c78c6ca6241f27e1e8267684ab3883c0a6b2ba6c931f705aa2cd4b303df481012d16b3b8b44483ad173ecbdce506ed999a6e9e9a3ea239aab8ac2d201226625bfe60afe441e1bd8b7dfa93c913fe9cefde1aa01ae689a266c1b9a7186af865431b258f664b9783e40409e40aac6e7e016ffb21bef37c56a94b23de286e89467518885caa787f9cd8cdad711fcb2d1008d1edf0712273fadd484e90e4a02cd9bfd6fac23584d1a409b5c4911835527591a75cc35d0a43ff86e40b30b3d22a52b0b562202fb0736ea8dd312a3ef8a1b2e3e67347c1be5c05a29eb2951ab068001ad5b2636bfb227069e26a3278eac156a7868a094565d08a140c3775e8701654db2171de40eadd0d903f48c1bd78927c67f927418c38047630c986fc886577f884bcb5c8cbe5d8e86e9c53ceb05e872c0da7f212a52acc436f0c343fbf2c205446c6e9175631559a6694f8184fc47354cd61541ec4a26353ef4d6582c06886e325eb31d31fda3a9c751a0850cc98da22d17a71bad9814bb745ea45d9817f0547daa3ac0d319370a2a435efba1889b6c930631e99d23edbc9c749b2e1f45aa010bff466de15dcdbac5ccf0a9ab7550c5a536d7aceb43245b5e5dda1d06492495e399bf13a07cef71aeee44ba74fa00d225c1de0dc334476d0c1c7d13c2247ed38c2b1cbeae9dadc71fb7c01b7b8e0652b96fd200a59f1353d3f4cf943c22498a932fbb1800c556276f193317711a322bf5ff1c2de1481772c0236561270a1c49809e56b513a6f6fd198fe2b2ab04641a15467cc5c43df120ea17a5a6fb23d2ea97741309ed662100b076fd7ed8a12314e9af2be3f2acf1706f34561db7bec5b0d2c59cdfa32e3ca454c15b3ea2df8ec5789e8a5ae662f4a953f3255388eb129eb5ff82e3a7f2e14f8de74a622be886c9ee24942463bd3dd2b5b50531fcc4eec02c7a112f2dbb3fc6737b1dd7bf5f2e78feecaa481b49f7f326e06661305afca4f6588ecd10a4bc629c9ffb1bc8cd3105ace24bdb03d8415906612b26405c8f6724ae47a8b54a2e14fae7f48f1074f67e60ab0b24d1d6dd5b9ca3a0cf657d5ca250281bf659f2ba53ee303de018924aa2a408fcf1e9a5054e96afcd3f5594c05d364c211e28e97e010094350851b1254b87e8d2d2d0f867502604b8335db28565c7706cb3847764f7bf10bbcd35a7383d630015a8604b6ec24173ed5c05da0671c601cc10f29f7dca7364c171f440e58b30643ab5a324759fb1ed3024c5fa5f161043fb171944f17b9319301159715ed2783520ac3554b61840502a4655eeedcb355cb609877816e33c0537892d44fa3b9741bcfd7954f17dba4ad44add48cd61d7b109dc45bff3be45c666732bbdfd2abb9d733c66256030c140fc9333b821aeafe6a21ff53be26c9c655ccdaedbc9236e5598e5cca207ca89951514d4ba75017ea718ec819e90a3278c4d4c45b64201d927d5073a7e4e19b0c94e442a3c272d3b641c9c6dd817b43dda69413a5566e61e1559e45370578b1e7ea8f72dcf85b177a4a781707ec08608e72033c264043ed59a71115397ca38eb8ea5f7f07e31cb6c1f19156eb672dedc758b5f763705fb70e32eae5909123eeed8c5e87b118a662a87194e5c99218f2e939fdc292915755c8d09bf540a64db9338c02b342b5cf6468b3e0d125655678e3ecf03e77802d77a613fa8b678e986189222ee48f2f5cc0134215f2cb5f8453e1688772a6b0d46ff610cf03e3a6947b26b1aef5f3d5cb2293e801b2f4774ee180ca3287cba820fd2440b05dc320d9822a29659919d9cf59d8084c6a00c687b45a76cd573033373ee28ef34367891b7848eed7da6415a395968f5e5acf6e0eab8ace516125b41d40f87401f75ae311d156901aa9ec9bd8b9466be0f2f81855172120db86c244ee65d82c878584eda5c2aa9b685b11e065467f191cb040eebb969296fbd8a3a21d6d4681002ba7305098da9b5e0f437953c4792015797d80a12d223e1179aa15d124ffc5aea47c3ea4893e7c7fd8eae8fdde6c9418d36b90123ec4e05f6d36d68bff65c339f59811996da7b9ad5deeeeac9d84772314833435ceada04172f2e7e26313be9c484a155aa336f3b4e718a821e89fb7925342fb5fc60e27c7360bd0fd4e749eab670e65fb53f4352f8166985b76b884d927ef3164a9d592bc39e8cd833375a7dfd1a928923c519f14a1d41650b25f80434f42937d67dea01183ba46b16d7cda55b0a0d27a22bb53f19cf330af1bbb2a6355a571bce827236b08668ed2ce02d4b8ab1364b0ee68726e273e126cc8d756e4a16e8f101e878f5fb3bf420e07c3cf8cb4953289c83b76e99f9b2675d3bf0057ddbd12743e3f7ebef365a1db351a17755c7ef6329907b1b0fe61f53d4b6f67eca69074af22fb41b896293ed647857db952501f2edb29146f5740538d5de1071a155cb5ff60c66db110de4ea5bac07f5cb3b5b713135b0c27f28b994a8ae4a89465ea530833ed34b647787ffdeac93bace2f990b4935210eb09fbdb456602657fd0cc54deef30f473a7119410019ab31040b67792fdcc04774b69458d96758b9a9b313d8c8394e901bb52b87656d31e9436e5d70ea4297da61559757945457e9d4a37ffb3faecfddbbd35143dd35c6b7836868ef3d7018ccc84d235e8bac64f3ec961ab191b5535d9ae6a75514f57caaa5c3a89f7590d6f59c3d962d7a487121a4c12a3ee14869ce80f53b8677e47c0f7a2b0cef3dace4a28ab9f3e5b21a0fb0a6d64c40d63b9e3488333506b0567f6fd6184363759be639cda769e854560923dfa311ba5b16214ed03096dc0c3eee132c155bd5eda0c146cf48a22132edae5e8da3456d445517c75c2085cbe4a50835d00a48eec46b05d0da130664e5a8ed20f18730bdf8973a17e21d077caab293c6b07e265c286a8de425295be219478bdd79384ec46409e0d776a235ba8915511d3d4b08bd0b38759c02a538491160e6561e73245ad1cdbe0b3a1f656b3ede3f0d5aba03343b8200c8f4255909af65835936767fb28d969bdc6b54255695e52a620d7e203e76aba69d7adb4bb27a0dfab19fcffb7f1d5f92ee3141a8ad0447edcd2cb1e9cc6a9688829db4002c412a8bb16ad246da71b0e39529f2a620c6df669a62dd225a275e6280a76959019326c5c986bf09454ced91e175c1c84964914ed46c33ccad3e1384bb488298f318fd446beefe3c9eb8e58bb17d2a655672d36503267c076efebf7126ae7c735a81da24d29ed8553a1d78878e326e016bdc3d838346f27a1e6f89dd308ce756dd5bbb24351b7cde1c698e459ef20a13b78f203d5618d4aa80f914cc60003037de69d49f987be37c8cfbde84da1389a516f5a41bb485b77e6d8ff2db6eaaf7d3bbcb65363c1a2008f1284aca3b390e6659225b9687649df0ae8e4ede1093ffadffbeee9fd4152056e978c43bc253a563b11facf73d20fd3fe5c1b539f344c9983d025c31c171abad287a39744455eff8dd6108e20e1ad2c2844a8a7cabe24c5131cc2bd252317d8eb4107bbbfd664fbf6ef710d06b8d2e5f7ed522e32e1e0cef4291d6b3f3969672adf5a7e204b183090fd8940dbf97faed794a9d87166b7010177081840cda73bdddaa9df3f95ae38224b0014afaebe23bcad603b254369b5655c1e660632757add53491d8ad6022c4631c49ce504a7751cbbd2bd515e7942b45a43e7fcafa5e42eed610dc288186fb1b84710a70a2c3d141f700af5eed1aed8abfe3c50c3cb6747705ca0abd8cb2747e6d5f2be7bb417c305bb52ff06495f180a1ad3910bfb36154b86f2655b2c9ba3614100bdc1f1ede6122ed613d688bef7511060315b0455711b27fc07412a935d71c416a8b7c74dfe8ab7b026969aef8a743e56118859984501be667e70007a3e617f68de0d051bb055fb61936d9b2013a7cf1c1703a88ae7cde6711146fc7baf38a7fa4dfa57f63dc447e2980b9b1af4a3963467791ded55f292e32b1091290d6f7d71be7e9fdcee43c0d1d9b63b4e5164a76cad0b9f52788b868e52816fee5bbe710bacd96f304ebe9b94d2130f816dc6060b5bc4e87150ab148dc523f4ceb9e190a41a64702cd41ae47378aa5f5e07df6a844a948f8feefba7f8fe2cdee85cac842670bffb6d4e400e2fa96a5e38fcf39919547649a5ee6bfa15421fa784c80a1de0451e469335b6884d02685e9a7230bb3a986c09caad940a6c774c70da2e5192cba89cd2fb2e7048eee6a6ce565003d527e85ab8466083375b63c77d0081b03da6dc5b67548139efaf6fae7ad0662d4b6caa300273b33ca9a796ddb3c6321e6732ee16d7a6e7031185a56dd0704bc50bb40168a52a7dd16b8c27f6fb18e11531c72604a536220e9a6d915fe5a445d01c9294c6478b1de5ff70a84ea2223dc271ae158ff1874fdaa9b960335054176929b03506308a0fa92ccbefea43908ee716d204db73c0060a8395f48c350645c1f9d161c1904e078dea240926e2819917e40a22f8b84c3d5f26dd3c67e234447b028a58e63ac8c0976d9905bb96a46ac1907e2e0beb5661b1194b63bb526bdf1be20a9ffaf27580a6c44ad51ad81042c9415234b4a92dda2daef05b58eb59862c9df39f73f41a6b7b10e4c7b1de163d260683a3ac628b5c2bd62651bd16850a9c93cea2d7818c90183c44fa9c3a1e41b73df93eac1df895d202bd8e1f9cbb17528ea88df26c48b20eff28d6dff12de21feba47bd8b6a3b535818212c2e6859d2f6b434f7facfa37e07508eda1da2405b538faafa9e1f7e1094792de336ec5d9fcde98a1be0ad955364bcb005cbeff9cbf5377aa8cfc7e5e479bc4c77b054844252b7e5b12b8c9c2a8edaea685b54265b333b850019e7e91c85fb3da446533e630749105c24b30c7b3dd796e9c563df2c576bf53c81689875c2c3fbc053cf47a60dcfc33167d4c01764eee7f588a0c4d7fb00c6f1017d680651a3cf52478efefad4d8bf6b44498198216ad2d2a4148061a430eb39ad1426a79aaca5f25eadb19c64f6b09ed4250f7463128360931ee8f188ce8ecf96ac73328653ead5926bc4f0ce1c6653866bb8c904e8a09fef9cb0cba1e373550fd9ac90aede5dfa5265131c737c40f342f1726ec90f5499fd36835cac6379eb6d43e24178fd4b7588230415111e32ab21da5248ab0ee60920990e4413fccaf8954e1dc76bbf128e0dd0ac4986364d05fb77a4fb9d3c3bbc283f66d85ec4182f058ead85d168f0e9c39fb128255c88e978cac54814908028c76a30657ee9a10f7499b0b717d4dbcbef06da71c75bbc594422632a4281c2a0fa5cbeb8132d1c7b6e67346850c436aa45edfce475121ce0f5e1f546a992363e7a601f7d3a77084aef071e7405f43050f6e95b308a49be4ee5391e9c812a075e5ca559caa447d66e533a402009194e3987510fa71232cd3ef6efb6e07733a5985696975906f168b1e5640d93b9099d2f5588fe7aaadbdab397b6915d9efa5a7adbb63774"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x95}]}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x32, 0x1, "9bdcf1bc216f0db9f92c12a1ecf1ab04cef4d87036cbfd14bf68692581115d8c93bc12fea90cb4d65f430d8b04fb"}]}, {0x460, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xf4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf392}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x26}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x70}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xd098}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ff}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x78be7c42}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa3cd}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x58, 0x2, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x49, 0x84, 0x0, 0x1, [@typed={0x8, 0x56, 0x0, 0x0, @pid=r3}, @typed={0x5, 0x150, 0x0, 0x0, @str='\x00'}, @generic="30b2bb4c21bd2b87b32304ae02b24ee74a683eb55c1808cd362976cf5d03bc1541c08ab6657e378f8185471547", @typed={0x8, 0x10a, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x3f, 0x1, "b5145a79c9d74648a0c161ab350dda9dcfdc0ca34b0e798f23dd57b5b1b494db59243b211af75450a23df767aea4300835afbaf933e27ba5f5f2df"}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x72}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xd5b6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffff7}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9a}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x92}]}]}]}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x384, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x2f8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x50}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x51}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x80000001}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5c}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xffffffff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x87}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2c0}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7fc0000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x85, 0x1, "3426115143024e720e3821519d0646bfb6cb4602c6ea0adaae834ffb313733a87143e687ecd999b7f4854928f26f7a73743f6a597605c3db7c158dcaf266bd035cb6265974f2ae154a8321b5cffd32d1ca933e989a45cd51fc64123865ac3d2bc433214027c60fc674a87330c463d903e1de78837b644ec9c204328f98d266a7e9"}]}, {0x1f8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0xf4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x53}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x68}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xcb}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1ee}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x9b, 0x1, "26fa99476118a5c4a448f0a588f4003079910a8b85f1e736dd2a723ab505224772b36a5918e3c0dabbd33389f130ec57bd298f798769c2d6d483a8cb952831c169a870248daeb8c493c31790d7d3f6a9cc261b97d68c60b04fbc830c049e70c98c9e050887c6ed215c581cd8c4ee3a691a4b73829434c4634451983daee5f8b0b9db7ff192743537de90c1592018b05bedf3102c256407"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x5d, 0x1, "1f19b439d857abaff277a320e9654e6b3b0153789c6833f8973563ebcb4b0f2bb3ade90af72238f4cff71ef65c3af10b0fc443d30ec26a5f8586b727fbdc45d708018f6d8b47f15515bb53382efa2ef65ba707c3ceab51a2b5"}]}]}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}, @NL80211_ATTR_MAC={0xe4, 0x6, "8d6c632d5cead1ef5c158b30656b43c10d08c59c01d10dd91a0fe961c713da662562bdabe2622ca8143a80cb45efee0f54396ff568b260f3e5fd3339feea14c8cc27f76f4f78139798b77d8978989a790bdc5e0bfd2a33d2d1e9824a7189a82c12d3362e74adfeb3702c45ab3bb428781d148b8d2d9c53cd888573d15c29b1f1daf889f84d60a2403d1a1622e976e2eb7bef2a66233b43b2a0f80001ab1ee442cc98fa053a8cfa1520c0650347914872affebe67b0a189683856bd0d44d4c71bc9102857c9c946ea3f1bcf3642ec2b59ca26589968a332b34d8f5f7eb1343c71"}]}, 0x1b98}}, 0xc866b66d1f9458e7) 55.648109048s ago: executing program 6 (id=2240): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)="75aa12ba560b4a0632c37ebd7b0e5f614b7da6d5e6f8f687f4d5745a37e151c9821eae99dd7aef7ac62e07d25220d84b64ca735a0b7ee6e4427411c253e46813d29f865758e40562befc7f4006f11bd05d94c14a0428b220345976cc9b2e7d21", 0x10000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create$auto(0x803, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) epoll_create$auto(0x3e) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x20100, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r2) write$auto(0x3, 0x0, 0xfffffdef) 53.813987823s ago: executing program 6 (id=2244): mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r1 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) set_robust_list$auto(0x0, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) 52.777620196s ago: executing program 6 (id=2245): select$auto(0x7, 0x0, &(0x7f0000000100)={[0x67, 0x9, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x9, 0x10000005e58296f, 0x1e, 0x6, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c0302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40ebd, 0x401, 0x300000000000) move_pages$auto(0x0, 0x1000f54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x6) mmap$auto(0xccd, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x2, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x309800, 0x3f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x82142, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x6, 0x3a) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x5, 0x0) getsockopt$auto(0x4, 0x6, 0x24, 0xfffffffffffffffc, 0x0) getsockopt$auto(r0, 0x29, 0x35, 0x0, 0x0) 37.353327833s ago: executing program 35 (id=2245): select$auto(0x7, 0x0, &(0x7f0000000100)={[0x67, 0x9, 0x0, 0xfffffffffffffff6, 0x7, 0xfffffffffffdffff, 0xdffffffffffffff8, 0x2, 0x9, 0x10000005e58296f, 0x1e, 0x6, 0x3, 0x200, 0x1, 0x9]}, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c0302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40ebd, 0x401, 0x300000000000) move_pages$auto(0x0, 0x1000f54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x6) mmap$auto(0xccd, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x2, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x309800, 0x3f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x82142, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x6, 0x3a) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x2, 0x3, 0x6) socket(0x2, 0x5, 0x0) getsockopt$auto(0x4, 0x6, 0x24, 0xfffffffffffffffc, 0x0) getsockopt$auto(r0, 0x29, 0x35, 0x0, 0x0) 10.679682466s ago: executing program 7 (id=2316): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/nvme_core/parameters/max_retries\x00', 0x101342, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) sendfile$auto(r0, 0x3, 0x0, 0xc01) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x4005, 0x7, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x2, 0x0) mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) mbind$auto(0x1, 0x1, 0x4, &(0x7f0000000000)=0x9, 0x1, 0xa) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/4096, 0x1000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/lowpan0/power/runtime_status\x00', 0x8301, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/thread-self/fail-nth\x00', 0x1, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0) r5 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x40, 0x0) r6 = clone$auto(0x9, 0xfff, &(0x7f00000000c0)=0x7fffffff, &(0x7f0000001100)=0x7ff, 0x1) ioctl$auto_LOOP_CTL_ADD(r5, 0x4c80, r6) madvise$auto(0x0, 0xca3d, 0x17) landlock_restrict_self$auto(r2, 0x0) 10.396237834s ago: executing program 4 (id=2317): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3, 0x1, 0x0, 0x1, 0x1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x4, 0x2003f2, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0xb, 0x0, 0x0, 0x0) fsconfig$auto(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, 0x0, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x9) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000002, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0xfffffffffffffffc, 0xb74, 0x66a) madvise$auto(0xebb, 0xffffffffffff0001, 0x0) 9.023490682s ago: executing program 4 (id=2319): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x100, 0x4000000000df, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x22, 0x1, 0x400002, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) ioprio_set$auto(0x3, 0x0, 0x4b34) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) clone$auto(0x0, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000001c0), 0x204002, 0x0) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="91aecb61d308005b03000000fc8921f0a0d8", @ANYRES16=0x0, @ANYRES64=r1], 0x3bc}, 0x1, 0x0, 0x0, 0x4008005}, 0x40850) 9.023120871s ago: executing program 5 (id=2320): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x180483, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (fail_nth: 1) 8.810214121s ago: executing program 7 (id=2322): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) (async) migrate_pages$auto(0x0, 0x200000000000099, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8004) (async) unshare$auto(0x40000080) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x7c5982, 0x0) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) setreuid$auto(0x0, 0x0) (async) sysfs$auto(0x2, 0x3c, 0x0) r1 = fsopen$auto(0x0, 0x1) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) bpf$auto(0x4, 0x0, 0xb46) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) r4 = socket(0x2, 0x1, 0x106) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, 0x0, 0x54) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/pressure/memory\x00', 0xa2102, 0x0) write$auto(r5, 0x0, 0xa) (async) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) (async) r7 = syz_genetlink_get_family_id$auto_nl80211(0x0, r6) sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000002a00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb3c459b40e7ca063}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="cc060000", @ANYRES16=r7, @ANYRES8=r3], 0x6cc}, 0x1, 0x0, 0x0, 0x40804}, 0x20000000) (async) mmap$auto(0x0, 0x400008, 0x6, 0x9b73, 0xffffffffffffffff, 0x6) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 6.519901085s ago: executing program 7 (id=2323): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) connect$auto(0x3, 0x0, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vidtv.0/i2c-0/dvb/dvb0.dvr0/uevent\x00', 0x183800, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x0, 0x0, 0xa, 0x2) listen$auto(0x3, 0x83) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xfffffdffffff0001, 0x15) prctl$auto(0x6, 0xd, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) writev$auto(0xffffffffffffffff, 0x0, 0x4) mbind$auto(0x2000, 0x100000024, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0xc76d, 0xff30, 0x8b, 0x5, 0x10, 0x0}) r1 = prctl$auto(0x9, 0x1, r0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000100)="14544f9e585b4fd5cf9b8598626c824c6d0491198f882b63c4b0a8e57b8c384a79a93ca2f250e03c8d6caed23f42a39bd6fde592f39c2939a20b3cda7f7b46ba2172f36edd118a831bcf94b3e70a62ec7ea9bd0d0042be816e") unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) 5.377389772s ago: executing program 5 (id=2325): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) (async) mmap$auto(0x10, 0x420009, 0x7, 0x10000eb1, 0x401, 0x400) (async, rerun: 64) r1 = socket(0xa, 0x801, 0x84) (rerun: 64) getsockopt$auto(r1, 0x84, 0x6f, 0x0, &(0x7f0000000000)=0x9000c) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 64) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000dd1036a46d891de900004ff3d931278f87f5c2990eb3072e2d5f83087f00000000000000032005215cfe48f0dcebf0c5632c46c13d5e72ae608be635b5b0ee2109a471ccfb339717059a0ed229b4bd5700000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf25020000000800010002000000"], 0x1c}}, 0x4000) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (rerun: 32) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0xe35c, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) (async) socket(0x10, 0x2, 0x0) 5.190126195s ago: executing program 3 (id=2326): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x180483, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 4.75078217s ago: executing program 3 (id=2327): r0 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x28, 0x1, 0x0) getsockopt$auto(r2, 