last executing test programs: 7.778211007s ago: executing program 1 (id=365): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000200bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xe00) 7.133361351s ago: executing program 1 (id=368): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b01, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/saved_cmdlines\x00', 0x400, 0x0) pread64$auto(r1, 0x0, 0x6, 0x80000000000) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8081, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x40, 0x3, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x22, 0x800, 0x91c) unshare$auto(0x40000080) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) 5.507764073s ago: executing program 2 (id=374): sendmsg$auto_IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0xffffffffffffff80}, 0x4004) 5.393841955s ago: executing program 3 (id=375): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x1, 0x0, 0xfb3) r2 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0x149443, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x181882, 0x0) r3 = epoll_create$auto(0x100008) epoll_ctl$auto(r3, 0x1, r2, 0x0) 5.044092772s ago: executing program 3 (id=377): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x1, 0x106) (async, rerun: 32) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0x2, 0x1, 0x0) (async, rerun: 64) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) mmap$auto(0x0, 0x200007, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) (async, rerun: 64) setsockopt$auto(r1, 0x80, 0xffffffff, 0x0, 0x4) (rerun: 64) mmap$auto(0x2, 0xa10004, 0xffb, 0x50, r1, 0x8000) (async) ioctl$auto(0xffffffffffffffff, 0x541d, 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xf, 0x3, 0x2) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 5.039322954s ago: executing program 2 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x14, r1, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x2000000, 0x4000001}, 0x4000084) 4.268806224s ago: executing program 0 (id=379): mmap$auto(0x0, 0x7, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) r0 = socket(0x11, 0x6, 0x4000000) r1 = getsockopt$auto(r0, 0x84, 0x12, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2004c0c4) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) clone$auto(0x100000020003b49, 0x80000000002, 0x0, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x2, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x2, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r4, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r7, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000002400)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x8880) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000200)="34aeede84184", 0x6) sendmsg$auto_NL80211_CMD_START_AP(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x2224, r5, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_EHT_CAPABILITY={0x4b, 0x136, "24c3fc500f1b78af65a4f1f04a60a62cbcb8fc80cb61dfc79c5f8e153fc6f17d3bd33fe1447bc837ed06c0bf0fe1b2e39fa5140c57b820c9c80db93405bef0b60f1988965e0ba0"}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x1}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x7f}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x21ac, 0x131, 0x0, 0x1, [@NL80211_ATTR_PEER_MEASUREMENTS={0x1f30, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x1f2c, 0x5, 0x0, 0x1, [{0x4}, {0x146c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x1004, 0x1, "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"}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa5, 0x1, "ce675845ec5bf86fc35ffd7188ce3dcce65613ecbb4dc884dc9a2f752cc71031ec54146f8b7ecc1856c368e4565146d362d4abfeb2e449d1e4ae0a1624554e258e8ee0b0cd9063954148098b3775c8a0b8eabe75b06912bc2a88f2d076e0b2e788a9a2c21d5fa822d54ef9b2666cda9df13eb5659322d318ad29120c424cc8fccc47e003b80a681a44785adc356a11586129a39dee4af2cdb3fd68b15594a614fd"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x18, 0x1, "9a06d1613eb562044b45d98882bc799d2f567a42"}, @NL80211_PMSR_PEER_ATTR_REQ={0xdc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x416}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x89}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x63}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x51, 