0x28, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x2}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) write$auto(0x1, 0x0, 0x80000000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$auto(0x0, 0x407, 0x0) close_range$auto(0x2, 0x8, 0x3) setpgid$auto(r0, r0) wait4$auto(0x0, 0x0, 0x80000000, 0x0) 4.499849186s ago: executing program 4 (id=2328): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0x7, 0x7, 0x40ebe, 0xffffffffffffffff, 0x300000000000) r0 = io_uring_setup$auto(0xa, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0xe779, 0x400000000007, 0x2, 0x13, r0, 0x0) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xaa8ef36d5fdaf116, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x7, 0x2, 0x10, 0x0, 0xf2a7214) r2 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) io_uring_setup$auto(0x1000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) timerfd_create$auto(0x9, 0x2ac8) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) close_range$auto(r1, 0x8, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0x1) 3.656405613s ago: executing program 3 (id=2329): statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x6, 0x1, 0x89, 0x7181, 0x3ffde, 0x4, 0x10, 0x9, 0x6, 0x80803, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffb, 0x9, 0x50007, 0x2, 0xffffffffffffffff, 0x0, 0x80000001, 0x1, 0x202, 0x9, 0x8000, 0x0, 0x0, 0x2, 0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x3, 0x2, 0x5, 0x0, 0x2, 0x0, 0x0, 0x400000004, 0x9, 0x2000000800000000, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000009, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x2000000]}, 0x1fe, 0xd) mmap$auto(0x0, 0x1, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) io_uring_setup$auto(0x59, 0x0) memfd_secret$auto(0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x800000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r0, 0x40084149, &(0x7f0000000040)=0x8) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000100)={0x3, 0x0, [{0x3f1, 0x10, 0x1}]}) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x4000000000) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd1f, &(0x7f00000001c0)) 3.338967951s ago: executing program 4 (id=2330): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x942, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r3) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x20000, 0x0) ioctl$auto_SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r4, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_PREV_BSSID={0x7, 0x4f, "4a2b13"}, @NL80211_ATTR_PMKR0_NAME={0x35, 0x102, "fa8187b15d038e27ebbdee9403b42d163f0cf5825404a83da74b14a4b6c40b8ccb4e75f09e092da80167e32552b36e9c55"}]}, 0x68}, 0x1, 0x0, 0x0, 0x50040010}, 0x801) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) r6 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r2) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x2}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xfff}, @IOAM6_ATTR_NS_ID={0x6}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0xc0}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c68aba9bfb7025e}, 0x8001) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 3.223843532s ago: executing program 5 (id=2331): seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x1ff, &(0x7f0000000000)="36e274759cf50b2666d6c26559bfdb61a93e484aa540f47adb6a4ade103de0c71c7e4cd9e15debc5b965992f7be4ff6049af6653043ff7280704dca3c3da098a0ad1ce654fe454fd4898a6c443ce97b503a0c5dc9e8a9ed54d0591975e291c7c38d659") (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r0, 0x8, r0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x200, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000008000) (async) io_uring_setup$auto(0x20, 0x0) (async, rerun: 32) r2 = socket(0xa, 0x2, 0x0) (rerun: 32) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/sctp/rto_min\x00', 0x202, 0x0) (async) r4 = socketpair$auto(0x10000005, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(r1, r0, 0x9) (async) socket(0x1, 0x1, 0xe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x45a102, 0x0) (async, rerun: 64) close_range$auto(0xffffffffffffffff, 0x8, 0xff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto_KVM_CREATE_VM(r5, 0x4048aecb, 0x0) (async) mmap$auto(0x7, 0x4020009, 0xdf, 0xeb1, r0, 0x80000000) mbind$auto(0x0, 0x2000000002091d2, 0x4, 0x0, 0x100000000, 0x2) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket(0x2, 0x1, 0x0) getsockopt$auto(r7, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) (async) sendmmsg$auto(r3, &(0x7f0000000240)={{&(0x7f00000002c0)="93b318722ca2780387e75db36535e82905e22d2af75a4f6b48d24bd6d1f00051cb32a11629ae842e84629e871abdb45efea2a4b8dbd0569012990450d6f90efba0bf111f0f153fc8abdb508caf9aa6cf26ff6110883990c2aa1edb36247b13957cbb787a4dfeee5bf0dd6e8534c770c4ca0e6fb9d56816c2292a00e9bbdabdca498b550f9e9cd26fa50636d019373023268b85345341eaf94dc1f9178ea20236cc9488f1adbf24630a42207083121d36675db1c8021a70c6523174f4446ad5b45a0b623884a9f72074866b8986de1865f5d899aa8040dcb41d52e6e0079dc0e8be7850e06680d412a851ea051ecdfda0dd1d1f", 0x1, &(0x7f0000000080)={&(0x7f00000003c0)="b7e3a5b0c9f1eba20a70a6dee78a2a9d461014ab4778b410f8f5e9625d4687d9d462a22bbbebbcee43da67072965feb4b8a9395ccaf9bfa15f8437a22ab8d41dcc1938113ef3c6cf33fc6f928c22fbe671d84cf6de026122d85cf1a0a56d42ca1554e912943b80800d4f4b33f299a2734f9819333ee9ac0acb0d45d6aa52a00e003b33b2fe627026ec2dfc33f559cfb93df15df653679262548640ebe668c4752811237f", 0x4}, 0xc680000000000000, &(0x7f0000000180)="8a5544cf69dbc65a8112c9a9eb237a", 0x0, 0x9}, 0x9}, 0x9, 0x40) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r2) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, 0x0, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) 3.122101639s ago: executing program 3 (id=2332): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x100000000000044f, 0x759, 0x3, 0x7181, 0x2, 0x7, 0xfffffffffffffffa, 0x9, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10006, 0x400007b, 0x7, 0x0, 0xe, 0x22000, 0x208, 0x0, 0x84, 0x8000000, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7, 0x0, 0x25c3, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x0, 0x100000, 0x40000000, 0x5, 0x0, 0x98, 0x0, 0x81, 0x0, 0xffffffffffffffff, 0x0, 0x4000000000, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc, 0x744b, 0x0, 0x0, 0x2, 0xfffffffffffffffd]}, 0x1fa, 0xd) (async, rerun: 32) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000000), 0x28002, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0x401, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async, rerun: 64) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async, rerun: 64) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000200)={0x6, 0xf2, 0xb0, @raw=0x2}}) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a37, 0x0, 0x4, 0x0, 0x3, 0x5}, 0x8}, 0xb, 0xdb22, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xa, 0xfffffffffffffffe, 0xffffffffffffffff, 0x7ffb) (async, rerun: 64) r1 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000002240)='/proc/thread-self/environ\x00', 0x8400, 0x0) (async, rerun: 64) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/power/runtime_suspended_time\x00', 0x200, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/247, 0xe5) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 32) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x48, &(0x7f0000000040)='\x15\xbe\x9f)\xe3\x98\x8eB\xb5\x8b,\xfc\xa5!\xa8^./\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xfe\xdaN2\xfc\x89G\x85\xa7\x81\xe4\xe6zD\x96I\x18\xc8@\x91_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x92,\xe2=y\x9bR\xbcf\xa0c\x16~\x86_\r\x05\xe1G\x111\xe8\x8e\xcb\xed\x8f\xdf\xeeDX\xccm\xc6Mne=\x18\'\x97\x00\xc2\x01VQ\xb86\x03\xff\x88\x03\xd7\bX\xd4>\x91\x1eV-\x92\xa7\xb2\x1b(q\v\xd2\x1f\x9a\x14O\xf6\x18\x84\xe9Z\x80\xf3\x05\x12-\x8c\x8b;%Z\xdaX$K\xb6\xa6\xda\xa1B\xe0\x85\x15\xf0\xa7T\x01[\x8d\xc6\xcc\xb4\x16\xb3\x0eG\xa2\xa5\xa3\x1f\x0e\x89\x871O:c\xd9\x8d\x7f\x86\x9b\xfd@\x959\xbd\x18\xb9\xe7;\xb7\xa9P\x15\xdc\x9b\xce6\xb6\x16\x117\n\x95\xb2f\x10\x14e\xba2M\x8a^\x10\xee*\xbf\xac\x99\x9d\x12\x86\xcc\xb8\x8d\xc2\x06?\xc6\xc7\xad\x10\x97P:\xbf\x1c\xd7]\xfd\xf8\xeeb\xf2\xa0\xf1\xb1\x03\x10\xe3\xb6\xc3ASU\xa4*G;8\xfa\xd3\xaf\x99\xda4\xf7', 0x10000110) (async, rerun: 32) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) (rerun: 32) r4 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) write$auto_dfs_global_fops_debug(r4, 0x0, 0x0) msgget$auto(0x0, 0x5) (async) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r4) (async) mmap$auto(0xab5, 0x2, 0xdf, 0xeb0, 0x401, 0x8000) (async) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unlink$auto(0x0) (async) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES64=r5, @ANYRES64], 0x18}, 0x1, 0x0, 0x0, 0x5146674bf1f3a03b}, 0x400c814) 2.900070105s ago: executing program 5 (id=2333): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x174, 0x400, 0x9}]}) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0xa}}, 0x0) r2 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000040)=0x5a) pwritev2$auto(r2, &(0x7f00000000c0)={&(0x7f0000000080)="9a0be597ebb4a35e5932282f4ff73fe6ffa79da1a1f61eeb2241ae3988d8e9fc4ec0d1a214f70fdb651e55d71a71a6decc", 0x2}, 0x1ff, 0x401, 0x7f, 0x6000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) 2.500828962s ago: executing program 7 (id=2334): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r2, 0xc004ae0a, &(0x7f0000000040)={0xfffffffc}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r1, 0x84, 0x71, 0x0, &(0x7f0000000280)=0x22a) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x2004, 0x8) 2.074491832s ago: executing program 7 (id=2335): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x19, 0x4cbd5f) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) socket(0x2, 0x1, 0x106) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xc0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4010ae42, 0x38) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) write$auto(r0, 0x0, 0x80000000) io_uring_register$auto(0x2, 0x1a, 0x0, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/tcp6\x00', 0x20100, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) 2.0540726s ago: executing program 5 (id=2336): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x180483, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 1.831983929s ago: executing program 3 (id=2337): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x180483, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(r0, &(0x7f0000000200)={&(0x7f0000000240)="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", 0x4}, 0x5) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x12f201, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iostats\x00', 0x2a0202, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0xf0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1.618611602s ago: executing program 5 (id=2338): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x0f\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x100000002, 0x100000001) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto(0x3, 0x0, 0x5c8) 1.358340103s ago: executing program 4 (id=2339): mmap$auto(0x0, 0x4020009, 0xde, 0x19, 0xffffffffffffffff, 0x7ffe) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x10000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f00000000c0)={0x30db, 0x6}) (async) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/jfs/TxAnchor\x00', 0x80, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) (async) mmap$auto(0x0, 0x400008, 0xfffffffffffffff7, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0xfffffffffffffffb, 0x40009, 0xe3, 0x9b72, r1, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) (async) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async) capget$auto(0x0, 0xfffffffffffffffe) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya9\x00', 0x280, 0x0) (async) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0xd2ce0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0xfffffc96) (async) ioctl$auto(r2, 0x4bf8, r1) (async) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/driver/nvram\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x270) (async) r5 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x50002, 0x0) write$auto_drm_edid_fops_drm_debugfs(r5, &(0x7f00000016c0)="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", 0x118) (async) mmap$auto(0x1, 0x400009, 0x200, 0x20009b73, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) (async) keyctl$auto_KEYCTL_MOVE(0x1e, 0x800, 0x7, 0xfffffffffffffffd, 0x100000000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb1\x00', 0x581080, 0x0) (async) write$auto_proc_mem_operations_base(r6, &(0x7f0000001680)="a7", 0xfffffc96) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7fff) (async) mbind$auto(0x0, 0x4, 0xb, 0x0, 0x3e4, 0x2) read$auto_tracing_fops_trace(0xffffffffffffffff, &(0x7f0000001800)=""/4106, 0x100a) 549.029676ms ago: executing program 7 (id=2340): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x200, 0x0) read$auto_proc_mem_operations_base(r1, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40014}, 0x0) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x800) r4 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r4, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r5, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_setup$auto(0xe, &(0x7f0000000080)) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/cec/cec6/status\x00', 0x24002, 0x0) 226.198957ms ago: executing program 3 (id=2341): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x181, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0xa, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586ae69caa8135493b25428718974a", 0x1}, 0xfffffffffffffff7, 0x0, 0x5, 0x24b}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r6 = gettid() msgctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000200)={{0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x7, 0x6, 0x81}, &(0x7f0000000040)=0x80, &(0x7f00000001c0)=0xc, 0x6, 0x401, 0x5, 0x7, 0xffffffffffffffff, 0x3, 0x2, 0x3f, @inferred=0xffffffffffffffff, @raw=0x101}) waitid$auto(0x0, r5, &(0x7f0000000300)={@siginfo_0_0={0x1ff, 0x1, 0xb, @_kill={r6, r7}}}, 0x2, &(0x7f0000000380)={{0x5, 0x52a}, {0x6}, 0x3, 0x37e583a8, 0x4, 0xe, 0x8, 0xfffffffffffffffc, 0xa, 0x35bf, 0x5, 0x101, 0x29, 0x5, 0x80, 0x7fffffffffffffff}) 0s ago: executing program 4 (id=2342): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x9) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x7ae, 0xa8f, 0x3, 0x7fffffff, 0xffffffffffffffff, 0xffffffff) (async) mmap$auto(0x4, 0x81, 0x1, 0x19, r0, 0x6) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto(r3, &(0x7f0000000180)='/de\x8c%audi\x05\x00\x00\x00\x00\x00\x00\x00', 0x100000a3d9) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) (async) getsockopt$auto(r2, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x18, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r4, 0x4048aecb, 0x0) socket(0x28, 0x1, 0x0) (async) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) (async) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) kernel console output (not intermixed with test programs): RIP: 0033:0x7ff3fe59c799 [ 672.900307][T14052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.900326][T14052] RSP: 002b:00007ff3ff381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 672.900344][T14052] RAX: ffffffffffffffda RBX: 00007ff3fe815fa0 RCX: 00007ff3fe59c799 [ 672.900356][T14052] RDX: 0000000000040803 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 672.900368][T14052] RBP: 00007ff3ff381090 R08: 0000000000000000 R09: 0000000000000000 [ 672.900379][T14052] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 672.900390][T14052] R13: 00007ff3fe816038 R14: 00007ff3fe815fa0 R15: 00007ffe3b40c828 [ 672.900414][T14052] [ 672.916431][T14052] ERROR: Out of memory at tomoyo_realpath_from_path. [ 673.341762][ T30] audit: type=1800 audit(4294970606.658:39): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=251353 res=0 errno=0 [ 673.392051][T14064] FAULT_INJECTION: forcing a failure. [ 673.392051][T14064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.392086][T14064] CPU: 0 UID: 0 PID: 14064 Comm: syz.4.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.392112][T14064] Tainted: [L]=SOFTLOCKUP [ 673.392119][T14064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.392141][T14064] Call Trace: [ 673.392148][T14064] [ 673.392155][T14064] dump_stack_lvl+0x100/0x190 [ 673.392187][T14064] should_fail_ex.cold+0x5/0xa [ 673.392210][T14064] _copy_from_user+0x2e/0xd0 [ 673.392230][T14064] kstrtouint_from_user+0xd6/0x1d0 [ 673.392255][T14064] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 673.392280][T14064] ? __lock_acquire+0x4a5/0x2630 [ 673.392307][T14064] ? lock_acquire+0x1cf/0x380 [ 673.392336][T14064] proc_fail_nth_write+0x83/0x220 [ 673.392360][T14064] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 673.392390][T14064] vfs_write+0x2aa/0x1070 [ 673.392421][T14064] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 673.392447][T14064] ? __pfx_vfs_write+0x10/0x10 [ 673.392476][T14064] ? __fget_files+0x215/0x3d0 [ 673.392499][T14064] ? __fget_files+0x21f/0x3d0 [ 673.392522][T14064] ksys_write+0x12a/0x250 [ 673.392539][T14064] ? __pfx_ksys_write+0x10/0x10 [ 673.392563][T14064] do_syscall_64+0x106/0xf80 [ 673.392586][T14064] ? clear_bhb_loop+0x40/0x90 [ 673.392610][T14064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.392630][T14064] RIP: 0033:0x7ff3fe55cfce [ 673.392646][T14064] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 673.392664][T14064] RSP: 002b:00007ff3fc7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 673.392683][T14064] RAX: ffffffffffffffda RBX: 00007ff3fc7f66c0 RCX: 00007ff3fe55cfce [ 673.392696][T14064] RDX: 0000000000000001 RSI: 00007ff3fc7f60a0 RDI: 0000000000000002 [ 673.392707][T14064] RBP: 00007ff3fc7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 673.392718][T14064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.392729][T14064] R13: 00007ff3fe816128 R14: 00007ff3fe816090 R15: 00007ffe3b40c828 [ 673.392752][T14064] [ 673.602846][T14063] Invalid ELF header magic: != ELF [ 677.188883][T14094] netlink: 'syz.0.1820': attribute type 10 has an invalid length. [ 677.188907][T14094] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1820'. [ 677.509287][T14097] FAULT_INJECTION: forcing a failure. [ 677.509287][T14097] name failslab, interval 1, probability 0, space 0, times 0 [ 677.509378][T14097] CPU: 0 UID: 0 PID: 14097 Comm: syz.0.1821 Tainted: G L syzkaller #0 PREEMPT(full) [ 677.509405][T14097] Tainted: [L]=SOFTLOCKUP [ 677.509412][T14097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 677.509423][T14097] Call Trace: [ 677.509430][T14097] [ 677.509437][T14097] dump_stack_lvl+0x100/0x190 [ 677.509470][T14097] should_fail_ex.cold+0x5/0xa [ 677.509493][T14097] should_failslab+0xc2/0x120 [ 677.509513][T14097] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 677.509543][T14097] ? __d_alloc+0x34/0xa80 [ 677.509568][T14097] __d_alloc+0x34/0xa80 [ 677.509590][T14097] d_alloc_pseudo+0x1c/0xc0 [ 677.509616][T14097] alloc_file_pseudo+0xcf/0x230 [ 677.509642][T14097] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 677.509672][T14097] __shmem_file_setup+0x221/0x490 [ 677.509697][T14097] ? __pfx___shmem_file_setup+0x10/0x10 [ 677.509726][T14097] ? vm_area_alloc+0x1f/0x160 [ 677.509753][T14097] shmem_zero_setup+0x96/0x1b0 [ 677.509784][T14097] __mmap_region+0x2198/0x29e0 [ 677.509814][T14097] ? __pfx___mmap_region+0x10/0x10 [ 677.509846][T14097] ? set_next_entity+0x11e/0x9c0 [ 677.509876][T14097] ? __lock_acquire+0x4a5/0x2630 [ 677.509899][T14097] ? update_cfs_rq_load_avg+0x51/0x550 [ 677.509929][T14097] ? find_held_lock+0x2b/0x80 [ 677.509945][T14097] ? finish_task_switch.isra.0+0x200/0xb80 [ 677.509965][T14097] ? finish_task_switch.isra.0+0x200/0xb80 [ 677.509993][T14097] ? trace_sched_exit_tp+0x13a/0x180 [ 677.510014][T14097] ? __schedule+0x1000/0x6120 [ 677.510062][T14097] ? rcu_is_watching+0x12/0xc0 [ 677.510090][T14097] ? cap_capable+0x107/0x460 [ 677.510119][T14097] mmap_region+0x180/0x3e0 [ 677.510151][T14097] do_mmap+0xc63/0x12f0 [ 677.510184][T14097] ? __pfx_do_mmap+0x10/0x10 [ 677.510205][T14097] ? __pfx_down_write_killable+0x10/0x10 [ 677.510236][T14097] vm_mmap_pgoff+0x29e/0x470 [ 677.510262][T14097] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 677.510284][T14097] ? do_futex+0x192/0x350 [ 677.510309][T14097] ? __pfx_do_futex+0x10/0x10 [ 677.510340][T14097] ksys_mmap_pgoff+0xe1/0x650 [ 677.510362][T14097] ? __x64_sys_futex+0x34f/0x4d0 [ 677.510384][T14097] ? __x64_sys_futex+0x358/0x4d0 [ 677.510408][T14097] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 677.510428][T14097] ? xfd_validate_state+0x129/0x190 [ 677.510458][T14097] __x64_sys_mmap+0x125/0x190 [ 677.510487][T14097] do_syscall_64+0x106/0xf80 [ 677.510508][T14097] ? clear_bhb_loop+0x40/0x90 [ 677.510532][T14097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.510551][T14097] RIP: 0033:0x7f297e99c799 [ 677.510567][T14097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.510585][T14097] RSP: 002b:00007f297f7eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 677.510604][T14097] RAX: ffffffffffffffda RBX: 00007f297ec15fa0 RCX: 00007f297e99c799 [ 677.510618][T14097] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 677.510631][T14097] RBP: 00007f297ea32bd9 R08: 0000000000000401 R09: 0000000000008000 [ 677.510643][T14097] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 677.510657][T14097] R13: 00007f297ec16038 R14: 00007f297ec15fa0 R15: 00007ffc53e39728 [ 677.510684][T14097] [ 678.647804][T14109] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 678.662776][T14121] syz.4.1829(14121): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 679.032688][T14129] netlink: 234 bytes leftover after parsing attributes in process `syz.4.1830'. [ 679.818663][T14155] netlink: 'syz.3.1838': attribute type 28 has an invalid length. [ 679.846870][T14155] netlink: 'syz.3.1838': attribute type 3 has an invalid length. [ 679.881308][T14155] netlink: 306 bytes leftover after parsing attributes in process `syz.3.1838'. [ 680.603103][T14177] netlink: 'syz.3.1843': attribute type 11 has an invalid length. [ 680.655379][T14177] netlink: 'syz.3.1843': attribute type 11 has an invalid length. [ 680.752384][T14177] netlink: 'syz.3.1843': attribute type 11 has an invalid length. [ 680.752410][T14177] netlink: 'syz.3.1843': attribute type 11 has an invalid length. [ 680.814801][T14169] block nbd0: NBD_DISCONNECT [ 680.822711][T14177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 682.436962][ T30] audit: type=1800 audit(4294970615.744:40): pid=14206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=255489 res=0 errno=0 [ 683.812493][T14218] i2c i2c-0: new_device: Invalid device name [ 684.718506][T14246] netlink: 'syz.3.1860': attribute type 10 has an invalid length. [ 684.772748][T14246] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1860'. [ 685.073574][T14242] FAULT_INJECTION: forcing a failure. [ 685.073574][T14242] name failslab, interval 1, probability 0, space 0, times 0 [ 685.283697][T14242] CPU: 0 UID: 0 PID: 14242 Comm: syz.0.1859 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.283730][T14242] Tainted: [L]=SOFTLOCKUP [ 685.283737][T14242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 685.283748][T14242] Call Trace: [ 685.283755][T14242] [ 685.283764][T14242] dump_stack_lvl+0x100/0x190 [ 685.283795][T14242] should_fail_ex.cold+0x5/0xa [ 685.283818][T14242] should_failslab+0xc2/0x120 [ 685.283838][T14242] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 685.283867][T14242] ? __proc_create+0x2cb/0x8c0 [ 685.283900][T14242] __proc_create+0x2cb/0x8c0 [ 685.283930][T14242] ? __pfx___proc_create+0x10/0x10 [ 685.283962][T14242] ? _raw_write_unlock+0x28/0x50 [ 685.283983][T14242] ? proc_register+0x559/0x8a0 [ 685.284003][T14242] proc_create_reg+0x75/0x170 [ 685.284024][T14242] proc_create_data+0x86/0x110 [ 685.284042][T14242] ? __pfx_proc_create_data+0x10/0x10 [ 685.284060][T14242] ? cache_register_net+0x137/0x5e0 [ 685.284085][T14242] ? cache_register_net+0x137/0x5e0 [ 685.284114][T14242] cache_register_net+0x25a/0x5e0 [ 685.284141][T14242] gss_svc_init_net+0x14e/0x640 [ 685.284161][T14242] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 685.284186][T14242] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 685.284208][T14242] ops_init+0x1e2/0x5f0 [ 685.284236][T14242] setup_net+0x118/0x3a0 [ 685.284260][T14242] ? __pfx_setup_net+0x10/0x10 [ 685.284282][T14242] ? lockdep_init_map_type+0x5c/0x250 [ 685.284308][T14242] ? mutex_init_lockep+0x110/0x150 [ 685.284344][T14242] copy_net_ns+0x46f/0x7c0 [ 685.284372][T14242] create_new_namespaces+0x3ea/0xac0 [ 685.284397][T14242] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 685.284419][T14242] ksys_unshare+0x473/0xad0 [ 685.284444][T14242] ? __pfx_ksys_unshare+0x10/0x10 [ 685.284476][T14242] __x64_sys_unshare+0x31/0x40 [ 685.284499][T14242] do_syscall_64+0x106/0xf80 [ 685.284521][T14242] ? clear_bhb_loop+0x40/0x90 [ 685.284544][T14242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.284564][T14242] RIP: 0033:0x7f297e99c799 [ 685.284581][T14242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.284599][T14242] RSP: 002b:00007f297f7eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 685.284618][T14242] RAX: ffffffffffffffda RBX: 00007f297ec15fa0 RCX: 00007f297e99c799 [ 685.284631][T14242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 685.284642][T14242] RBP: 00007f297ea32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 685.284653][T14242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.284663][T14242] R13: 00007f297ec16038 R14: 00007f297ec15fa0 R15: 00007ffc53e39728 [ 685.284686][T14242] [ 686.275814][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.287669][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.145600][T14303] FAULT_INJECTION: forcing a failure. [ 689.145600][T14303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.182047][T14313] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 689.455388][T14303] CPU: 0 UID: 0 PID: 14303 Comm: syz.0.1872 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.455421][T14303] Tainted: [L]=SOFTLOCKUP [ 689.455428][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 689.455440][T14303] Call Trace: [ 689.455447][T14303] [ 689.455455][T14303] dump_stack_lvl+0x100/0x190 [ 689.455489][T14303] should_fail_ex.cold+0x5/0xa [ 689.455511][T14303] _copy_to_user+0x32/0xd0 [ 689.455532][T14303] simple_read_from_buffer+0xcb/0x170 [ 689.455564][T14303] proc_fail_nth_read+0x1af/0x230 [ 689.455587][T14303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 689.455612][T14303] ? rw_verify_area+0xce/0x6d0 [ 689.455639][T14303] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 689.455662][T14303] vfs_read+0x1e4/0xb30 [ 689.455695][T14303] ? __pfx_vfs_read+0x10/0x10 [ 689.455724][T14303] ? __fget_files+0x215/0x3d0 [ 689.455746][T14303] ? __fget_files+0x21f/0x3d0 [ 689.455769][T14303] ksys_read+0x12a/0x250 [ 689.455799][T14303] ? __pfx_ksys_read+0x10/0x10 [ 689.455835][T14303] do_syscall_64+0x106/0xf80 [ 689.455857][T14303] ? clear_bhb_loop+0x40/0x90 [ 689.455881][T14303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.455901][T14303] RIP: 0033:0x7f297e95cfce [ 689.455917][T14303] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 689.455935][T14303] RSP: 002b:00007f297f7c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 689.455954][T14303] RAX: ffffffffffffffda RBX: 00007f297f7ca6c0 RCX: 00007f297e95cfce [ 689.455967][T14303] RDX: 000000000000000f RSI: 00007f297f7ca0a0 RDI: 0000000000000003 [ 689.455978][T14303] RBP: 00007f297f7ca090 R08: 0000000000000000 R09: 0000000000000000 [ 689.455990][T14303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.456001][T14303] R13: 00007f297ec16128 R14: 00007f297ec16090 R15: 00007ffc53e39728 [ 689.456031][T14303] [ 693.715604][T14381] Invalid ELF header magic: != ELF [ 695.207210][T14405] bridge0: port 5(gretap0) entered blocking state [ 695.319723][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1885'. [ 695.339333][T14405] bridge0: port 5(gretap0) entered disabled state [ 695.520270][T14405] gretap0: entered allmulticast mode [ 695.682820][T14405] gretap0: entered promiscuous mode [ 695.829309][T14405] bridge0: port 5(gretap0) entered blocking state [ 695.835871][T14405] bridge0: port 5(gretap0) entered forwarding state [ 700.631634][T14472] FAULT_INJECTION: forcing a failure. [ 700.631634][T14472] name failslab, interval 1, probability 0, space 0, times 0 [ 700.771599][T14472] CPU: 0 UID: 0 PID: 14472 Comm: syz.0.1905 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.771633][T14472] Tainted: [L]=SOFTLOCKUP [ 700.771640][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.771651][T14472] Call Trace: [ 700.771658][T14472] [ 700.771666][T14472] dump_stack_lvl+0x100/0x190 [ 700.771698][T14472] should_fail_ex.cold+0x5/0xa [ 700.771719][T14472] ? tomoyo_realpath_from_path+0xb6/0x690 [ 700.771742][T14472] should_failslab+0xc2/0x120 [ 700.771761][T14472] __kmalloc_noprof+0xe0/0x850 [ 700.771794][T14472] tomoyo_realpath_from_path+0xb6/0x690 [ 700.771821][T14472] tomoyo_check_open_permission+0x2af/0x3c0 [ 700.771853][T14472] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 700.771906][T14472] ? do_raw_spin_lock+0x128/0x260 [ 700.771935][T14472] ? path_get+0x61/0x80 [ 700.771958][T14472] tomoyo_file_open+0x6b/0x90 [ 700.771983][T14472] security_file_open+0xb5/0x1e0 [ 700.772004][T14472] do_dentry_open+0x5aa/0x1660 [ 700.772024][T14472] ? security_inode_permission+0xbf/0x250 [ 700.772057][T14472] vfs_open+0x82/0x3f0 [ 700.772083][T14472] path_openat+0x208c/0x31a0 [ 700.772109][T14472] ? __pfx_path_openat+0x10/0x10 [ 700.772137][T14472] do_file_open+0x20e/0x430 [ 700.772157][T14472] ? __pfx_do_file_open+0x10/0x10 [ 700.772193][T14472] ? alloc_fd+0x476/0x790 [ 700.772220][T14472] ? do_getname+0x191/0x390 [ 700.772245][T14472] do_sys_openat2+0x10d/0x1e0 [ 700.772270][T14472] ? __pfx_do_sys_openat2+0x10/0x10 [ 700.772302][T14472] __x64_sys_openat+0x12d/0x210 [ 700.772327][T14472] ? __pfx___x64_sys_openat+0x10/0x10 [ 700.772360][T14472] do_syscall_64+0x106/0xf80 [ 700.772383][T14472] ? clear_bhb_loop+0x40/0x90 [ 700.772406][T14472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.772425][T14472] RIP: 0033:0x7f297e99c799 [ 700.772441][T14472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.772458][T14472] RSP: 002b:00007f297f7ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 700.772477][T14472] RAX: ffffffffffffffda RBX: 00007f297ec16090 RCX: 00007f297e99c799 [ 700.772489][T14472] RDX: 00000000001c1540 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 700.772501][T14472] RBP: 00007f297ea32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 700.772512][T14472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.772524][T14472] R13: 00007f297ec16128 R14: 00007f297ec16090 R15: 00007ffc53e39728 [ 700.772547][T14472] [ 700.772556][T14472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 702.926587][T14490] syz.4.1906 (14490): attempted to duplicate a private mapping with mremap. This is not supported. [ 703.597018][T14494] FAULT_INJECTION: forcing a failure. [ 703.597018][T14494] name failslab, interval 1, probability 0, space 0, times 0 [ 703.834425][T14494] CPU: 0 UID: 0 PID: 14494 Comm: syz.3.1909 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.834458][T14494] Tainted: [L]=SOFTLOCKUP [ 703.834465][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 703.834476][T14494] Call Trace: [ 703.834483][T14494] [ 703.834491][T14494] dump_stack_lvl+0x100/0x190 [ 703.834524][T14494] should_fail_ex.cold+0x5/0xa [ 703.834546][T14494] should_failslab+0xc2/0x120 [ 703.834566][T14494] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 703.834595][T14494] ? __proc_create+0x2cb/0x8c0 [ 703.834629][T14494] __proc_create+0x2cb/0x8c0 [ 703.834679][T14494] ? __pfx___proc_create+0x10/0x10 [ 703.834720][T14494] ? _raw_write_unlock+0x28/0x50 [ 703.834742][T14494] ? proc_register+0x559/0x8a0 [ 703.834762][T14494] proc_create_reg+0x75/0x170 [ 703.834782][T14494] ? __pfx_sctp_snmp_seq_show+0x10/0x10 [ 703.834804][T14494] proc_create_net_single+0x86/0x180 [ 703.834824][T14494] ? __pfx_proc_create_net_single+0x10/0x10 [ 703.834842][T14494] ? sctp_defaults_init+0x720/0xd90 [ 703.834874][T14494] sctp_proc_init+0xaa/0x270 [ 703.834896][T14494] ? __pfx_sctp_defaults_init+0x10/0x10 [ 703.834918][T14494] sctp_defaults_init+0x758/0xd90 [ 703.834941][T14494] ? __pfx_sctp_defaults_init+0x10/0x10 [ 703.834964][T14494] ops_init+0x1e2/0x5f0 [ 703.834990][T14494] setup_net+0x118/0x3a0 [ 703.835015][T14494] ? __pfx_setup_net+0x10/0x10 [ 703.835037][T14494] ? lockdep_init_map_type+0x5c/0x250 [ 703.835063][T14494] ? mutex_init_lockep+0x110/0x150 [ 703.835091][T14494] copy_net_ns+0x46f/0x7c0 [ 703.835120][T14494] create_new_namespaces+0x3ea/0xac0 [ 703.835146][T14494] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 703.835169][T14494] ksys_unshare+0x473/0xad0 [ 703.835201][T14494] ? __pfx_ksys_unshare+0x10/0x10 [ 703.835233][T14494] __x64_sys_unshare+0x31/0x40 [ 703.835256][T14494] do_syscall_64+0x106/0xf80 [ 703.835278][T14494] ? clear_bhb_loop+0x40/0x90 [ 703.835300][T14494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.835320][T14494] RIP: 0033:0x7f3aa679c799 [ 703.835337][T14494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.835355][T14494] RSP: 002b:00007f3aa76c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 703.835374][T14494] RAX: ffffffffffffffda RBX: 00007f3aa6a15fa0 RCX: 00007f3aa679c799 [ 703.835386][T14494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 703.835397][T14494] RBP: 00007f3aa6832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 703.835408][T14494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.835419][T14494] R13: 00007f3aa6a16038 R14: 00007f3aa6a15fa0 R15: 00007ffe802caa18 [ 703.835443][T14494] [ 707.363494][T11612] Bluetooth: hci4: Malformed LE Event: 0x0b [ 708.338084][T14562] synth uevent: /devices/virtual/tty/ptyw2: unknown uevent action string [ 708.491055][T14562] tty ptyw2: uevent: failed to send synthetic uevent: -22 [ 709.107246][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1919'. [ 710.406108][T14591] ptp ptp0: guarantee physical clock free running [ 710.861108][T14603] FAULT_INJECTION: forcing a failure. [ 710.861108][T14603] name failslab, interval 1, probability 0, space 0, times 0 [ 710.958690][T14603] CPU: 0 UID: 0 PID: 14603 Comm: syz.4.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.958722][T14603] Tainted: [L]=SOFTLOCKUP [ 710.958729][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.958740][T14603] Call Trace: [ 710.958747][T14603] [ 710.958755][T14603] dump_stack_lvl+0x100/0x190 [ 710.958788][T14603] should_fail_ex.cold+0x5/0xa [ 710.958810][T14603] ? alloc_pipe_info+0x1ec/0x590 [ 710.958828][T14603] should_failslab+0xc2/0x120 [ 710.958848][T14603] __kmalloc_noprof+0xe0/0x850 [ 710.958881][T14603] alloc_pipe_info+0x1ec/0x590 [ 710.958912][T14603] splice_direct_to_actor+0x78f/0xa30 [ 710.958933][T14603] ? __lock_acquire+0x4a5/0x2630 [ 710.958956][T14603] ? __pfx_direct_splice_actor+0x10/0x10 [ 710.958989][T14603] ? __pfx_aa_file_perm+0x10/0x10 [ 710.959013][T14603] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 710.959039][T14603] do_splice_direct+0x174/0x240 [ 710.959058][T14603] ? __pfx_do_splice_direct+0x10/0x10 [ 710.959078][T14603] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 710.959112][T14603] ? rw_verify_area+0xce/0x6d0 [ 710.959141][T14603] do_sendfile+0xadc/0xe20 [ 710.959175][T14603] ? __pfx_do_sendfile+0x10/0x10 [ 710.959204][T14603] ? __fget_files+0x21f/0x3d0 [ 710.959227][T14603] __x64_sys_sendfile64+0x1d8/0x220 [ 710.959247][T14603] ? ksys_write+0x1ac/0x250 [ 710.959264][T14603] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 710.959292][T14603] do_syscall_64+0x106/0xf80 [ 710.959316][T14603] ? clear_bhb_loop+0x40/0x90 [ 710.959339][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.959358][T14603] RIP: 0033:0x7ff3fe59c799 [ 710.959374][T14603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.959392][T14603] RSP: 002b:00007ff3ff381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 710.959411][T14603] RAX: ffffffffffffffda RBX: 00007ff3fe815fa0 RCX: 00007ff3fe59c799 [ 710.959424][T14603] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 710.959435][T14603] RBP: 00007ff3ff381090 R08: 0000000000000000 R09: 0000000000000000 [ 710.959446][T14603] R10: 0000000000004001 R11: 0000000000000246 R12: 0000000000000001 [ 710.959458][T14603] R13: 00007ff3fe816038 R14: 00007ff3fe815fa0 R15: 00007ffe3b40c828 [ 710.959481][T14603] [ 712.305296][T14613] ubi0: attaching mtd0 [ 712.345929][T14613] ubi0: scanning is finished [ 712.393535][T14613] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 713.335365][T14625] FAULT_INJECTION: forcing a failure. [ 713.335365][T14625] name failslab, interval 1, probability 0, space 0, times 0 [ 713.490677][T14613] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 713.539560][T14625] CPU: 0 UID: 0 PID: 14625 Comm: syz.0.1939 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.539592][T14625] Tainted: [L]=SOFTLOCKUP [ 713.539599][T14625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.539611][T14625] Call Trace: [ 713.539618][T14625] [ 713.539625][T14625] dump_stack_lvl+0x100/0x190 [ 713.539658][T14625] should_fail_ex.cold+0x5/0xa [ 713.539680][T14625] should_failslab+0xc2/0x120 [ 713.539700][T14625] __kmalloc_cache_noprof+0x7a/0x6f0 [ 713.539726][T14625] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 713.539763][T14625] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 713.539800][T14625] ? __mutex_lock+0x26a/0x1b90 [ 713.539827][T14625] ? snd_pcm_oss_sync+0x243/0x840 [ 713.539845][T14625] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 713.539879][T14625] ? __pfx___mutex_lock+0x10/0x10 [ 713.539907][T14625] ? __fsnotify_parent+0x2b4/0xca0 [ 713.539933][T14625] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 713.539965][T14625] snd_pcm_oss_sync+0x265/0x840 [ 713.539987][T14625] snd_pcm_oss_release+0x238/0x300 [ 713.540005][T14625] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 713.540023][T14625] __fput+0x3ff/0xb40 [ 713.540050][T14625] task_work_run+0x150/0x240 [ 713.540078][T14625] ? __pfx_task_work_run+0x10/0x10 [ 713.540120][T14625] exit_to_user_mode_loop+0x100/0x4a0 [ 713.540148][T14625] do_syscall_64+0x668/0xf80 [ 713.540170][T14625] ? clear_bhb_loop+0x40/0x90 [ 713.540194][T14625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.540214][T14625] RIP: 0033:0x7f297e99c799 [ 713.540230][T14625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.540250][T14625] RSP: 002b:00007f297f7eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 713.540269][T14625] RAX: 0000000000000000 RBX: 00007f297ec15fa0 RCX: 00007f297e99c799 [ 713.540281][T14625] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 713.540292][T14625] RBP: 00007f297ea32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 713.540304][T14625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.540315][T14625] R13: 00007f297ec16038 R14: 00007f297ec15fa0 R15: 00007ffc53e39728 [ 713.540338][T14625] [ 713.767792][ T30] audit: type=1800 audit(4294970646.838:41): pid=14627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1939" name="dummy_udc" dev="gadgetfs" ino=7312 res=0 errno=0 [ 713.917622][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1938'. [ 714.146036][T14631] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1940'. [ 716.195793][T14656] FAULT_INJECTION: forcing a failure. [ 716.195793][T14656] name failslab, interval 1, probability 0, space 0, times 0 [ 716.300699][T14656] CPU: 0 UID: 0 PID: 14656 Comm: syz.3.1945 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.300731][T14656] Tainted: [L]=SOFTLOCKUP [ 716.300738][T14656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.300749][T14656] Call Trace: [ 716.300756][T14656] [ 716.300763][T14656] dump_stack_lvl+0x100/0x190 [ 716.300796][T14656] should_fail_ex.cold+0x5/0xa [ 716.300818][T14656] ? copy_splice_read+0x1a3/0xb90 [ 716.300848][T14656] should_failslab+0xc2/0x120 [ 