0x1, "1d6b7cf1f5702bcfa947b2928bbdaf430dd43586a394ea72704e97411dab6dd231cbc16d5e88c02294e880aeb819f7cc1075ec88f3300fec1705521a5dbfaf23d0a74c8236a7090c2c6dba8a97"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0xa0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x95}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1cc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x88}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x6c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa9}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8b}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x48}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x94, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf800}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xfb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4e}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8f}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xbe9f}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x49}]}]}]}]}, {0x36c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x1fc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x134, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x62}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5f}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x91}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xb9, 0x1, "b0131a23769f287ec74e9238e62a56410e50bb5c79837a3defa8b27f82413d06de36ae745c16d83bd5f42e2f531cb150c68ab73581ea714f7960b9512a5015e0959155ac5a33b93a14c06c3dfbdc3d188b976416d7ae30912295fe09322fca5a357768c119713b06a23f62e2cdb4498e7abd68e1f3da99545de0e1793027488f65164979cae0a9b6d9672b7339c8b09beaaba7c185f4fd5a369710f0b7defe566b77d5a885f9324fe3cee77b957b7ce0559489641b"}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa9, 0x1, "3be0cc363b771b5b249a797d7d53645e53a0ef49b47e9ae8f49481d5876894c2677abeebbec1e19c338c2f97f3ec3d526c6a77c1436b0b82926bc0c1038cc7bc90cf0cb47869c6cad4a6c32ad1a343fadb5f27c5de72beebf4debc6f2f6d189aaa238fa9c8f763939ad9679d11bb4956deca7f4104933b5f3e902de354f918adf8cffa09e5a1d97389e16f3cce319cff50049f2dd7f5ede66a8e054e99a1d748c5b9e69769"}]}, {0x4d8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x29c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xf0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xee}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x73}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x62}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x148, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa0}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x574}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1a}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x40}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x20}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x230, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xae}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xfffffff9}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x82}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1000}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6c}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8bd8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xfd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xfa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x74}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}, {0xd8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xd2, 0x1, "bd594f71244735325c374192fc2e1ac27cf975af561fffca7cb75a3e158234492de7ee076d972c1f9ba1fe9b98b15fec916e68e34de1227f4ddb3742b682126363ea9fa597c683cc277dd70c54163ae7b0939db99f48d26a39fda10f2ae82e317c53d319953863e3a1dfcfdf71ef0b30ea0189b8103c797515a81b02a275ea93bcf8ce61a312eec68495c1d477b202ea60d16d7981fe8c538411dfcf940542bb7a6bd866da0b91bd90bf19017a109a5f734034c3390e8b950004f89e4aa39b4a6b667ed228a75f563609ed323a87"}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0x30, 0x1, "577447ce728e2362e96cd9e2d66398f6c67ede392b7f90b36ea75318219dd2306085ad156ea75367805d12df"}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x3c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xf2}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x20, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BSS_COLOR={0x5, 0xd, 0xb}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xfc, 