716.300867][T14656] __kmalloc_noprof+0xe0/0x850 [ 716.300900][T14656] copy_splice_read+0x1a3/0xb90 [ 716.300943][T14656] ? __pfx_copy_splice_read+0x10/0x10 [ 716.300976][T14656] ? look_up_lock_class+0x55/0x120 [ 716.301004][T14656] ? lockdep_init_map_type+0x5c/0x250 [ 716.301030][T14656] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 716.301062][T14656] ? __pfx_copy_splice_read+0x10/0x10 [ 716.301093][T14656] do_splice_read+0x285/0x370 [ 716.301127][T14656] splice_direct_to_actor+0x2a1/0xa30 [ 716.301147][T14656] ? __pfx_direct_splice_actor+0x10/0x10 [ 716.301183][T14656] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 716.301208][T14656] do_splice_direct+0x174/0x240 [ 716.301227][T14656] ? __pfx_do_splice_direct+0x10/0x10 [ 716.301247][T14656] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 716.301281][T14656] ? rw_verify_area+0xce/0x6d0 [ 716.301311][T14656] do_sendfile+0xadc/0xe20 [ 716.301344][T14656] ? __pfx_do_sendfile+0x10/0x10 [ 716.301374][T14656] ? __fget_files+0x21f/0x3d0 [ 716.301396][T14656] __x64_sys_sendfile64+0x1d8/0x220 [ 716.301417][T14656] ? ksys_write+0x1ac/0x250 [ 716.301433][T14656] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 716.301461][T14656] do_syscall_64+0x106/0xf80 [ 716.301484][T14656] ? clear_bhb_loop+0x40/0x90 [ 716.301507][T14656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.301527][T14656] RIP: 0033:0x7f3aa679c799 [ 716.301543][T14656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.301561][T14656] RSP: 002b:00007f3aa76c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 716.301580][T14656] RAX: ffffffffffffffda RBX: 00007f3aa6a15fa0 RCX: 00007f3aa679c799 [ 716.301592][T14656] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 716.301603][T14656] RBP: 00007f3aa76c7090 R08: 0000000000000000 R09: 0000000000000000 [ 716.301615][T14656] R10: 0000000000004001 R11: 0000000000000246 R12: 0000000000000001 [ 716.301626][T14656] R13: 00007f3aa6a16038 R14: 00007f3aa6a15fa0 R15: 00007ffe802caa18 [ 716.301649][T14656] [ 720.908500][T14688] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1959'. [ 721.930930][T14703] FAULT_INJECTION: forcing a failure. [ 721.930930][T14703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 722.032711][T14703] CPU: 0 UID: 0 PID: 14703 Comm: syz.3.1954 Tainted: G L syzkaller #0 PREEMPT(full) [ 722.032744][T14703] Tainted: [L]=SOFTLOCKUP [ 722.032751][T14703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 722.032762][T14703] Call Trace: [ 722.032769][T14703] [ 722.032777][T14703] dump_stack_lvl+0x100/0x190 [ 722.032810][T14703] should_fail_ex.cold+0x5/0xa [ 722.032828][T14703] ? prepare_alloc_pages+0x16d/0x5f0 [ 722.032852][T14703] should_fail_alloc_page+0xeb/0x140 [ 722.032881][T14703] prepare_alloc_pages+0x1f0/0x5f0 [ 722.032902][T14703] ? kernel_text_address+0x8d/0x100 [ 722.032932][T14703] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 722.032969][T14703] ? copy_splice_read+0x1a3/0xb90 [ 722.032999][T14703] ? stack_trace_save+0x8e/0xc0 [ 722.033018][T14703] ? __pfx_stack_trace_save+0x10/0x10 [ 722.033038][T14703] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 722.033070][T14703] ? copy_splice_read+0x1a3/0xb90 [ 722.033099][T14703] ? kasan_save_stack+0x3f/0x50 [ 722.033127][T14703] ? kasan_save_stack+0x30/0x50 [ 722.033155][T14703] ? kasan_save_track+0x14/0x30 [ 722.033183][T14703] ? __kasan_kmalloc+0xaa/0xb0 [ 722.033210][T14703] ? __kmalloc_noprof+0x301/0x850 [ 722.033237][T14703] ? copy_splice_read+0x1a3/0xb90 [ 722.033266][T14703] ? do_splice_read+0x285/0x370 [ 722.033298][T14703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.033330][T14703] alloc_pages_bulk_noprof+0x782/0x1490 [ 722.033368][T14703] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 722.033403][T14703] ? __kmalloc_noprof+0x320/0x850 [ 722.033435][T14703] copy_splice_read+0x1e1/0xb90 [ 722.033471][T14703] ? __pfx_copy_splice_read+0x10/0x10 [ 722.033504][T14703] ? look_up_lock_class+0x55/0x120 [ 722.033532][T14703] ? lockdep_init_map_type+0x5c/0x250 [ 722.033559][T14703] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 722.033590][T14703] ? __pfx_copy_splice_read+0x10/0x10 [ 722.033621][T14703] do_splice_read+0x285/0x370 [ 722.033654][T14703] splice_direct_to_actor+0x2a1/0xa30 [ 722.033675][T14703] ? __pfx_direct_splice_actor+0x10/0x10 [ 722.033710][T14703] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 722.033736][T14703] do_splice_direct+0x174/0x240 [ 722.033755][T14703] ? __pfx_do_splice_direct+0x10/0x10 [ 722.033775][T14703] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 722.033808][T14703] ? rw_verify_area+0xce/0x6d0 [ 722.033838][T14703] do_sendfile+0xadc/0xe20 [ 722.033877][T14703] ? __pfx_do_sendfile+0x10/0x10 [ 722.033907][T14703] ? __fget_files+0x21f/0x3d0 [ 722.033930][T14703] __x64_sys_sendfile64+0x1d8/0x220 [ 722.033951][T14703] ? ksys_write+0x1ac/0x250 [ 722.033968][T14703] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 722.033996][T14703] do_syscall_64+0x106/0xf80 [ 722.034018][T14703] ? clear_bhb_loop+0x40/0x90 [ 722.034042][T14703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 722.034062][T14703] RIP: 0033:0x7f3aa679c799 [ 722.034078][T14703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.034096][T14703] RSP: 002b:00007f3aa76c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 722.034114][T14703] RAX: ffffffffffffffda RBX: 00007f3aa6a15fa0 RCX: 00007f3aa679c799 [ 722.034126][T14703] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 722.034137][T14703] RBP: 00007f3aa76c7090 R08: 0000000000000000 R09: 0000000000000000 [ 722.034149][T14703] R10: 0000000000004001 R11: 0000000000000246 R12: 0000000000000001 [ 722.034160][T14703] R13: 00007f3aa6a16038 R14: 00007f3aa6a15fa0 R15: 00007ffe802caa18 [ 722.034183][T14703] [ 723.136123][ T30] audit: type=1800 audit(4294970656.423:42): pid=14714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1956" name="dummy_udc" dev="gadgetfs" ino=7312 res=0 errno=0 [ 724.966351][T14736] FAULT_INJECTION: forcing a failure. [ 724.966351][T14736] name fail_futex, interval 1, probability 0, space 0, times 0 [ 725.047549][T14736] CPU: 0 UID: 0 PID: 14736 Comm: syz.4.1962 Tainted: G L syzkaller #0 PREEMPT(full) [ 725.047583][T14736] Tainted: [L]=SOFTLOCKUP [ 725.047590][T14736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.047601][T14736] Call Trace: [ 725.047609][T14736] [ 725.047617][T14736] dump_stack_lvl+0x100/0x190 [ 725.047649][T14736] should_fail_ex.cold+0x5/0xa [ 725.047672][T14736] get_futex_key+0x1d2/0x1620 [ 725.047698][T14736] ? __pfx_get_futex_key+0x10/0x10 [ 725.047727][T14736] futex_wait_setup+0x83/0x510 [ 725.047761][T14736] __futex_wait+0x19f/0x300 [ 725.047791][T14736] ? __pfx___futex_wait+0x10/0x10 [ 725.047859][T14736] ? __snd_timer_user_ioctl.isra.0+0xe1b/0x27c0 [ 725.047883][T14736] ? __pfx_futex_wake_mark+0x10/0x10 [ 725.047915][T14736] ? futex_hash+0x2c5/0x380 [ 725.047943][T14736] futex_wait+0xed/0x380 [ 725.047972][T14736] ? __pfx_futex_wait+0x10/0x10 [ 725.048009][T14736] ? find_held_lock+0x2b/0x80 [ 725.048026][T14736] ? snd_timer_user_ioctl+0x9e/0xd0 [ 725.048048][T14736] do_futex+0x1ef/0x350 [ 725.048072][T14736] ? __pfx_do_futex+0x10/0x10 [ 725.048098][T14736] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 725.048126][T14736] __x64_sys_futex+0x34f/0x4d0 [ 725.048153][T14736] ? __pfx___x64_sys_futex+0x10/0x10 [ 725.048186][T14736] do_syscall_64+0x106/0xf80 [ 725.048207][T14736] ? clear_bhb_loop+0x40/0x90 [ 725.048234][T14736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.048254][T14736] RIP: 0033:0x7ff3fe59c799 [ 725.048270][T14736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.048288][T14736] RSP: 002b:00007ff3ff3810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 725.048307][T14736] RAX: ffffffffffffffda RBX: 00007ff3fe815fa8 RCX: 00007ff3fe59c799 [ 725.048319][T14736] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff3fe815fa8 [ 725.048330][T14736] RBP: 00007ff3fe815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 725.048341][T14736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.048352][T14736] R13: 00007ff3fe816038 R14: 00007ffe3b40c740 R15: 00007ffe3b40c828 [ 725.048376][T14736] [ 731.709963][T14826] pci 0000:00:01.3: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 735.128337][T14871] FAULT_INJECTION: forcing a failure. [ 735.128337][T14871] name fail_futex, interval 1, probability 0, space 0, times 0 [ 735.376095][T14871] CPU: 0 UID: 0 PID: 14871 Comm: syz.2.1989 Tainted: G I L syzkaller #0 PREEMPT(full) [ 735.376130][T14871] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 735.376140][T14871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 735.376151][T14871] Call Trace: [ 735.376158][T14871] [ 735.376166][T14871] dump_stack_lvl+0x100/0x190 [ 735.376197][T14871] should_fail_ex.cold+0x5/0xa [ 735.376219][T14871] get_futex_key+0x1d2/0x1620 [ 735.376244][T14871] ? __pfx_get_futex_key+0x10/0x10 [ 735.376265][T14871] ? futex_hash+0x2c5/0x380 [ 735.376292][T14871] futex_wake+0xea/0x530 [ 735.376319][T14871] ? __pfx_futex_wait+0x10/0x10 [ 735.376347][T14871] ? __pfx_futex_wake+0x10/0x10 [ 735.376378][T14871] ? find_held_lock+0x2b/0x80 [ 735.376395][T14871] ? __fget_files+0x215/0x3d0 [ 735.376414][T14871] do_futex+0x32b/0x350 [ 735.376441][T14871] ? __pfx_do_futex+0x10/0x10 [ 735.376470][T14871] __x64_sys_futex+0x34f/0x4d0 [ 735.376497][T14871] ? __pfx___x64_sys_futex+0x10/0x10 [ 735.376529][T14871] do_syscall_64+0x106/0xf80 [ 735.376551][T14871] ? clear_bhb_loop+0x40/0x90 [ 735.376573][T14871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.376592][T14871] RIP: 0033:0x7f553c39c799 [ 735.376608][T14871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.376625][T14871] RSP: 002b:00007f553d2d40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 735.376644][T14871] RAX: ffffffffffffffda RBX: 00007f553c615fa8 RCX: 00007f553c39c799 [ 735.376655][T14871] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f553c615fac [ 735.376667][T14871] RBP: 00007f553c615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 735.376678][T14871] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 735.376689][T14871] R13: 00007f553c616038 R14: 00007ffc9a345bb0 R15: 00007ffc9a345c98 [ 735.376713][T14871] [ 736.136848][T14887] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 737.621637][T14889] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 745.084363][T14993] __vm_enough_memory: pid: 14993, comm: syz.4.2016, bytes: 4398046511104 not enough memory for the allocation [ 745.830198][T15000] zswap: compressor not available [ 746.013836][T15006] FAULT_INJECTION: forcing a failure. [ 746.013836][T15006] name failslab, interval 1, probability 0, space 0, times 0 [ 746.086615][T15006] CPU: 0 UID: 0 PID: 15006 Comm: syz.4.2018 Tainted: G I L syzkaller #0 PREEMPT(full) [ 746.086655][T15006] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 746.086663][T15006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 746.086673][T15006] Call Trace: [ 746.086681][T15006] [ 746.086689][T15006] dump_stack_lvl+0x100/0x190 [ 746.086722][T15006] should_fail_ex.cold+0x5/0xa [ 746.086745][T15006] should_failslab+0xc2/0x120 [ 746.086765][T15006] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 746.086795][T15006] ? __request_module+0x2d5/0x6c0 [ 746.086825][T15006] kstrdup+0x51/0xe0 [ 746.086854][T15006] __request_module+0x2d5/0x6c0 [ 746.086880][T15006] ? __pfx___request_module+0x10/0x10 [ 746.086907][T15006] ? __mutex_unlock_slowpath+0x15c/0x790 [ 746.086957][T15006] snd_timer_open+0xd78/0x1020 [ 746.086977][T15006] ? snd_timer_instance_new+0x65/0x2e0 [ 746.087009][T15006] ? __pfx_snd_timer_open+0x10/0x10 [ 746.087029][T15006] ? kstrdup+0xb3/0xe0 [ 746.087061][T15006] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 746.087084][T15006] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 746.087111][T15006] ? rcu_is_watching+0x12/0xc0 [ 746.087144][T15006] ? snd_timer_user_ioctl+0x4a/0xd0 [ 746.087164][T15006] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 746.087193][T15006] ? __pfx___mutex_lock+0x10/0x10 [ 746.087220][T15006] ? find_held_lock+0x2b/0x80 [ 746.087249][T15006] snd_timer_user_ioctl+0x76/0xd0 [ 746.087268][T15006] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 746.087289][T15006] __x64_sys_ioctl+0x18e/0x210 [ 746.087317][T15006] do_syscall_64+0x106/0xf80 [ 746.087338][T15006] ? clear_bhb_loop+0x40/0x90 [ 746.087361][T15006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.087381][T15006] RIP: 0033:0x7ff3fe59c799 [ 746.087397][T15006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.087414][T15006] RSP: 002b:00007ff3ff381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 746.087433][T15006] RAX: ffffffffffffffda RBX: 00007ff3fe815fa0 RCX: 00007ff3fe59c799 [ 746.087445][T15006] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 746.087456][T15006] RBP: 00007ff3fe632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 746.087468][T15006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.087478][T15006] R13: 00007ff3fe816038 R14: 00007ff3fe815fa0 R15: 00007ffe3b40c828 [ 746.087503][T15006] [ 747.438447][T15009] FAULT_INJECTION: forcing a failure. [ 747.438447][T15009] name failslab, interval 1, probability 0, space 0, times 0 [ 747.494110][T15009] CPU: 0 UID: 0 PID: 15009 Comm: syz.4.2019 Tainted: G I L syzkaller #0 PREEMPT(full) [ 747.494148][T15009] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 747.494157][T15009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.494169][T15009] Call Trace: [ 747.494176][T15009] [ 747.494185][T15009] dump_stack_lvl+0x100/0x190 [ 747.494217][T15009] should_fail_ex.cold+0x5/0xa [ 747.494240][T15009] should_failslab+0xc2/0x120 [ 747.494261][T15009] __kmalloc_cache_noprof+0x7a/0x6f0 [ 747.494286][T15009] ? call_usermodehelper_setup+0xaf/0x360 [ 747.494319][T15009] ? __pfx_free_modprobe_argv+0x10/0x10 [ 747.494346][T15009] call_usermodehelper_setup+0xaf/0x360 [ 747.494380][T15009] __request_module+0x3c7/0x6c0 [ 747.494407][T15009] ? __pfx___request_module+0x10/0x10 [ 747.494435][T15009] ? __mutex_unlock_slowpath+0x15c/0x790 [ 747.494470][T15009] ? snd_timer_open+0xc64/0x1020 [ 747.494493][T15009] snd_timer_open+0xd78/0x1020 [ 747.494512][T15009] ? snd_timer_instance_new+0x65/0x2e0 [ 747.494543][T15009] ? __pfx_snd_timer_open+0x10/0x10 [ 747.494564][T15009] ? kstrdup+0xb3/0xe0 [ 747.494595][T15009] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 747.494619][T15009] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 747.494646][T15009] ? rcu_is_watching+0x12/0xc0 [ 747.494680][T15009] ? snd_timer_user_ioctl+0x4a/0xd0 [ 747.494700][T15009] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 747.494729][T15009] ? __pfx___mutex_lock+0x10/0x10 [ 747.494756][T15009] ? find_held_lock+0x2b/0x80 [ 747.494785][T15009] snd_timer_user_ioctl+0x76/0xd0 [ 747.494804][T15009] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 747.494825][T15009] __x64_sys_ioctl+0x18e/0x210 [ 747.494853][T15009] do_syscall_64+0x106/0xf80 [ 747.494884][T15009] ? clear_bhb_loop+0x40/0x90 [ 747.494909][T15009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.494937][T15009] RIP: 0033:0x7ff3fe59c799 [ 747.494955][T15009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.494974][T15009] RSP: 002b:00007ff3ff381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 747.494994][T15009] RAX: ffffffffffffffda RBX: 00007ff3fe815fa0 RCX: 00007ff3fe59c799 [ 747.495007][T15009] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 747.495018][T15009] RBP: 00007ff3fe632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 747.495030][T15009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.495042][T15009] R13: 00007ff3fe816038 R14: 00007ff3fe815fa0 R15: 00007ffe3b40c828 [ 747.495066][T15009] [ 748.128660][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.151736][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.424558][T15011] FAULT_INJECTION: forcing a failure. [ 748.424558][T15011] name fail_futex, interval 1, probability 0, space 0, times 0 [ 748.491482][T15011] CPU: 0 UID: 0 PID: 15011 Comm: syz.3.2020 Tainted: G I L syzkaller #0 PREEMPT(full) [ 748.491517][T15011] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 748.491526][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.491537][T15011] Call Trace: [ 748.491544][T15011] [ 748.491552][T15011] dump_stack_lvl+0x100/0x190 [ 748.491595][T15011] should_fail_ex.cold+0x5/0xa [ 748.491618][T15011] get_futex_key+0x107c/0x1620 [ 748.491644][T15011] ? __pfx_get_futex_key+0x10/0x10 [ 748.491665][T15011] ? lock_acquire+0x1cf/0x380 [ 748.491696][T15011] futex_wake+0xea/0x530 [ 748.491726][T15011] ? __pfx_futex_wake+0x10/0x10 [ 748.491755][T15011] ? exit_mm_release+0x19/0x30 [ 748.491783][T15011] do_futex+0x32b/0x350 [ 748.491809][T15011] ? __pfx_do_futex+0x10/0x10 [ 748.491831][T15011] ? __might_fault+0xc5/0x140 [ 748.491864][T15011] mm_release+0x24a/0x2f0 [ 748.491884][T15011] do_exit+0x704/0x2b60 [ 748.491912][T15011] ? __pfx_do_exit+0x10/0x10 [ 748.491936][T15011] ? do_raw_spin_lock+0x128/0x260 [ 748.491964][T15011] ? find_held_lock+0x2b/0x80 [ 748.491981][T15011] ? get_signal+0x7e0/0x21e0 [ 748.492002][T15011] do_group_exit+0xd5/0x2a0 [ 748.492029][T15011] get_signal+0x1ec7/0x21e0 [ 748.492056][T15011] ? __pfx_get_signal+0x10/0x10 [ 748.492077][T15011] ? do_futex+0x192/0x350 [ 748.492104][T15011] arch_do_signal_or_restart+0x91/0x770 [ 748.492129][T15011] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 748.492159][T15011] ? __pfx___x64_sys_futex+0x10/0x10 [ 748.492188][T15011] exit_to_user_mode_loop+0x86/0x4a0 [ 748.492215][T15011] do_syscall_64+0x668/0xf80 [ 748.492239][T15011] ? clear_bhb_loop+0x40/0x90 [ 748.492262][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.492283][T15011] RIP: 0033:0x7f3aa679c799 [ 748.492300][T15011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.492319][T15011] RSP: 002b:00007f3aa76c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 748.492337][T15011] RAX: fffffffffffffe00 RBX: 00007f3aa6a15fa8 RCX: 00007f3aa679c799 [ 748.492350][T15011] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3aa6a15fa8 [ 748.492362][T15011] RBP: 00007f3aa6a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 748.492373][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.492384][T15011] R13: 00007f3aa6a16038 R14: 00007ffe802ca930 R15: 00007ffe802caa18 [ 748.492407][T15011] [ 753.867238][T15043] FAULT_INJECTION: forcing a failure. [ 753.867238][T15043] name fail_futex, interval 1, probability 0, space 0, times 0 [ 753.997878][T15043] CPU: 0 UID: 0 PID: 15043 Comm: syz.3.2030 Tainted: G I L syzkaller #0 PREEMPT(full) [ 753.997915][T15043] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 753.997923][T15043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.997935][T15043] Call Trace: [ 753.997942][T15043] [ 753.997950][T15043] dump_stack_lvl+0x100/0x190 [ 753.997983][T15043] should_fail_ex.cold+0x5/0xa [ 753.998005][T15043] get_futex_key+0x1d2/0x1620 [ 753.998032][T15043] ? __pfx_get_futex_key+0x10/0x10 [ 753.998056][T15043] ? update_se+0x94/0x760 [ 753.998083][T15043] futex_wait_setup+0x83/0x510 [ 753.998117][T15043] __futex_wait+0x19f/0x300 [ 753.998147][T15043] ? __pfx___futex_wait+0x10/0x10 [ 753.998174][T15043] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 753.998195][T15043] ? lockdep_hardirqs_on+0x78/0x100 [ 753.998220][T15043] ? __pfx_futex_wake_mark+0x10/0x10 [ 753.998252][T15043] ? find_held_lock+0x2b/0x80 [ 753.998268][T15043] ? futex_wake+0x456/0x530 [ 753.998300][T15043] futex_wait+0xed/0x380 [ 753.998328][T15043] ? __pfx_futex_wait+0x10/0x10 [ 753.998380][T15043] ? find_held_lock+0x2b/0x80 [ 753.998398][T15043] ? snd_timer_user_ioctl+0x9e/0xd0 [ 753.998421][T15043] do_futex+0x1ef/0x350 [ 753.998445][T15043] ? __pfx_do_futex+0x10/0x10 [ 753.998472][T15043] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 753.998500][T15043] __x64_sys_futex+0x34f/0x4d0 [ 753.998527][T15043] ? __pfx___x64_sys_futex+0x10/0x10 [ 753.998560][T15043] do_syscall_64+0x106/0xf80 [ 753.998582][T15043] ? clear_bhb_loop+0x40/0x90 [ 753.998605][T15043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.998625][T15043] RIP: 0033:0x7f3aa679c799 [ 753.998642][T15043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.998659][T15043] RSP: 002b:00007f3aa76c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 753.998678][T15043] RAX: ffffffffffffffda RBX: 00007f3aa6a15fa8 RCX: 00007f3aa679c799 [ 753.998690][T15043] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3aa6a15fa8 [ 753.998701][T15043] RBP: 00007f3aa6a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 753.998712][T15043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.998723][T15043] R13: 00007f3aa6a16038 R14: 00007ffe802ca930 R15: 00007ffe802caa18 [ 753.998745][T15043] [ 754.908309][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 754.944889][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 754.984698][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 755.034827][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 755.044924][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 755.330967][T15048] bond0: invalid ARP target specified [ 755.373583][T15048] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2031'. [ 755.461398][T15050] FAULT_INJECTION: forcing a failure. [ 755.461398][T15050] name failslab, interval 1, probability 0, space 0, times 0 [ 755.563939][T15050] CPU: 0 UID: 0 PID: 15050 Comm: syz.4.2031 Tainted: G I L syzkaller #0 PREEMPT(full) [ 755.563974][T15050] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 755.563982][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 755.563994][T15050] Call Trace: [ 755.564001][T15050] [ 755.564009][T15050] dump_stack_lvl+0x100/0x190 [ 755.564042][T15050] should_fail_ex.cold+0x5/0xa [ 755.564064][T15050] should_failslab+0xc2/0x120 [ 755.564084][T15050] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 755.564114][T15050] ? zswap_store+0xc42/0x29d0 [ 755.564142][T15050] zswap_store+0xc42/0x29d0 [ 755.564168][T15050] ? __pfx___up_read+0x10/0x10 [ 755.564195][T15050] ? rmap_walk_anon+0x561/0x870 [ 755.564220][T15050] ? __pfx_zswap_store+0x10/0x10 [ 755.564243][T15050] ? do_raw_spin_lock+0x128/0x260 [ 755.564270][T15050] ? find_held_lock+0x2b/0x80 [ 755.564288][T15050] ? folio_free_swap+0x3d9/0xb50 [ 755.564305][T15050] ? folio_free_swap+0x3d9/0xb50 [ 755.564325][T15050] ? do_raw_spin_unlock+0x145/0x1e0 [ 755.564354][T15050] ? _raw_spin_unlock+0x28/0x50 [ 755.564374][T15050] ? folio_free_swap+0x39/0xb50 [ 755.564393][T15050] ? __pfx_try_to_unmap+0x10/0x10 [ 755.564421][T15050] swap_writeout+0x49d/0x12b0 [ 755.564451][T15050] shrink_folio_list+0x5c4a/0x6000 [ 755.564487][T15050] ? __pfx_shrink_folio_list+0x10/0x10 [ 755.564518][T15050] ? __pfx_stack_trace_save+0x10/0x10 [ 755.564537][T15050] ? stack_depot_save_flags+0x27/0x9d0 [ 755.564558][T15050] ? find_held_lock+0x2b/0x80 [ 755.564608][T15050] ? rcu_read_unlock+0x17/0x60 [ 755.564629][T15050] ? rcu_read_unlock+0x17/0x60 [ 755.564649][T15050] ? obj_cgroup_charge_account+0x2c4/0x640 [ 755.564676][T15050] reclaim_folio_list+0xdc/0x600 [ 755.564705][T15050] ? __pfx_reclaim_folio_list+0x10/0x10 [ 755.564740][T15050] ? lru_gen_update_size+0x431/0xe40 [ 755.564771][T15050] ? lru_gen_del_folio+0x382/0x5f0 [ 755.564797][T15050] reclaim_pages+0x428/0x5e0 [ 755.564827][T15050] ? __pfx_reclaim_pages+0x10/0x10 [ 755.564865][T15050] ? find_held_lock+0x2b/0x80 [ 755.564888][T15050] ? madvise_cold_or_pageout_pte_range+0xb49/0x2720 [ 755.564916][T15050] madvise_cold_or_pageout_pte_range+0x1635/0x2720 [ 755.564950][T15050] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 755.564981][T15050] ? css_rstat_updated+0x1ce/0x5a0 [ 755.565000][T15050] ? stack_trace_save+0x8e/0xc0 [ 755.565020][T15050] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 755.565045][T15050] walk_pgd_range+0xc04/0x1eb0 [ 755.565089][T15050] ? __pfx_walk_pgd_range+0x10/0x10 [ 755.565120][T15050] ? folios_put_refs+0x66d/0x840 [ 755.565152][T15050] __walk_page_range+0x163/0x820 [ 755.565193][T15050] walk_page_range_vma_unsafe+0x209/0x8f0 [ 755.565227][T15050] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 755.565263][T15050] ? find_held_lock+0x2b/0x80 [ 755.565280][T15050] ? mlock_drain_local+0x254/0x4e0 [ 755.565307][T15050] ? mlock_drain_local+0x254/0x4e0 [ 755.565338][T15050] walk_page_range_vma+0x63/0x90 [ 755.565370][T15050] madvise_pageout+0x259/0x540 [ 755.565391][T15050] ? __pfx_madvise_pageout+0x10/0x10 [ 755.565425][T15050] ? mtree_range_walk+0x6ce/0xcd0 [ 755.565447][T15050] madvise_vma_behavior+0x3e6/0x3050 [ 755.565470][T15050] ? mt_find+0x687/0x8e0 [ 755.565493][T15050] ? mt_find+0x687/0x8e0 [ 755.565516][T15050] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 755.565541][T15050] ? mt_find+0x45e/0x8e0 [ 755.565572][T15050] ? __pfx_mt_find+0x10/0x10 [ 755.565602][T15050] ? find_vma_prev+0xd8/0x150 [ 755.565628][T15050] ? find_vma+0xbf/0x140 [ 755.565646][T15050] ? __pfx_find_vma+0x10/0x10 [ 755.565669][T15050] madvise_walk_vmas+0x2fe/0xa90 [ 755.565696][T15050] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 755.565725][T15050] madvise_do_behavior+0x1ea/0x510 [ 755.565747][T15050] ? futex_private_hash_put+0x107/0x1c0 [ 755.565771][T15050] ? __pfx_madvise_do_behavior+0x10/0x10 [ 755.565794][T15050] ? down_read+0x13b/0x460 [ 755.565830][T15050] do_madvise+0x195/0x240 [ 755.565852][T15050] ? __pfx_do_madvise+0x10/0x10 [ 755.565874][T15050] ? do_futex+0x192/0x350 [ 755.565902][T15050] ? __fget_files+0x21f/0x3d0 [ 755.565935][T15050] __x64_sys_madvise+0xa9/0x110 [ 755.565957][T15050] ? lockdep_hardirqs_on+0x78/0x100 [ 755.565980][T15050] do_syscall_64+0x106/0xf80 [ 755.566002][T15050] ? clear_bhb_loop+0x40/0x90 [ 755.566026][T15050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.566046][T15050] RIP: 0033:0x7ff3fe59c799 [ 755.566062][T15050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.566081][T15050] RSP: 002b:00007ff3fc7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 755.566100][T15050] RAX: ffffffffffffffda RBX: 00007ff3fe816090 RCX: 00007ff3fe59c799 [ 755.566112][T15050] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 755.566124][T15050] RBP: 00007ff3fe632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 755.566135][T15050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.566147][T15050] R13: 00007ff3fe816128 R14: 00007ff3fe816090 R15: 00007ffe3b40c828 [ 755.566171][T15050] [ 757.335851][ T51] Bluetooth: hci0: command tx timeout [ 757.913936][T15045] chnl_net:caif_netlink_parms(): no params data found [ 758.488225][T15045] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.569022][T15045] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.576217][T15045] bridge_slave_0: entered allmulticast mode [ 758.659805][T15045] bridge_slave_0: entered promiscuous mode [ 758.708378][T15045] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.715554][T15045] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.812369][T15045] bridge_slave_1: entered allmulticast mode [ 758.819324][T11612] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 758.829695][T11612] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 758.848944][T11612] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 758.860086][T11612] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 758.878197][T11612] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 758.939783][T15045] bridge_slave_1: entered promiscuous mode [ 759.260370][T15045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.379978][T11612] Bluetooth: hci0: command tx timeout [ 759.418355][T15045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.777240][T15045] team0: Port device team_slave_0 added [ 759.794329][T15045] team0: Port device team_slave_1 added [ 760.126567][T15045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.177525][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.305653][T15045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.393855][T15045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.421533][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.566907][T15045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.967780][T11612] Bluetooth: hci5: command tx timeout [ 760.991390][T15045] hsr_slave_0: entered promiscuous mode [ 761.021428][T15045] hsr_slave_1: entered promiscuous mode [ 761.448655][T11612] Bluetooth: hci0: command tx timeout [ 761.685776][T15065] chnl_net:caif_netlink_parms(): no params data found [ 761.889737][T15083] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 762.537252][T15045] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 762.685764][T15065] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.738523][T15065] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.772057][T15065] bridge_slave_0: entered allmulticast mode [ 762.820393][T15065] bridge_slave_0: entered promiscuous mode [ 762.843450][T15045] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 762.873451][T15045] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 762.932783][T15065] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.963434][T15065] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.002803][T15065] bridge_slave_1: entered allmulticast mode [ 763.031544][T15065] bridge_slave_1: entered promiscuous mode [ 763.057810][T11612] Bluetooth: hci5: command tx timeout [ 763.140560][T15045] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 763.300686][T15065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.434263][T15065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.530851][T11612] Bluetooth: hci0: command tx timeout [ 763.961387][T15065] team0: Port device team_slave_0 added [ 764.052095][T15065] team0: Port device team_slave_1 added [ 764.290705][T15065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.339931][T15065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.473056][T15065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.584697][T15065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.624175][T15065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.767436][T15065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.067132][T15045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.129919][T11612] Bluetooth: hci5: command tx timeout [ 765.225598][T15045] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.354919][T15065] hsr_slave_0: entered promiscuous mode [ 765.391303][T15065] hsr_slave_1: entered promiscuous mode [ 765.417872][T15065] debugfs: 'hsr0' already exists in 'hsr' [ 765.451323][T15065] Cannot create hsr debugfs directory [ 765.469141][T13603] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.476292][T13603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.609786][T13603] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.616923][T13603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.682382][T15065] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 766.757980][T15065] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 766.866562][T15065] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 766.978999][T15065] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 767.115093][T15045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.213664][T11612] Bluetooth: hci5: command tx timeout [ 767.484138][T15065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.569058][T15065] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.665803][T13595] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.672966][T13595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.770364][T13595] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.777624][T13595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.054803][T15065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 768.148603][T15065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 768.376734][T15045] veth0_vlan: entered promiscuous mode [ 768.524562][T15045] veth1_vlan: entered promiscuous mode [ 768.906239][T15045] veth0_macvtap: entered promiscuous mode [ 769.160272][T15045] veth1_macvtap: entered promiscuous mode [ 769.280092][T15045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.367817][T15045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.480418][T13602] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.543467][T13602] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.639537][T13602] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.697402][T13602] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.790486][T15065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 770.095429][T13604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.173077][T13604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.418409][T13604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.466816][T13604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.465733][T15065] veth0_vlan: entered promiscuous mode [ 771.556663][T15065] veth1_vlan: entered promiscuous mode [ 772.042605][T15065] veth0_macvtap: entered promiscuous mode [ 772.321197][T15065] veth1_macvtap: entered promiscuous mode [ 772.706877][T15065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.168080][T15065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.504723][T13601] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.564348][T13601] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.573083][T13601] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.801980][T15221] FAULT_INJECTION: forcing a failure. [ 773.801980][T15221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.878171][T13601] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.898067][T15221] CPU: 0 UID: 0 PID: 15221 Comm: syz.5.2051 Tainted: G I L syzkaller #0 PREEMPT(full) [ 773.898101][T15221] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 773.898110][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.898122][T15221] Call Trace: [ 773.898129][T15221] [ 773.898137][T15221] dump_stack_lvl+0x100/0x190 [ 773.898170][T15221] should_fail_ex.cold+0x5/0xa [ 773.898193][T15221] _copy_to_user+0x32/0xd0 [ 773.898215][T15221] simple_read_from_buffer+0xcb/0x170 [ 773.898246][T15221] proc_fail_nth_read+0x1af/0x230 [ 773.898271][T15221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.898295][T15221] ? rw_verify_area+0xce/0x6d0 [ 773.898322][T15221] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 773.898344][T15221] vfs_read+0x1e4/0xb30 [ 773.898378][T15221] ? __pfx_vfs_read+0x10/0x10 [ 773.898407][T15221] ? __fget_files+0x215/0x3d0 [ 773.898436][T15221] ? __fget_files+0x21f/0x3d0 [ 773.898460][T15221] ksys_read+0x12a/0x250 [ 773.898489][T15221] ? __pfx_ksys_read+0x10/0x10 [ 773.898525][T15221] do_syscall_64+0x106/0xf80 [ 773.898549][T15221] ? clear_bhb_loop+0x40/0x90 [ 773.898572][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.898592][T15221] RIP: 0033:0x7f5dc975cfce [ 773.898608][T15221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 773.898626][T15221] RSP: 002b:00007f5dca66efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 773.898645][T15221] RAX: ffffffffffffffda RBX: 00007f5dca66f6c0 RCX: 00007f5dc975cfce [ 773.898657][T15221] RDX: 000000000000000f RSI: 00007f5dca66f0a0 RDI: 0000000000000004 [ 773.898668][T15221] RBP: 00007f5dca66f090 R08: 0000000000000000 R09: 0000000000000000 [ 773.898679][T15221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.898690][T15221] R13: 00007f5dc9a16038 R14: 00007f5dc9a15fa0 R15: 00007ffcea80f298 [ 773.898714][T15221] [ 774.678041][T15225] ima: policy update failed [ 774.736392][ T30] audit: type=1802 audit(4294970707.978:43): pid=15225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.2053" res=0 errno=0 [ 774.941346][T13602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.974234][T13602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.603625][T13602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.666766][T13602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.932702][T15238] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 779.577855][T15288] FAULT_INJECTION: forcing a failure. [ 779.577855][T15288] name failslab, interval 1, probability 0, space 0, times 0 [ 779.789894][T15288] CPU: 0 UID: 0 PID: 15288 Comm: syz.6.2063 Tainted: G I L syzkaller #0 PREEMPT(full) [ 779.789929][T15288] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 779.789938][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 779.789950][T15288] Call Trace: [ 779.789956][T15288] [ 779.789965][T15288] dump_stack_lvl+0x100/0x190 [ 779.789997][T15288] should_fail_ex.cold+0x5/0xa [ 779.790020][T15288] should_failslab+0xc2/0x120 [ 779.790041][T15288] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 779.790073][T15288] ? __request_module+0x2d5/0x6c0 [ 779.790103][T15288] kstrdup+0x51/0xe0 [ 779.790133][T15288] __request_module+0x2d5/0x6c0 [ 779.790159][T15288] ? __pfx___request_module+0x10/0x10 [ 779.790188][T15288] ? __mutex_unlock_slowpath+0x15c/0x790 [ 779.790227][T15288] snd_timer_open+0xd78/0x1020 [ 779.790246][T15288] ? snd_timer_instance_new+0x65/0x2e0 [ 779.790277][T15288] ? __pfx_snd_timer_open+0x10/0x10 [ 779.790298][T15288] ? kstrdup+0xb3/0xe0 [ 779.790329][T15288] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 779.790352][T15288] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 779.790379][T15288] ? rcu_is_watching+0x12/0xc0 [ 779.790419][T15288] ? snd_timer_user_ioctl+0x4a/0xd0 [ 779.790440][T15288] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 779.790467][T15288] ? __pfx___mutex_lock+0x10/0x10 [ 779.790495][T15288] ? find_held_lock+0x2b/0x80 [ 779.790523][T15288] snd_timer_user_ioctl+0x76/0xd0 [ 779.790542][T15288] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 779.790562][T15288] __x64_sys_ioctl+0x18e/0x210 [ 779.790590][T15288] do_syscall_64+0x106/0xf80 [ 779.790612][T15288] ? clear_bhb_loop+0x40/0x90 [ 779.790635][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.790654][T15288] RIP: 0033:0x7f4fbcb9c799 [ 779.790670][T15288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.790688][T15288] RSP: 002b:00007f4fbdb0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 779.790706][T15288] RAX: ffffffffffffffda RBX: 00007f4fbce15fa0 RCX: 00007f4fbcb9c799 [ 779.790718][T15288] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 779.790730][T15288] RBP: 00007f4fbcc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 779.790741][T15288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.790752][T15288] R13: 00007f4fbce16038 R14: 00007f4fbce15fa0 R15: 00007ffe61f06238 [ 779.790775][T15288] [ 786.946305][T15338] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 788.391542][T11612] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 789.100799][T11623] Process accounting resumed [ 791.857178][T15438] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 793.980435][T15464] FAULT_INJECTION: forcing a failure. [ 793.980435][T15464] name failslab, interval 1, probability 0, space 0, times 0 [ 794.049697][T15464] CPU: 0 UID: 0 PID: 15464 Comm: syz.3.2097 Tainted: G I L syzkaller #0 PREEMPT(full) [ 794.049734][T15464] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 794.049743][T15464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 794.049753][T15464] Call Trace: [ 794.049761][T15464] [ 794.049768][T15464] dump_stack_lvl+0x100/0x190 [ 794.049802][T15464] should_fail_ex.cold+0x5/0xa [ 794.049825][T15464] should_failslab+0xc2/0x120 [ 794.049845][T15464] __kmalloc_cache_noprof+0x7a/0x6f0 [ 794.049870][T15464] ? snd_timer_instance_new+0x47/0x2e0 [ 794.049906][T15464] snd_timer_instance_new+0x47/0x2e0 [ 794.049936][T15464] __snd_timer_user_ioctl.isra.0+0xbe6/0x27c0 [ 794.049960][T15464] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 794.049986][T15464] ? rcu_is_watching+0x12/0xc0 [ 794.050022][T15464] ? snd_timer_user_ioctl+0x4a/0xd0 [ 794.050047][T15464] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 794.050075][T15464] ? __pfx___mutex_lock+0x10/0x10 [ 794.050103][T15464] ? find_held_lock+0x2b/0x80 [ 794.050132][T15464] snd_timer_user_ioctl+0x76/0xd0 [ 794.050151][T15464] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 794.050172][T15464] __x64_sys_ioctl+0x18e/0x210 [ 794.050201][T15464] do_syscall_64+0x106/0xf80 [ 794.050223][T15464] ? clear_bhb_loop+0x40/0x90 [ 