0x1, "47c2db8ef84788da45c6d6d003e533c6b6c7afccd51bd4ee9898ecc04180cbe0aa40709ca4a65d84dbab195f7a98c82d6c3262b9c1daeb6e17a77940dc39869a65dae3966951b75c83920084392ec4cd5e7e1e169c1245217ed8e1128a6f299f376cda41dc3b038b8c69fe5190ce76b3007c50fb0d0e71d8345c185adde59b101848128cf66c87c24c25e63bca5fc0f2a5cbaaa66925644bd835619f61fe1d580be38af197a54f57ddc7e645d37b340a92cae047f03a237d9b8a8d7c849ae19015aeb732d157b44d6af06ef0263b0ef16a6f09783c1ee93d3ef182ce9f0ae7c348b30da40c42ef60938d1e49688ef2081de9422123104dcc"}]}]}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x7}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_STA_FLAGS2={0x88, 0x43, "7c982100ad6de546bd1dc91540945a1504438ee24f6c83174d900c961ae832a804a7e2480ad4c47c6059ab64710f3edc98882c5f78573dc9695f6df3d2f1b2afc35ab1022ff66ca64b633a534deaf14a3430f4fc9a5bdeb61326ebdc3e865407853e957d55f3ac5815737fc77ed9af0d436f6e7f1c7a28a60f2c80d59190b71c603447d0"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_NAN_FUNC={0xf1, 0xf0, 0x0, 0x1, [@generic="b9ee8a8d6bcd3616f265d687eadb5eabeb7e1a209ba92bb1f934cfeb1b3fa3f53f5d460e9db725add350d8e6226202d67b166a33df8959aa50f9c4fea623dcbea2b30408a4de7e9b2061a77639d85a6f3249c20f2e200580a6756529da75861cf2bd3a743152d0802dce869e5685dabd0f75457429caa5e956d2fb13066d0c85d304884a448aae7f439bc5054bdfabc3b35604879b5b48b22b516c51e81c6170683785719b70010b00df227636245a64ba57c0df180e30353ef6b72579668a0a7ed84bcb5b3ee44ffb95cdb6d1f575a091a040b86292bf3f4a57d64e8274b8a04e3f2fde1b70bdecbfa4b75f49"]}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x6}, @NL80211_ATTR_FILS_DISCOVERY={0xd0, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x3}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x2}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x4}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xaa, 0x3, "f98d8bf8cf05430bd61a6bfc3388b58235caced0e9dc0ce99db098d8c82eac7de53bce7fb8bfba4ab1f7e156b10766b03a59536081a665e1f3dcdb81cca23bb72384e68ccaab92fd2b1047baf0243e4fc314efc19b433e71530a948fc0f4e3354b942eb267bb27b8f5dde2d64e211a2adf4778abd717cdc9ac29b80e69c8ede5d6675154128bd443b2f00b9dc0100c152569b59084c704a8f40169a3b23944bd205d5c7e2c3b"}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xc}]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1ff}]}, 0x2224}, 0x1, 0x0, 0x0, 0x801}, 0x0) 4.268359594s ago: executing program 2 (id=380): close_range$auto(0x2, 0x8, 0x0) stat$auto(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)={0x7, 0x8000, 0x6, 0x8001, 0xee00, 0xee01, 0x0, 0x187, 0x2, 0x8, 0x3, 0x5fd0, 0x7f, 0x6, 0xfff, 0x3, 0x1}) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x8402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon35\x00', 0x400, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10000, 0x41) getdents$auto(r0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x2) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) flock$auto(r1, 0x8) mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) pipe$auto(0x0) write$auto(r3, 0x0, 0xfffffdef) tee$auto(0x2000000000000, 0x3, 0x402, 0x8) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) 3.755338535s ago: executing program 0 (id=381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = open(0x0, 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x60840, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x129600, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(r3, 0x4144, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket(0x11, 0x2, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/power/wakeup_count\x00', 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0xd, 0x1, 0x948b, 0x3, 0x15f4ca0a, 0x4, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 3.741841583s ago: executing program 1 (id=382): statmount$auto(0x0, &(0x7f00000005c0)={0x8000000a, 0x1, 0x44f, 0x807, 0xfffffffa, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x0, 0x0, 0x6000, 0x22000, 0x200, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], "52ee7f61394da685ba787adf671ec3cde4c669f6301605651533488b5aadac0adc3846bedcc2721fa45b3904156a6032e8590ae88204893f3775fd7933b7e91ca146b1c3a8acb8a3f2f62302c68442b426ff4eebd82b66a7b9e8c47973ff05eeea38ea217920c16d24808ae48261e4ef7ea33e31c1c5135792e7308d375254f0747518455d6aa9980493bc1f19cf4882465c2352cc713f077bc0e551bcb51b0525aea5e7f6740c33200ca9f8c8abc299512d"}, 0x1fa, 0xd) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x6, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x8001, 0x2, 