794.050246][T15464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.050266][T15464] RIP: 0033:0x7f3aa679c799 [ 794.050282][T15464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.050300][T15464] RSP: 002b:00007f3aa76c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.050319][T15464] RAX: ffffffffffffffda RBX: 00007f3aa6a15fa0 RCX: 00007f3aa679c799 [ 794.050332][T15464] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 794.050343][T15464] RBP: 00007f3aa6832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 794.050354][T15464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.050365][T15464] R13: 00007f3aa6a16038 R14: 00007f3aa6a15fa0 R15: 00007ffe802caa18 [ 794.050389][T15464] [ 796.593600][T15492] nvme_fcloop: unknown parameter or missing value '7="­ÿù;¤°&Lë=j³"Yq'R"' [ 797.183382][T15506] FAULT_INJECTION: forcing a failure. [ 797.183382][T15506] name failslab, interval 1, probability 0, space 0, times 0 [ 797.278056][T15506] CPU: 0 UID: 0 PID: 15506 Comm: syz.3.2107 Tainted: G I L syzkaller #0 PREEMPT(full) [ 797.278090][T15506] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 797.278099][T15506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 797.278110][T15506] Call Trace: [ 797.278117][T15506] [ 797.278125][T15506] dump_stack_lvl+0x100/0x190 [ 797.278157][T15506] should_fail_ex.cold+0x5/0xa [ 797.278179][T15506] should_failslab+0xc2/0x120 [ 797.278199][T15506] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 797.278231][T15506] ? __request_module+0x2d5/0x6c0 [ 797.278261][T15506] kstrdup+0x51/0xe0 [ 797.278290][T15506] __request_module+0x2d5/0x6c0 [ 797.278326][T15506] ? __pfx___request_module+0x10/0x10 [ 797.278353][T15506] ? __mutex_unlock_slowpath+0x15c/0x790 [ 797.278393][T15506] snd_timer_open+0xd78/0x1020 [ 797.278412][T15506] ? snd_timer_instance_new+0x65/0x2e0 [ 797.278443][T15506] ? __pfx_snd_timer_open+0x10/0x10 [ 797.278463][T15506] ? kstrdup+0xb3/0xe0 [ 797.278494][T15506] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 797.278517][T15506] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 797.278543][T15506] ? rcu_is_watching+0x12/0xc0 [ 797.278576][T15506] ? snd_timer_user_ioctl+0x4a/0xd0 [ 797.278596][T15506] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 797.278624][T15506] ? __pfx___mutex_lock+0x10/0x10 [ 797.278652][T15506] ? find_held_lock+0x2b/0x80 [ 797.278681][T15506] snd_timer_user_ioctl+0x76/0xd0 [ 797.278700][T15506] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 797.278720][T15506] __x64_sys_ioctl+0x18e/0x210 [ 797.278749][T15506] do_syscall_64+0x106/0xf80 [ 797.278770][T15506] ? clear_bhb_loop+0x40/0x90 [ 797.278793][T15506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.278812][T15506] RIP: 0033:0x7f3aa679c799 [ 797.278828][T15506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.278846][T15506] RSP: 002b:00007f3aa76c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.278865][T15506] RAX: ffffffffffffffda RBX: 00007f3aa6a15fa0 RCX: 00007f3aa679c799 [ 797.278877][T15506] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 797.278888][T15506] RBP: 00007f3aa6832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 797.278899][T15506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.278910][T15506] R13: 00007f3aa6a16038 R14: 00007f3aa6a15fa0 R15: 00007ffe802caa18 [ 797.278934][T15506] [ 797.530180][T15511] random: crng reseeded on system resumption [ 797.778182][T15510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2108'. [ 797.822634][T15510] macsec0: entered promiscuous mode [ 797.845896][T15510] macsec0: entered allmulticast mode [ 797.851222][T15510] veth1_macvtap: entered allmulticast mode [ 797.945779][T15513] bridge0: port 3(veth1_macvtap) entered blocking state [ 797.953980][T15513] bridge0: port 3(veth1_macvtap) entered disabled state [ 800.284515][T15558] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 800.696568][T15575] Invalid ELF header magic: != ELF [ 802.272636][T15592] debugfs: 'ptm0' already exists in 'caif_serial' [ 802.575882][T15604] random: crng reseeded on system resumption [ 803.901996][T15626] FAULT_INJECTION: forcing a failure. [ 803.901996][T15626] name failslab, interval 1, probability 0, space 0, times 0 [ 803.995853][T15626] CPU: 0 UID: 0 PID: 15626 Comm: syz.4.2129 Tainted: G I L syzkaller #0 PREEMPT(full) [ 803.995888][T15626] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 803.995897][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 803.995908][T15626] Call Trace: [ 803.995915][T15626] [ 803.995923][T15626] dump_stack_lvl+0x100/0x190 [ 803.995956][T15626] should_fail_ex.cold+0x5/0xa [ 803.995982][T15626] should_failslab+0xc2/0x120 [ 803.996004][T15626] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 803.996033][T15626] ? taskstats_exit+0x650/0xbd0 [ 803.996067][T15626] taskstats_exit+0x650/0xbd0 [ 803.996097][T15626] ? __pfx_acct_update_integrals+0x10/0x10 [ 803.996131][T15626] ? __pfx_taskstats_exit+0x10/0x10 [ 803.996162][T15626] ? rcu_read_lock_any_held+0x6a/0xa0 [ 803.996180][T15626] ? exit_signals+0x395/0xaf0 [ 803.996211][T15626] do_exit+0x659/0x2b60 [ 803.996239][T15626] ? __pfx_do_exit+0x10/0x10 [ 803.996263][T15626] ? do_raw_spin_lock+0x128/0x260 [ 803.996291][T15626] ? find_held_lock+0x2b/0x80 [ 803.996308][T15626] ? get_signal+0x7e0/0x21e0 [ 803.996329][T15626] do_group_exit+0xd5/0x2a0 [ 803.996358][T15626] get_signal+0x1ec7/0x21e0 [ 803.996389][T15626] ? __pfx_get_signal+0x10/0x10 [ 803.996409][T15626] ? do_futex+0x192/0x350 [ 803.996436][T15626] arch_do_signal_or_restart+0x91/0x770 [ 803.996462][T15626] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 803.996491][T15626] ? __pfx___x64_sys_futex+0x10/0x10 [ 803.996524][T15626] exit_to_user_mode_loop+0x86/0x4a0 [ 803.996554][T15626] do_syscall_64+0x668/0xf80 [ 803.996576][T15626] ? clear_bhb_loop+0x40/0x90 [ 803.996599][T15626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.996619][T15626] RIP: 0033:0x7ff3fe59c799 [ 803.996635][T15626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.996653][T15626] RSP: 002b:00007ff3ff3810e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 803.996672][T15626] RAX: fffffffffffffe00 RBX: 00007ff3fe815fa8 RCX: 00007ff3fe59c799 [ 803.996685][T15626] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff3fe815fa8 [ 803.996696][T15626] RBP: 00007ff3fe815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 803.996708][T15626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 803.996719][T15626] R13: 00007ff3fe816038 R14: 00007ffe3b40c740 R15: 00007ffe3b40c828 [ 803.996742][T15626] [ 806.012339][T15655] ubi0: attaching mtd0 [ 806.050977][T15655] ubi0: scanning is finished [ 806.135762][T15655] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 806.759470][T15655] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 806.990578][T11612] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 808.120966][T15691] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 809.157518][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.164406][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.051995][T15714] MTRR 0 not used [ 811.821025][T15736] FAULT_INJECTION: forcing a failure. [ 811.821025][T15736] name failslab, interval 1, probability 0, space 0, times 0 [ 811.926749][T15736] CPU: 0 UID: 0 PID: 15736 Comm: syz.5.2149 Tainted: G I L syzkaller #0 PREEMPT(full) [ 811.926783][T15736] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 811.926792][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.926804][T15736] Call Trace: [ 811.926811][T15736] [ 811.926819][T15736] dump_stack_lvl+0x100/0x190 [ 811.926852][T15736] should_fail_ex.cold+0x5/0xa [ 811.926874][T15736] should_failslab+0xc2/0x120 [ 811.926894][T15736] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 811.926922][T15736] ? posix_lock_inode+0x5b2/0x2440 [ 811.926941][T15736] ? lockdep_init_map_type+0x5c/0x250 [ 811.926969][T15736] posix_lock_inode+0x5b2/0x2440 [ 811.926997][T15736] ? __pfx_posix_lock_inode+0x10/0x10 [ 811.927022][T15736] vfs_lock_file+0xfb/0x150 [ 811.927042][T15736] fcntl_setlk+0x782/0xe40 [ 811.927065][T15736] ? __pfx_fcntl_setlk+0x10/0x10 [ 811.927094][T15736] ? rep_movs_alternative+0x30/0x90 [ 811.927137][T15736] do_fcntl+0xf39/0x1670 [ 811.927163][T15736] ? __pfx_do_fcntl+0x10/0x10 [ 811.927185][T15736] ? __fget_files+0x215/0x3d0 [ 811.927210][T15736] ? tomoyo_file_fcntl+0x6c/0xc0 [ 811.927238][T15736] __x64_sys_fcntl+0x163/0x200 [ 811.927266][T15736] do_syscall_64+0x106/0xf80 [ 811.927288][T15736] ? clear_bhb_loop+0x40/0x90 [ 811.927312][T15736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.927332][T15736] RIP: 0033:0x7f5dc979c799 [ 811.927348][T15736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.927367][T15736] RSP: 002b:00007f5dca66f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 811.927386][T15736] RAX: ffffffffffffffda RBX: 00007f5dc9a15fa0 RCX: 00007f5dc979c799 [ 811.927398][T15736] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000006 [ 811.927410][T15736] RBP: 00007f5dc9832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 811.927421][T15736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.927432][T15736] R13: 00007f5dc9a16038 R14: 00007f5dc9a15fa0 R15: 00007ffcea80f298 [ 811.927455][T15736] [ 812.973784][T15734] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 815.317177][T15784] MTRR 0 not used [ 815.535191][T15792] futex_wake_op: syz.5.2161 tries to shift op by -2048; fix this program [ 815.543754][T15792] futex_wake_op: syz.5.2161 tries to shift op by -2048; fix this program [ 815.666164][T15796] 0x000000000001-0x000000020000 : "" [ 815.891956][T15796] ftl_cs: FTL header corrupt! [ 816.705421][T15811] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2165'. [ 817.135296][T15819] FAULT_INJECTION: forcing a failure. [ 817.135296][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 817.358080][T15819] CPU: 0 UID: 0 PID: 15819 Comm: syz.6.2167 Tainted: G I L syzkaller #0 PREEMPT(full) [ 817.358115][T15819] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 817.358124][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 817.358135][T15819] Call Trace: [ 817.358142][T15819] [ 817.358150][T15819] dump_stack_lvl+0x100/0x190 [ 817.358193][T15819] should_fail_ex.cold+0x5/0xa [ 817.358215][T15819] should_failslab+0xc2/0x120 [ 817.358235][T15819] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 817.358264][T15819] ? sock_alloc_inode+0x25/0x1c0 [ 817.358293][T15819] ? __pfx_sock_alloc_inode+0x10/0x10 [ 817.358320][T15819] sock_alloc_inode+0x25/0x1c0 [ 817.358346][T15819] alloc_inode+0x68/0x250 [ 817.358371][T15819] sock_alloc+0x44/0x280 [ 817.358394][T15819] ? security_socket_create+0x7f/0x250 [ 817.358423][T15819] __sock_create+0xc2/0x860 [ 817.358455][T15819] __sys_socket+0x14d/0x260 [ 817.358472][T15819] ? __pfx___sys_socket+0x10/0x10 [ 817.358495][T15819] __x64_sys_socket+0x72/0xb0 [ 817.358512][T15819] ? lockdep_hardirqs_on+0x78/0x100 [ 817.358534][T15819] do_syscall_64+0x106/0xf80 [ 817.358556][T15819] ? clear_bhb_loop+0x40/0x90 [ 817.358579][T15819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.358598][T15819] RIP: 0033:0x7f4fbcb9c799 [ 817.358613][T15819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.358630][T15819] RSP: 002b:00007f4fbdaec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 817.358649][T15819] RAX: ffffffffffffffda RBX: 00007f4fbce16090 RCX: 00007f4fbcb9c799 [ 817.358662][T15819] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 817.358673][T15819] RBP: 00007f4fbcc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 817.358685][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.358697][T15819] R13: 00007f4fbce16128 R14: 00007f4fbce16090 R15: 00007ffe61f06238 [ 817.358720][T15819] [ 817.358730][T15819] socket: no more sockets [ 819.647373][T15858] FAULT_INJECTION: forcing a failure. [ 819.647373][T15858] name failslab, interval 1, probability 0, space 0, times 0 [ 819.736740][T15858] CPU: 0 UID: 0 PID: 15858 Comm: syz.4.2177 Tainted: G I L syzkaller #0 PREEMPT(full) [ 819.736775][T15858] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 819.736784][T15858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 819.736796][T15858] Call Trace: [ 819.736804][T15858] [ 819.736812][T15858] dump_stack_lvl+0x100/0x190 [ 819.736844][T15858] should_fail_ex.cold+0x5/0xa [ 819.736866][T15858] should_failslab+0xc2/0x120 [ 819.736886][T15858] __kmalloc_cache_noprof+0x7a/0x6f0 [ 819.736911][T15858] ? call_usermodehelper_setup+0xaf/0x360 [ 819.736961][T15858] ? __pfx_free_modprobe_argv+0x10/0x10 [ 819.736989][T15858] call_usermodehelper_setup+0xaf/0x360 [ 819.737022][T15858] __request_module+0x3c7/0x6c0 [ 819.737049][T15858] ? __pfx___request_module+0x10/0x10 [ 819.737077][T15858] ? __mutex_unlock_slowpath+0x15c/0x790 [ 819.737124][T15858] snd_timer_open+0xd78/0x1020 [ 819.737143][T15858] ? snd_timer_instance_new+0x65/0x2e0 [ 819.737174][T15858] ? __pfx_snd_timer_open+0x10/0x10 [ 819.737194][T15858] ? kstrdup+0xb3/0xe0 [ 819.737226][T15858] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 819.737250][T15858] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 819.737277][T15858] ? rcu_is_watching+0x12/0xc0 [ 819.737311][T15858] ? snd_timer_user_ioctl+0x4a/0xd0 [ 819.737331][T15858] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 819.737358][T15858] ? __pfx___mutex_lock+0x10/0x10 [ 819.737386][T15858] ? find_held_lock+0x2b/0x80 [ 819.737413][T15858] snd_timer_user_ioctl+0x76/0xd0 [ 819.737432][T15858] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 819.737453][T15858] __x64_sys_ioctl+0x18e/0x210 [ 819.737481][T15858] do_syscall_64+0x106/0xf80 [ 819.737502][T15858] ? clear_bhb_loop+0x40/0x90 [ 819.737524][T15858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.737544][T15858] RIP: 0033:0x7ff3fe59c799 [ 819.737560][T15858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.737578][T15858] RSP: 002b:00007ff3ff381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 819.737596][T15858] RAX: ffffffffffffffda RBX: 00007ff3fe815fa0 RCX: 00007ff3fe59c799 [ 819.737608][T15858] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 819.737619][T15858] RBP: 00007ff3fe632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 819.737630][T15858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.737641][T15858] R13: 00007ff3fe816038 R14: 00007ff3fe815fa0 R15: 00007ffe3b40c828 [ 819.737664][T15858] [ 820.605730][T15867] ovs_: entered promiscuous mode [ 821.749661][T15884] sctp: [Deprecated]: syz.5.2185 (pid 15884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 821.749661][T15884] Use struct sctp_sack_info instead [ 822.012388][T15884] sctp: [Deprecated]: syz.5.2185 (pid 15884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.012388][T15884] Use struct sctp_sack_info instead [ 822.228414][T15884] sctp: [Deprecated]: syz.5.2185 (pid 15884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.228414][T15884] Use struct sctp_sack_info instead [ 822.338589][T15884] sctp: [Deprecated]: syz.5.2185 (pid 15884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.338589][T15884] Use struct sctp_sack_info instead [ 822.444868][T15884] sctp: [Deprecated]: syz.5.2185 (pid 15884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.444868][T15884] Use struct sctp_sack_info instead [ 823.640491][T15915] FAULT_INJECTION: forcing a failure. [ 823.640491][T15915] name failslab, interval 1, probability 0, space 0, times 0 [ 823.731787][T15915] CPU: 0 UID: 0 PID: 15915 Comm: syz.6.2192 Tainted: G I L syzkaller #0 PREEMPT(full) [ 823.731822][T15915] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 823.731831][T15915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 823.731842][T15915] Call Trace: [ 823.731849][T15915] [ 823.731857][T15915] dump_stack_lvl+0x100/0x190 [ 823.731890][T15915] should_fail_ex.cold+0x5/0xa [ 823.731913][T15915] should_failslab+0xc2/0x120 [ 823.731934][T15915] __kmalloc_cache_noprof+0x7a/0x6f0 [ 823.731959][T15915] ? __request_module+0x2b7/0x6c0 [ 823.731984][T15915] ? lockdep_hardirqs_on+0x78/0x100 [ 823.732010][T15915] __request_module+0x2b7/0x6c0 [ 823.732037][T15915] ? __pfx___request_module+0x10/0x10 [ 823.732065][T15915] ? __mutex_unlock_slowpath+0x15c/0x790 [ 823.732113][T15915] snd_timer_open+0xd78/0x1020 [ 823.732132][T15915] ? snd_timer_instance_new+0x65/0x2e0 [ 823.732164][T15915] ? __pfx_snd_timer_open+0x10/0x10 [ 823.732184][T15915] ? kstrdup+0xb3/0xe0 [ 823.732215][T15915] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 823.732239][T15915] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 823.732267][T15915] ? rcu_is_watching+0x12/0xc0 [ 823.732300][T15915] ? snd_timer_user_ioctl+0x4a/0xd0 [ 823.732320][T15915] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 823.732348][T15915] ? __pfx___mutex_lock+0x10/0x10 [ 823.732375][T15915] ? find_held_lock+0x2b/0x80 [ 823.732403][T15915] snd_timer_user_ioctl+0x76/0xd0 [ 823.732422][T15915] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 823.732444][T15915] __x64_sys_ioctl+0x18e/0x210 [ 823.732472][T15915] do_syscall_64+0x106/0xf80 [ 823.732494][T15915] ? clear_bhb_loop+0x40/0x90 [ 823.732517][T15915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.732537][T15915] RIP: 0033:0x7f4fbcb9c799 [ 823.732553][T15915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.732571][T15915] RSP: 002b:00007f4fbdb0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 823.732590][T15915] RAX: ffffffffffffffda RBX: 00007f4fbce15fa0 RCX: 00007f4fbcb9c799 [ 823.732602][T15915] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 823.732614][T15915] RBP: 00007f4fbcc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 823.732625][T15915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.732636][T15915] R13: 00007f4fbce16038 R14: 00007f4fbce15fa0 R15: 00007ffe61f06238 [ 823.732659][T15915] [ 824.300583][T11612] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 825.020571][T15929] Invalid ELF header magic: != ELF [ 825.444963][T15929] Invalid ELF header magic: != ELF [ 826.076447][T15945] vivid-007: ================= START STATUS ================= [ 826.140262][T15945] vivid-007: Generate PTS: true [ 826.145352][T15945] vivid-007: Generate SCR: true [ 826.233408][T15945] tpg source WxH: 320x240 (Y'CbCr) [ 826.281510][T15945] tpg field: 1 [ 826.309409][T15945] tpg crop: (0,0)/320x240 [ 826.404036][T15945] tpg compose: (0,0)/320x240 [ 826.408661][T15945] tpg colorspace: 8 [ 826.549906][T15945] tpg transfer function: 0/0 [ 826.554530][T15945] tpg Y'CbCr encoding: 0/0 [ 826.558936][T15945] tpg quantization: 0/0 [ 826.645723][T15945] tpg RGB range: 0/2 [ 826.728916][T15945] vivid-007: ================== END STATUS ================== [ 827.796402][T11612] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 828.425634][T15986] FAULT_INJECTION: forcing a failure. [ 828.425634][T15986] name failslab, interval 1, probability 0, space 0, times 0 [ 828.640454][T15986] CPU: 0 UID: 0 PID: 15986 Comm: syz.3.2203 Tainted: G I L syzkaller #0 PREEMPT(full) [ 828.640489][T15986] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 828.640498][T15986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 828.640510][T15986] Call Trace: [ 828.640517][T15986] [ 828.640526][T15986] dump_stack_lvl+0x100/0x190 [ 828.640559][T15986] should_fail_ex.cold+0x5/0xa [ 828.640581][T15986] should_failslab+0xc2/0x120 [ 828.640601][T15986] __kmalloc_cache_noprof+0x7a/0x6f0 [ 828.640626][T15986] ? call_usermodehelper_setup+0xaf/0x360 [ 828.640658][T15986] ? __pfx_free_modprobe_argv+0x10/0x10 [ 828.640684][T15986] call_usermodehelper_setup+0xaf/0x360 [ 828.640717][T15986] __request_module+0x3c7/0x6c0 [ 828.640744][T15986] ? __pfx___request_module+0x10/0x10 [ 828.640771][T15986] ? __mutex_unlock_slowpath+0x15c/0x790 [ 828.640811][T15986] snd_timer_open+0xd78/0x1020 [ 828.640830][T15986] ? snd_timer_instance_new+0x65/0x2e0 [ 828.640860][T15986] ? __pfx_snd_timer_open+0x10/0x10 [ 828.640880][T15986] ? kstrdup+0xb3/0xe0 [ 828.640912][T15986] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 828.640935][T15986] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 828.640962][T15986] ? rcu_is_watching+0x12/0xc0 [ 828.640995][T15986] ? snd_timer_user_ioctl+0x4a/0xd0 [ 828.641015][T15986] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 828.641043][T15986] ? __pfx___mutex_lock+0x10/0x10 [ 828.641070][T15986] ? find_held_lock+0x2b/0x80 [ 828.641098][T15986] snd_timer_user_ioctl+0x76/0xd0 [ 828.641117][T15986] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 828.641138][T15986] __x64_sys_ioctl+0x18e/0x210 [ 828.641166][T15986] do_syscall_64+0x106/0xf80 [ 828.641188][T15986] ? clear_bhb_loop+0x40/0x90 [ 828.641212][T15986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.641232][T15986] RIP: 0033:0x7f3aa679c799 [ 828.641248][T15986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.641275][T15986] RSP: 002b:00007f3aa76c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 828.641294][T15986] RAX: ffffffffffffffda RBX: 00007f3aa6a15fa0 RCX: 00007f3aa679c799 [ 828.641307][T15986] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 828.641318][T15986] RBP: 00007f3aa6832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 828.641329][T15986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 828.641340][T15986] R13: 00007f3aa6a16038 R14: 00007f3aa6a15fa0 R15: 00007ffe802caa18 [ 828.641363][T15986] [ 828.911995][T15988] random: crng reseeded on system resumption [ 830.618648][T16023] netlink: 350 bytes leftover after parsing attributes in process `syz.4.2206'. [ 833.341020][T16077] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2220'. [ 833.409920][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 833.433416][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 833.442863][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 833.453379][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 833.461153][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 835.363077][T16078] chnl_net:caif_netlink_parms(): no params data found [ 835.564298][ T51] Bluetooth: hci6: command tx timeout [ 835.627342][T13602] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.877864][T13602] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.010992][T13602] netdevsim netdevsim3 netdevsim1 (unregistering): left allmulticast mode [ 836.060594][T13602] netdevsim netdevsim3 netdevsim1 (unregistering): left promiscuous mode [ 836.122636][T13602] bridge0: port 4(netdevsim1) entered disabled state [ 836.170590][T13602] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.486295][T13602] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.720475][T16078] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.775051][T16078] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.815880][T16113] netlink: 146 bytes leftover after parsing attributes in process `syz.5.2225'. [ 836.826847][T16078] bridge_slave_0: entered allmulticast mode [ 836.878914][T16078] bridge_slave_0: entered promiscuous mode [ 836.945738][T16078] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.997682][T16078] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.054570][T16078] bridge_slave_1: entered allmulticast mode [ 837.119407][T16078] bridge_slave_1: entered promiscuous mode [ 837.288925][T16078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.363008][T16078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.645242][ T51] Bluetooth: hci6: command tx timeout [ 837.683740][T16078] team0: Port device team_slave_0 added [ 837.780021][T16078] team0: Port device team_slave_1 added [ 837.867009][T16127] FAULT_INJECTION: forcing a failure. [ 837.867009][T16127] name failslab, interval 1, probability 0, space 0, times 0 [ 838.077159][T16127] CPU: 0 UID: 0 PID: 16127 Comm: syz.6.2228 Tainted: G I L syzkaller #0 PREEMPT(full) [ 838.077194][T16127] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 838.077203][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.077214][T16127] Call Trace: [ 838.077221][T16127] [ 838.077229][T16127] dump_stack_lvl+0x100/0x190 [ 838.077262][T16127] should_fail_ex.cold+0x5/0xa [ 838.077284][T16127] should_failslab+0xc2/0x120 [ 838.077304][T16127] __kmalloc_cache_noprof+0x7a/0x6f0 [ 838.077329][T16127] ? do_signalfd4+0x14e/0x480 [ 838.077355][T16127] do_signalfd4+0x14e/0x480 [ 838.077379][T16127] __x64_sys_signalfd+0x120/0x1a0 [ 838.077402][T16127] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 838.077431][T16127] do_syscall_64+0x106/0xf80 [ 838.077453][T16127] ? clear_bhb_loop+0x40/0x90 [ 838.077476][T16127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.077495][T16127] RIP: 0033:0x7f4fbcb9c799 [ 838.077510][T16127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.077528][T16127] RSP: 002b:00007f4fbdacb028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 838.077547][T16127] RAX: ffffffffffffffda RBX: 00007f4fbce16180 RCX: 00007f4fbcb9c799 [ 838.077559][T16127] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 838.077570][T16127] RBP: 00007f4fbcc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 838.077581][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.077592][T16127] R13: 00007f4fbce16218 R14: 00007f4fbce16180 R15: 00007ffe61f06238 [ 838.077615][T16127] [ 838.869832][T16143] FAULT_INJECTION: forcing a failure. [ 838.869832][T16143] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 838.992566][T16143] CPU: 0 UID: 0 PID: 16143 Comm: syz.6.2232 Tainted: G I L syzkaller #0 PREEMPT(full) [ 838.992601][T16143] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 838.992610][T16143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.992622][T16143] Call Trace: [ 838.992629][T16143] [ 838.992637][T16143] dump_stack_lvl+0x100/0x190 [ 838.992670][T16143] should_fail_ex.cold+0x5/0xa [ 838.992689][T16143] ? prepare_alloc_pages+0x16d/0x5f0 [ 838.992713][T16143] should_fail_alloc_page+0xeb/0x140 [ 838.992735][T16143] prepare_alloc_pages+0x1f0/0x5f0 [ 838.992761][T16143] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 838.992796][T16143] ? kasan_save_stack+0x3f/0x50 [ 838.992823][T16143] ? kasan_save_stack+0x30/0x50 [ 838.992851][T16143] ? kasan_save_track+0x14/0x30 [ 838.992878][T16143] ? __kasan_slab_alloc+0x89/0x90 [ 838.992894][T16143] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 838.992921][T16143] ? ptlock_alloc+0x1f/0x70 [ 838.992946][T16143] ? pte_alloc_one+0x84/0x3e0 [ 838.992965][T16143] ? __pte_alloc+0x6d/0x3f0 [ 838.992995][T16143] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 838.993029][T16143] ? __lock_acquire+0x4a5/0x2630 [ 838.993058][T16143] ? __lock_acquire+0x4a5/0x2630 [ 838.993084][T16143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 838.993118][T16143] ? policy_nodemask+0xed/0x4f0 [ 838.993139][T16143] alloc_pages_mpol+0x1fb/0x550 [ 838.993160][T16143] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 838.993186][T16143] alloc_pages_noprof+0x131/0x390 [ 838.993207][T16143] pte_alloc_one+0x1e/0x3e0 [ 838.993228][T16143] __pte_alloc+0x6d/0x3f0 [ 838.993246][T16143] ? __pfx___pte_alloc+0x10/0x10 [ 838.993265][T16143] ? __pfx___might_resched+0x10/0x10 [ 838.993290][T16143] ? copy_page_range+0x1e9d/0x6570 [ 838.993323][T16143] copy_page_range+0x3e51/0x6570 [ 838.993373][T16143] ? __pfx_copy_page_range+0x10/0x10 [ 838.993407][T16143] ? __pfx___might_resched+0x10/0x10 [ 838.993442][T16143] ? up_write+0x290/0x4f0 [ 838.993471][T16143] dup_mmap+0xd25/0x2180 [ 838.993502][T16143] ? __pfx_dup_mmap+0x10/0x10 [ 838.993522][T16143] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 838.993549][T16143] ? __lock_acquire+0x4a5/0x2630 [ 838.993573][T16143] ? find_held_lock+0x2b/0x80 [ 838.993589][T16143] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 838.993639][T16143] copy_process+0x73d7/0x7a10 [ 838.993673][T16143] ? __pfx_copy_process+0x10/0x10 [ 838.993695][T16143] ? find_held_lock+0x2b/0x80 [ 838.993722][T16143] kernel_clone+0xfc/0x9a0 [ 838.993742][T16143] ? __pfx_futex_wait+0x10/0x10 [ 838.993774][T16143] ? __pfx_kernel_clone+0x10/0x10 [ 838.993811][T16143] __do_sys_clone+0xd9/0x120 [ 838.993834][T16143] ? __pfx___do_sys_clone+0x10/0x10 [ 838.993857][T16143] ? __fget_files+0x21f/0x3d0 [ 838.993899][T16143] do_syscall_64+0x106/0xf80 [ 838.993923][T16143] ? clear_bhb_loop+0x40/0x90 [ 838.993946][T16143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.993966][T16143] RIP: 0033:0x7f4fbcb9c799 [ 838.993983][T16143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.994009][T16143] RSP: 002b:00007f4fbdb0cfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 838.994028][T16143] RAX: ffffffffffffffda RBX: 00007f4fbce15fa0 RCX: 00007f4fbcb9c799 [ 838.994041][T16143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 838.994052][T16143] RBP: 00007f4fbcc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 838.994064][T16143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 838.994075][T16143] R13: 00007f4fbce16038 R14: 00007f4fbce15fa0 R15: 00007ffe61f06238 [ 838.994099][T16143] [ 839.359205][T16078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.366251][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.392431][T16078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.404422][T16078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.411494][T16078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.439151][T16078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.478136][T16078] hsr_slave_0: entered promiscuous mode [ 839.484430][T16078] hsr_slave_1: entered promiscuous mode [ 839.490548][T16078] debugfs: 'hsr0' already exists in 'hsr' [ 839.496647][T16078] Cannot create hsr debugfs directory [ 839.627830][T13602] team0: left allmulticast mode [ 839.633772][T13602] team_slave_0: left allmulticast mode [ 839.639304][T13602] team_slave_1: left allmulticast mode [ 839.645526][T13602] team0: left promiscuous mode [ 839.650364][T13602] team_slave_0: left promiscuous mode [ 839.656448][T13602] team_slave_1: left promiscuous mode [ 839.662051][T13602] bridge0: port 3(team0) entered disabled state [ 839.796480][T13602] bridge_slave_1: left allmulticast mode [ 839.803309][T13602] bridge_slave_1: left promiscuous mode [ 839.821042][ T51] Bluetooth: hci6: command tx timeout [ 839.848431][T13602] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.936593][T13602] bridge_slave_0: left allmulticast mode [ 839.943349][T13602] bridge_slave_0: left promiscuous mode [ 839.996117][T13602] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.668542][T13602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.730519][T13602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.772044][T13602] bond0 (unregistering): Released all slaves [ 841.062514][T13602] Â: left promiscuous mode [ 841.892991][ T51] Bluetooth: hci6: command tx timeout [ 842.670625][T13602] hsr_slave_0: left promiscuous mode [ 842.777395][T13602] hsr_slave_1: left promiscuous mode [ 842.819716][T13602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.890971][T13602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.035170][T13602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.101626][T13602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.201512][T13602] veth1_macvtap: left promiscuous mode [ 843.257602][T13602] veth0_macvtap: left promiscuous mode [ 843.284632][T13602] veth1_vlan: left promiscuous mode [ 843.322093][T13602] veth0_vlan: left promiscuous mode [ 844.321776][T16220] FAULT_INJECTION: forcing a failure. [ 844.321776][T16220] name fail_futex, interval 1, probability 0, space 0, times 0 [ 844.386267][T16220] CPU: 0 UID: 0 PID: 16220 Comm: syz.6.2244 Tainted: G I L syzkaller #0 PREEMPT(full) [ 844.386301][T16220] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 844.386309][T16220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 844.386320][T16220] Call Trace: [ 844.386327][T16220] [ 844.386335][T16220] dump_stack_lvl+0x100/0x190 [ 844.386368][T16220] should_fail_ex.cold+0x5/0xa [ 844.386391][T16220] get_futex_key+0x1d2/0x1620 [ 844.386418][T16220] ? __pfx_get_futex_key+0x10/0x10 [ 844.386442][T16220] ? __fput+0x68a/0xb40 [ 844.386466][T16220] futex_wait_setup+0x83/0x510 [ 844.386501][T16220] __futex_wait+0x19f/0x300 [ 844.386530][T16220] ? __pfx___futex_wait+0x10/0x10 [ 844.386563][T16220] ? __pfx_futex_wake_mark+0x10/0x10 [ 844.386594][T16220] ? futex_hash+0x2c5/0x380 [ 844.386622][T16220] futex_wait+0xed/0x380 [ 844.386650][T16220] ? __pfx_futex_wait+0x10/0x10 [ 844.386690][T16220] do_futex+0x1ef/0x350 [ 844.386714][T16220] ? __pfx_do_futex+0x10/0x10 [ 844.386739][T16220] ? __pfx___might_resched+0x10/0x10 [ 844.386766][T16220] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 844.386793][T16220] __x64_sys_futex+0x34f/0x4d0 [ 844.386819][T16220] ? __pfx_task_work_run+0x10/0x10 [ 844.386845][T16220] ? __pfx___x64_sys_futex+0x10/0x10 [ 844.386870][T16220] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 844.386900][T16220] do_syscall_64+0x106/0xf80 [ 844.386923][T16220] ? clear_bhb_loop+0x40/0x90 [ 844.386956][T16220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.386977][T16220] RIP: 0033:0x7f4fbcb9c799 [ 844.386993][T16220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.387011][T16220] RSP: 002b:00007f4fbdb0d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 844.387030][T16220] RAX: ffffffffffffffda RBX: 00007f4fbce15fa8 RCX: 00007f4fbcb9c799 [ 844.387047][T16220] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4fbce15fa8 [ 844.387059][T16220] RBP: 00007f4fbce15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 844.387071][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.387082][T16220] R13: 00007f4fbce16038 R14: 00007ffe61f06150 R15: 00007ffe61f06238 [ 844.387106][T16220] [ 845.698003][T13602] team0 (unregistering): Port device team_slave_1 removed [ 845.776101][T13602] team0 (unregistering): Port device team_slave_0 removed [ 847.110318][T16078] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 847.225675][T16078] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 847.361605][T16078] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 847.450724][T16078] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 849.527200][T16078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.628798][T16078] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.789172][T13597] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.796341][T13597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.909420][T13597] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.916657][T13597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.255799][T16078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 851.172090][T16286] veth1_to_batadv: entered promiscuous mode [ 851.314040][T16289] veth1_to_batadv: left promiscuous mode [ 851.434629][T16078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.687458][T16078] veth0_vlan: entered promiscuous mode [ 851.795307][T16078] veth1_vlan: entered promiscuous mode [ 852.334225][T16078] veth0_macvtap: entered promiscuous mode [ 852.407279][T16078] veth1_macvtap: entered promiscuous mode [ 852.539271][T16078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.655954][T16078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.764419][T13598] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.854711][T13611] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.897682][T16303] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 852.944952][T13611] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.002230][T13611] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.829622][T13600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.903696][T13600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.056509][T13603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.098695][T13603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.650714][T16328] FAULT_INJECTION: forcing a failure. [ 854.650714][T16328] name failslab, interval 1, probability 0, space 0, times 0 [ 854.771252][T16328] CPU: 0 UID: 0 PID: 16328 Comm: syz.3.2218 Tainted: G I L syzkaller #0 PREEMPT(full) [ 854.771285][T16328] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 854.771293][T16328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 854.771304][T16328] Call Trace: [ 854.771311][T16328] [ 854.771320][T16328] dump_stack_lvl+0x100/0x190 [ 854.771352][T16328] should_fail_ex.cold+0x5/0xa [ 854.771375][T16328] should_failslab+0xc2/0x120 [ 854.771395][T16328] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 854.771425][T16328] ? __request_module+0x2d5/0x6c0 [ 854.771455][T16328] kstrdup+0x51/0xe0 [ 854.771485][T16328] __request_module+0x2d5/0x6c0 [ 854.771511][T16328] ? __pfx___request_module+0x10/0x10 [ 854.771538][T16328] ? __mutex_unlock_slowpath+0x15c/0x790 [ 854.771578][T16328] snd_timer_open+0xd78/0x1020 [ 854.771598][T16328] ? snd_timer_instance_new+0x65/0x2e0 [ 854.771629][T16328] ? __pfx_snd_timer_open+0x10/0x10 [ 854.771649][T16328] ? kstrdup+0xb3/0xe0 [ 854.771680][T16328] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 854.771703][T16328] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 854.771730][T16328] ? rcu_is_watching+0x12/0xc0 [ 854.771763][T16328] ? snd_timer_user_ioctl+0x4a/0xd0 [ 854.771783][T16328] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 854.771810][T16328] ? __pfx___mutex_lock+0x10/0x10 [ 854.771846][T16328] ? find_held_lock+0x2b/0x80 [ 854.771875][T16328] snd_timer_user_ioctl+0x76/0xd0 [ 854.771894][T16328] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 854.771915][T16328] __x64_sys_ioctl+0x18e/0x210 [ 854.771944][T16328] do_syscall_64+0x106/0xf80 [ 854.771966][T16328] ? clear_bhb_loop+0x40/0x90 [ 854.771989][T16328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.772009][T16328] RIP: 0033:0x7f9a4e19c799 [ 854.772025][T16328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.772044][T16328] RSP: 002b:00007f9a4ef8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 854.772062][T16328] RAX: ffffffffffffffda RBX: 00007f9a4e415fa0 RCX: 00007f9a4e19c799 [ 854.772074][T16328] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 854.772086][T16328] RBP: 00007f9a4e232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 854.772097][T16328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 854.772107][T16328] R13: 00007f9a4e416038 R14: 00007f9a4e415fa0 R15: 00007ffcc1fdbe78 [ 854.772131][T16328] [ 861.457462][T11612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 861.470536][T11612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 861.486460][T11612] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 861.494264][T11612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 861.502376][T11612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 863.436598][T16377] chnl_net:caif_netlink_parms(): no params data found [ 863.533238][T16396] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2271'. [ 863.590991][T11612] Bluetooth: hci1: command tx timeout [ 864.110015][T16377] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.140866][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.182732][T16377] bridge_slave_0: entered allmulticast mode [ 864.241408][T16377] bridge_slave_0: entered promiscuous mode [ 864.299590][T16377] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.306715][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.406184][T16377] bridge_slave_1: entered allmulticast mode [ 864.468751][T16377] bridge_slave_1: entered promiscuous mode [ 864.962641][T16377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.131091][T16377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.630522][T16377] team0: Port device team_slave_0 added [ 865.658374][T11612] Bluetooth: hci1: command tx timeout [ 865.689540][T16377] team0: Port device team_slave_1 added [ 866.029822][T16377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.076503][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.288608][T16377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.377931][T16377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.438821][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.625247][T16377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.021284][T16377] hsr_slave_0: entered promiscuous mode [ 867.095700][T16377] hsr_slave_1: entered promiscuous mode [ 867.150855][T16377] debugfs: 'hsr0' already exists in 'hsr' [ 