0x7fa, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) splice$auto(0x4, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x9) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x0, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) read$auto(0xffffffffffffffff, 0x0, 0x9) acct$auto(&(0x7f0000000040)=')\'$-{%+\'@,\x00') 2.965463431s ago: executing program 3 (id=383): process_madvise$auto_MADV_COLLAPSE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000340)="5acda7999110269cb324a1e5b5dc798b77bf96ad938a51d401ace51b0c80419f1f671e70112f7c1587d8e6708a78150e7ab982998c8af10d07efd57870b8204473a3d6fc2d4ef2842ab3e1aa95d51f370a", 0xff}, 0x4, 0x19, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="1100af"], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.775914633s ago: executing program 2 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002ac0), r0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002b00)={0x1c, r1, 0x1f97227bd58c1f83, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0xa6, 0x3f00000000000000, 0x20004041}, 0x40004) 2.679461989s ago: executing program 1 (id=385): close_range$auto(0x2, 0x8, 0x0) stat$auto(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)={0x7, 0x8000, 0x6, 0x8001, 0xee00, 0xee01, 0x0, 0x187, 0x2, 0x8, 0x3, 0x5fd0, 0x7f, 0x6, 0xfff, 0x3, 0x1}) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x8402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon35\x00', 0x400, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10000, 0x41) getdents$auto(r0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101102, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) ioctl$auto_PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000140)=0x2) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) flock$auto(r1, 0x8) mmap$auto(0x0, 0x3, 0x800, 0x1fd, r3, 0x92e3) mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000040000fdef}, 0x1) pipe$auto(0x0) write$auto(r3, 0x0, 0xfffffdef) tee$auto(0x2000000000000, 0x3, 0x402, 0x8) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) 2.577211279s ago: executing program 3 (id=386): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000080)="c60c0ba5c4790a39837a47ea2d61e66f8f5082ef5d3a80b65d1dcb5614f400001547cb0d81a2adc95555f8057c934018332af6bb9f6776bb8f10a2f00b8002536462c6b1b829d6dd84010e73c8dbe897d5eaf070410e9e679b60", 0x5a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x0, 0xee00, 0xffffffffffffffff, 0x4) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x212301, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setresgid$auto(0x0, 0x6, 0x0) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_target_scan_time\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000010c0)=""/4096, 0x1000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x20e483, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x271f, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) getsockopt$auto_SO_SELECT_ERR_QUEUE(r3, 0xfff, 0x2d, &(0x7f00000000c0)='/dev/kvm\x00', &(0x7f0000000100)=0xb5) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0xa2902, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x2) mmap$auto(0x10, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x2de) unshare$auto(0x40000080) 2.553995014s ago: executing program 0 (id=387): write$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x2275, 0xdd) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x14, 0x8, 0x8000) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep_chains\x00', 0x10b402, 0x0) pread64$auto(r0, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0xe00b, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x700000000000000) 2.499723756s ago: executing program 2 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r0, 0x0, 0xc810) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async) ioctl$auto_BINDER_WRITE_READ(r1, 0xc0306201, 0x0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, 0x0, 0x24004054) socketpair$auto(0x0, 0x200, 0xc7, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x29202, 0x0) mmap$auto(0x4, 0x7, 0xac6, 0x8000004008011, r2, 0xffffffffffffffbc) (async) mmap$auto(0x4, 0x7, 0xac6, 0x8000004008011, r2, 0xffffffffffffffbc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) sendfile$auto(r3, r3, 0x0, 0x7fff) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c06, 0x0) r4 = getsid$auto(0xffffffffffffffff) syz_open_procfs$namespace(r4, 0x0) (async) syz_open_procfs$namespace(r4, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) sysfs$auto(0xc, 