867.156879][T16377] Cannot create hsr debugfs directory [ 867.739299][T11612] Bluetooth: hci1: command tx timeout [ 869.510446][T16377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 869.673792][T16377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 869.756289][T16377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 869.821164][T11612] Bluetooth: hci1: command tx timeout [ 869.868188][T16377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 870.205474][T16444] veth1_to_batadv: entered promiscuous mode [ 870.354495][T16453] veth1_to_batadv: left promiscuous mode [ 870.631370][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.646962][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.734079][T16377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.894306][T16377] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.998082][T13595] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.005307][T13595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.112413][T13595] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.119536][T13595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.670861][T16377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 873.539649][T16377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.003902][T16377] veth0_vlan: entered promiscuous mode [ 875.078756][T16377] veth1_vlan: entered promiscuous mode [ 875.248999][T16377] veth0_macvtap: entered promiscuous mode [ 875.339387][T16377] veth1_macvtap: entered promiscuous mode [ 875.468725][T16377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.578834][T16377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.695292][T13597] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.740374][T13597] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.009333][T13597] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.093966][T13597] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.375534][T13597] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.453785][T13597] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.677034][T13598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.736907][T13598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.827468][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 879.376400][T16524] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 880.915946][T16533] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 882.099292][T16553] FAULT_INJECTION: forcing a failure. [ 882.099292][T16553] name failslab, interval 1, probability 0, space 0, times 0 [ 882.183339][T16537] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 882.310194][T16553] CPU: 0 UID: 0 PID: 16553 Comm: syz.4.2304 Tainted: G I L syzkaller #0 PREEMPT(full) [ 882.310229][T16553] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 882.310237][T16553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 882.310248][T16553] Call Trace: [ 882.310256][T16553] [ 882.310263][T16553] dump_stack_lvl+0x100/0x190 [ 882.310296][T16553] should_fail_ex.cold+0x5/0xa [ 882.310319][T16553] should_failslab+0xc2/0x120 [ 882.310340][T16553] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 882.310370][T16553] ? __request_module+0x2d5/0x6c0 [ 882.310400][T16553] kstrdup+0x51/0xe0 [ 882.310429][T16553] __request_module+0x2d5/0x6c0 [ 882.310456][T16553] ? __pfx___request_module+0x10/0x10 [ 882.310483][T16553] ? __mutex_unlock_slowpath+0x15c/0x790 [ 882.310523][T16553] snd_timer_open+0xd78/0x1020 [ 882.310542][T16553] ? snd_timer_instance_new+0x65/0x2e0 [ 882.310573][T16553] ? __pfx_snd_timer_open+0x10/0x10 [ 882.310593][T16553] ? kstrdup+0xb3/0xe0 [ 882.310625][T16553] __snd_timer_user_ioctl.isra.0+0xd6d/0x27c0 [ 882.310648][T16553] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 882.310674][T16553] ? rcu_is_watching+0x12/0xc0 [ 882.310715][T16553] ? snd_timer_user_ioctl+0x4a/0xd0 [ 882.310734][T16553] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 882.310761][T16553] ? __pfx___mutex_lock+0x10/0x10 [ 882.310788][T16553] ? find_held_lock+0x2b/0x80 [ 882.310816][T16553] snd_timer_user_ioctl+0x76/0xd0 [ 882.310834][T16553] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 882.310856][T16553] __x64_sys_ioctl+0x18e/0x210 [ 882.310884][T16553] do_syscall_64+0x106/0xf80 [ 882.310906][T16553] ? clear_bhb_loop+0x40/0x90 [ 882.310928][T16553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.310948][T16553] RIP: 0033:0x7ff3fe59c799 [ 882.310964][T16553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.310982][T16553] RSP: 002b:00007ff3ff381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 882.311001][T16553] RAX: ffffffffffffffda RBX: 00007ff3fe815fa0 RCX: 00007ff3fe59c799 [ 882.311012][T16553] RDX: 0000200000000000 RSI: 0000000040345410 RDI: 0000000000000006 [ 882.311023][T16553] RBP: 00007ff3fe632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 882.311034][T16553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.311045][T16553] R13: 00007ff3fe816038 R14: 00007ff3fe815fa0 R15: 00007ffe3b40c828 [ 882.311068][T16553] [ 882.990585][T11612] Bluetooth: hci5: command 0x0406 tx timeout [ 883.551951][T16565] FAULT_INJECTION: forcing a failure. [ 883.551951][T16565] name fail_futex, interval 1, probability 0, space 0, times 0 [ 883.693216][T16565] CPU: 0 UID: 0 PID: 16565 Comm: syz.7.2307 Tainted: G I L syzkaller #0 PREEMPT(full) [ 883.693249][T16565] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 883.693258][T16565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 883.693268][T16565] Call Trace: [ 883.693275][T16565] [ 883.693284][T16565] dump_stack_lvl+0x100/0x190 [ 883.693315][T16565] should_fail_ex.cold+0x5/0xa [ 883.693337][T16565] get_futex_key+0x295/0x1620 [ 883.693362][T16565] ? __pfx_get_futex_key+0x10/0x10 [ 883.693387][T16565] ? kasan_save_track+0x14/0x30 [ 883.693415][T16565] ? __kasan_kmalloc+0xaa/0xb0 [ 883.693445][T16565] futex_lock_pi+0x1d3/0x7b0 [ 883.693475][T16565] ? __pfx_futex_lock_pi+0x10/0x10 [ 883.693505][T16565] ? __pfx___futex_wait+0x10/0x10 [ 883.693532][T16565] ? lockdep_hardirqs_on+0x78/0x100 [ 883.693574][T16565] ? __pfx_futex_wake_mark+0x10/0x10 [ 883.693607][T16565] ? __lock_acquire+0x4a5/0x2630 [ 883.693634][T16565] do_futex+0x18a/0x350 [ 883.693658][T16565] ? __pfx_do_futex+0x10/0x10 [ 883.693683][T16565] ? find_held_lock+0x2b/0x80 [ 883.693710][T16565] __x64_sys_futex+0x34f/0x4d0 [ 883.693738][T16565] ? __pfx___x64_sys_futex+0x10/0x10 [ 883.693770][T16565] do_syscall_64+0x106/0xf80 [ 883.693791][T16565] ? clear_bhb_loop+0x40/0x90 [ 883.693815][T16565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.693836][T16565] RIP: 0033:0x7f2e3f19c799 [ 883.693852][T16565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.693870][T16565] RSP: 002b:00007f2e40115028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 883.693888][T16565] RAX: ffffffffffffffda RBX: 00007f2e3f416090 RCX: 00007f2e3f19c799 [ 883.693900][T16565] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 883.693910][T16565] RBP: 00007f2e3f232bd9 R08: 0000000000000000 R09: 000000008000fff5 [ 883.693922][T16565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.693933][T16565] R13: 00007f2e3f416128 R14: 00007f2e3f416090 R15: 00007ffdbfc0a898 [ 883.693955][T16565] [ 887.060190][T16594] ceph: Failed to parse sending metrics switch value 'P^' [ 888.315289][T16599] zswap: compressor not available [ 889.324518][T16619] FAULT_INJECTION: forcing a failure. [ 889.324518][T16619] name failslab, interval 1, probability 0, space 0, times 0 [ 889.559431][T16619] CPU: 0 UID: 0 PID: 16619 Comm: syz.5.2320 Tainted: G I L syzkaller #0 PREEMPT(full) [ 889.559464][T16619] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 889.559473][T16619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 889.559484][T16619] Call Trace: [ 889.559491][T16619] [ 889.559498][T16619] dump_stack_lvl+0x100/0x190 [ 889.559531][T16619] should_fail_ex.cold+0x5/0xa [ 889.559553][T16619] ? tomoyo_realpath_from_path+0xb6/0x690 [ 889.559575][T16619] should_failslab+0xc2/0x120 [ 889.559595][T16619] __kmalloc_noprof+0xe0/0x850 [ 889.559637][T16619] tomoyo_realpath_from_path+0xb6/0x690 [ 889.559665][T16619] tomoyo_path_number_perm+0x23c/0x580 [ 889.559699][T16619] ? tomoyo_path_number_perm+0x22e/0x580 [ 889.559732][T16619] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 889.559789][T16619] ? find_held_lock+0x2b/0x80 [ 889.559806][T16619] ? __fget_files+0x215/0x3d0 [ 889.559823][T16619] ? hook_file_ioctl_common+0x146/0x410 [ 889.559859][T16619] ? __fget_files+0x21f/0x3d0 [ 889.559879][T16619] security_file_ioctl+0xd3/0x230 [ 889.559912][T16619] __x64_sys_ioctl+0xb7/0x210 [ 889.559941][T16619] do_syscall_64+0x106/0xf80 [ 889.559963][T16619] ? clear_bhb_loop+0x40/0x90 [ 889.559987][T16619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.560007][T16619] RIP: 0033:0x7f5dc979c799 [ 889.560022][T16619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.560041][T16619] RSP: 002b:00007f5dca66f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 889.560060][T16619] RAX: ffffffffffffffda RBX: 00007f5dc9a15fa0 RCX: 00007f5dc979c799 [ 889.560073][T16619] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000016 [ 889.560084][T16619] RBP: 00007f5dca66f090 R08: 0000000000000000 R09: 0000000000000000 [ 889.560095][T16619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 889.560106][T16619] R13: 00007f5dc9a16038 R14: 00007f5dc9a15fa0 R15: 00007ffcea80f298 [ 889.560130][T16619] [ 892.423412][T16619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 895.600809][ T51] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 898.154459][ T31] INFO: task syz.0.2011:14976 blocked for more than 143 seconds. [ 898.174345][ T31] Tainted: G I L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 898.235278][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 898.352484][ T31] task:syz.0.2011 state:D stack:28232 pid:14976 tgid:14973 ppid:5832 task_flags:0x400140 flags:0x00080002 [ 898.485018][ T31] Call Trace: [ 898.488348][ T31] [ 898.491283][ T31] __schedule+0xfee/0x6120 [ 898.549759][T16734] FAULT_INJECTION: forcing a failure. [ 898.549759][T16734] name failslab, interval 1, probability 0, space 0, times 0 [ 898.600741][ T31] ? __lock_acquire+0x4a5/0x2630 [ 898.614572][T16752] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 898.635868][ T31] ? __pfx___schedule+0x10/0x10 [ 898.640762][ T31] ? find_held_lock+0x2b/0x80 [ 898.708130][ T31] ? schedule+0x2bf/0x390 [ 898.712587][ T31] schedule+0xdd/0x390 [ 898.778263][ T31] schedule_preempt_disabled+0x13/0x30 [ 898.783945][ T31] __mutex_lock+0xc9a/0x1b90 [ 898.883304][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 898.910468][T16734] CPU: 0 UID: 0 PID: 16734 Comm: syz.7.2340 Tainted: G I L syzkaller #0 PREEMPT(full) [ 898.910508][T16734] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 898.910516][T16734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 898.910528][T16734] Call Trace: [ 898.910535][T16734] [ 898.910543][T16734] dump_stack_lvl+0x100/0x190 [ 898.910584][T16734] should_fail_ex.cold+0x5/0xa [ 898.910608][T16734] should_failslab+0xc2/0x120 [ 898.910628][T16734] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 898.910656][T16734] ? security_inode_alloc+0x3b/0x2c0 [ 898.910683][T16734] ? lockdep_init_map_type+0x5c/0x250 [ 898.910712][T16734] security_inode_alloc+0x3b/0x2c0 [ 898.910741][T16734] inode_init_always_gfp+0xced/0x1040 [ 898.910764][T16734] alloc_inode+0x8e/0x250 [ 898.910788][T16734] alloc_anon_inode+0x2a/0x3e0 [ 898.910810][T16734] ioctx_alloc+0x4dc/0x21d0 [ 898.910838][T16734] ? find_held_lock+0x2b/0x80 [ 898.910856][T16734] ? __pfx_ioctx_alloc+0x10/0x10 [ 898.910883][T16734] __x64_sys_io_setup+0xc9/0x220 [ 898.910905][T16734] do_syscall_64+0x106/0xf80 [ 898.910928][T16734] ? clear_bhb_loop+0x40/0x90 [ 898.910951][T16734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.910971][T16734] RIP: 0033:0x7f2e3f19c799 [ 898.910987][T16734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.911004][T16734] RSP: 002b:00007f2e400f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 898.911022][T16734] RAX: ffffffffffffffda RBX: 00007f2e3f416180 RCX: 00007f2e3f19c799 [ 898.911034][T16734] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 898.911045][T16734] RBP: 00007f2e3f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 898.911056][T16734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.911067][T16734] R13: 00007f2e3f416218 R14: 00007f2e3f416180 R15: 00007ffdbfc0a898 [ 898.911092][T16734] [ 899.255785][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 899.261620][ T31] ? net_generic+0xea/0x2a0 [ 899.266258][ T31] ? net_generic+0xea/0x2a0 [ 899.271912][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 899.277835][ T31] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 899.283577][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 899.289191][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 899.295322][ T31] ? genl_get_cmd+0x3ef/0x720 [ 899.300019][ T31] ? bpf_lsm_capable+0x9/0x10 [ 899.304745][ T31] ? security_capable+0x80/0x260 [ 899.309730][ T31] genl_rcv_msg+0x560/0x800 [ 899.314266][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.329509][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 899.374561][ T31] netlink_rcv_skb+0x159/0x420 [ 899.379418][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 899.470484][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 899.540529][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 899.584632][ T31] genl_rcv+0x28/0x40 [ 899.588877][ T31] netlink_unicast+0x5aa/0x870 [ 899.593664][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 899.668339][ T31] netlink_sendmsg+0x8b0/0xda0 [ 899.673157][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.744904][ T31] ? __import_iovec+0x1d2/0x640 [ 899.749820][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 899.784876][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 899.789697][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.834856][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 899.840208][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 899.874774][ T31] ___sys_sendmsg+0x190/0x1e0 [ 899.910477][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.925012][ T31] __sys_sendmsg+0x170/0x220 [ 899.929663][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 899.974962][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 899.980637][ T31] do_syscall_64+0x106/0xf80 [ 900.024833][ T31] ? clear_bhb_loop+0x40/0x90 [ 900.029582][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.075962][ T31] RIP: 0033:0x7f297e99c799 [ 900.085033][ T31] RSP: 002b:00007f297f7ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.094752][ T31] RAX: ffffffffffffffda RBX: 00007f297ec16090 RCX: 00007f297e99c799 [ 900.145129][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000005 [ 900.153136][ T31] RBP: 00007f297ea32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 900.204976][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.213013][ T31] R13: 00007f297ec16128 R14: 00007f297ec16090 R15: 00007ffc53e39728 [ 900.249638][ T31] [ 900.386472][ T31] [ 900.386472][ T31] Showing all locks held in the system: [ 900.394222][ T31] 1 lock held by pool_workqueue_/3: [ 900.448556][ T31] #0: ffffffff8e7f3038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 900.506762][ T31] 1 lock held by khungtaskd/31: [ 900.527039][ T31] #0: ffffffff8e7e7420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 900.562742][ T31] 2 locks held by getty/12459: [ 900.602388][ T31] #0: ffff888037f990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 900.635163][ T31] #1: ffffc900045932f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 900.679465][ T31] 3 locks held by kworker/u8:19/13597: [ 900.684972][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 900.755264][ T31] #1: ffffc90002eb7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 900.797079][ T31] #2: ffffffff905fab90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 900.835434][ T31] 2 locks held by kworker/u8:20/13598: [ 900.840929][ T31] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 900.916457][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 900.948654][ T31] 2 locks held by kworker/u8:22/13600: [ 900.954157][ T31] 1 lock held by syz.4.1797/13964: [ 900.994708][ T31] #0: ffffffff906133e8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 901.026097][ T31] 2 locks held by syz.2.1995/14913: [ 901.031354][ T31] #0: ffffffff906bf750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 901.105455][ T31] #1: ffffffff8ec57888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 901.155625][ T31] 2 locks held by syz.0.2011/14976: [ 901.160875][ T31] #0: ffffffff906bf750 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 901.200335][ T31] #1: ffffffff8ec57888 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 901.250941][ T31] 2 locks held by syz.5.2338/16712: [ 901.276191][ T31] #0: ffffffff905fab90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 901.315921][ T31] #1: ffffffff8e7f3038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 901.371750][ T31] 1 lock held by syz.7.2340/16732: [ 901.406864][ T31] #0: ffffffff905fab90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 901.449813][ T31] [ 901.452177][ T31] ============================================= [ 901.452177][ T31] [ 901.589930][ T31] NMI backtrace for cpu 0 [ 901.589954][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 901.589983][ T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 901.589992][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 901.590003][ T31] Call Trace: [ 901.590010][ T31] [ 901.590018][ T31] dump_stack_lvl+0x100/0x190 [ 901.590051][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 901.590083][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 901.590111][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 901.590145][ T31] sys_info+0x141/0x190 [ 901.590171][ T31] watchdog+0xd25/0x1050 [ 901.590195][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.590213][ T31] ? __kthread_parkme+0x18c/0x230 [ 901.590237][ T31] ? kthread+0x13a/0x450 [ 901.590259][ T31] ? __pfx_watchdog+0x10/0x10 [ 901.590276][ T31] kthread+0x370/0x450 [ 901.590299][ T31] ? __pfx_kthread+0x10/0x10 [ 901.590325][ T31] ret_from_fork+0x754/0xd80 [ 901.590353][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 901.590383][ T31] ? __switch_to+0x7b4/0x1120 [ 901.590403][ T31] ? __pfx_kthread+0x10/0x10 [ 901.590430][ T31] ret_from_fork_asm+0x1a/0x30 [ 901.590459][ T31] [ 902.412411][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 902.419304][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I L syzkaller #0 PREEMPT(full) [ 902.430075][ T31] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 902.436650][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 902.446699][ T31] Call Trace: [ 902.449974][ T31] [ 902.452912][ T31] dump_stack_lvl+0x100/0x190 [ 902.457617][ T31] vpanic+0x552/0x970 [ 902.461606][ T31] ? __pfx_vpanic+0x10/0x10 [ 902.466108][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 902.472272][ T31] panic+0xd1/0xe0 [ 902.475988][ T31] ? __pfx_panic+0x10/0x10 [ 902.480404][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 902.486569][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 902.492730][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 902.498891][ T31] ? watchdog.cold+0x198/0x1ca [ 902.503658][ T31] ? watchdog+0xd35/0x1050 [ 902.508073][ T31] watchdog.cold+0x1a9/0x1ca [ 902.512669][ T31] ? __pfx_watchdog+0x10/0x10 [ 902.517361][ T31] ? __kthread_parkme+0x18c/0x230 [ 902.522393][ T31] ? kthread+0x13a/0x450 [ 902.526727][ T31] ? __pfx_watchdog+0x10/0x10 [ 902.531401][ T31] kthread+0x370/0x450 [ 902.535499][ T31] ? __pfx_kthread+0x10/0x10 [ 902.540099][ T31] ret_from_fork+0x754/0xd80 [ 902.544698][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 902.549818][ T31] ? __switch_to+0x7b4/0x1120 [ 902.554494][ T31] ? __pfx_kthread+0x10/0x10 [ 902.559103][ T31] ret_from_fork_asm+0x1a/0x30 [ 902.563879][ T31] [ 902.566954][ T31] Kernel Offset: disabled [ 902.571273][ T31] Rebooting in 86400 seconds..