0x3, 0x5) (async) sysfs$auto(0xc, 0x3, 0x5) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x541a, r5) (async) ioctl$auto(0x3, 0x541a, r5) 1.555648708s ago: executing program 0 (id=389): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0xa, 0xb) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010b27bd7000fda5c5a62073660008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="44010000", @ANYRESHEX=r0, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r8, @ANYBLOB="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", @ANYRESDEC=r4, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x56b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'}) 1.436777459s ago: executing program 3 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = open(0x0, 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x60840, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x129600, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DRAIN2(r3, 0x4144, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket(0x11, 0x2, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio1/power/wakeup_count\x00', 0x40, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x5, 0xd, 0x1, 0x948b, 0x3, 0x15f4ca0a, 0x4, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 1.305337488s ago: executing program 1 (id=391): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r0 = open(&(0x7f0000000100)='./cgroup\x00', 0x105040, 0x0) r1 = open_by_handle_at$auto(r0, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) poll$auto(&(0x7f0000000040)={r1, 0x1, 0xa}, 0x5, 0x108) pwrite64$auto(r2, 0x0, 0x7b05, 0x5) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) write$auto(0xffffffffffffffff, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x10011, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0xfffff000, 0x4000000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x5, 0xc79, 0xe9f2, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r5, 0x5646, r5) mmap$auto(0x101, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r6, 0x4, 0xa7}, 0x1c, 0x0, 0x0, 0x8) read$auto_drm_debugfs_entry_fops_drm_debugfs(r7, 0x0, 0x0) socket(0xa, 0x2, 0x0) 1.074760841s ago: executing program 3 (id=392): mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) keyctl$auto_KEYCTL_INSTANTIATE(0xc, 0x0, 0xee00, 0xffffffffffffffff, 0x4) sysfs$auto(0x2, 0x10000000000002a, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xfff, 0xffffffffffff0000, 0x8) shmdt$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x3, 0x1, 0x0) socket(0x2c, 0x3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x0, 0x146) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xff7f}, 0x5) madvise$auto(0x0, 0x3, 0x15) getpid() write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x2404c004) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000280)='/dev/audio1\x00f=\xb8F\xe3\xefNF\x0e\x0eo\x93\x8b\x86J\x8f\xd7\xf2\xe8q\xde\x86\"\xa1\xf0\xc7Oy{q\xcf\xbb=\xd9#\x01\x82(\x85\xd9&\xd0\a\x140\xfa\xf6\x9bY*22+\x18p\xa8\xef\xab\x10\x81\f\xdaa\x92\xb0?x\xc6c:\xd0CW\xe0\xbfS\xef\xa4\xfd\xd1\xddL\xcf\x1b5\xb2+\x1fX\xa1G\xea\x99\xc3\xa2\xdb\xbe[f\xac\x93i\xa4\xc1\xf2\xaf\x98\xbdo\xcb\xf4\xe1\vw\x87/\xba\xb9Q_.\x19\xc4\xd7s\xcd/d]\xbb\x17\xafZ\xaf\xc7\x1e\xfb\x8b\x1c\xe1\xf5#\xecZ\xd2\xa2\x1a\x0e\xd1M\xfd\xb0\x94\xf2*\xcdx\xb6XlOs+\xad\xea\xdc%*V\x034j\x9c6D1\xc3\x989R\xbfU\xce\xb8\xe3\x91\xcf\xd5\xb9L\xaf\xd4S\x93\x81\x04\xb2\xad{\x91\xca\r\xca\x9a\'\xdf]\x80u\xb3\x82\x11\xc7\x9c\xe4\x84W\xd2Z \xa3U\x04\x1a\xf2\xf3\nn\xb6\x15\xc0<\x8f\xa2:I\x96\x83\xd7\xce%\x17\x9af\xa1\xe6\x98X\x90\fM\x18\xad{\xf1\xe7\xe1\xc3zHB@\xa0Vt\xe6\xcc\xe3\xcb\xe3\x8bJY\x1e\xbe\xb8\x14\xc4,\xf8\xabhQ\xc94\xbfm+\xb0\x90\xa7\xd4\xfa,W\xa4\xfd8m\xfd\x97\x87$\x85~\xc0\x96h!\x9d\xbc\xb5\xa3^\xce\xe30rW\xa9\xf3\xe5\xfa\x8b\x02\xeaB2P\x85\x0e\xa9\xc6\xf06\xe2,\rg\xe3w[\x15=\x86\xac\n0\xb6\x02/\xf4n\xd5\xdf\xb8\xed\xd3\xdd\x81\xbd\x0e\a\xd7>\x04\xcc\x18\xeb^ \x87\xad\x88\xf4I\x1d\x7f\xf63\x0e\x93\xc1k\xb7\xe2\v\x82\x16\xe5\x16w\xfeOD\xb3\xb33\x9a4\x87\x00\x00\x00\x00\x00\xd2I\x9a[o\n\x12w\xd3\x93\x82\x9d\x967\xc3\x89-\xe6}B\xaf\xf6\x86\xb7\xff\xc3\x0f\xf3\x19.!v\x1a\x81\x1b\xf1\xec\x89\xdb\x96.w8\xd1xP\xb3Jz\\\x18\xb9)(\xa0\xb7e\xcb\x15\x90\x91a\x02\x1c \x10\x8e\xf7\xcb\n\xceY1x\x9asd$\\\xcfY1\x03\xbc\xae\xc0\x80\xc3Wm\xee\x90\xa3\x95\xa3\x05C=\xf7\x85\xa7\xed\xceH\xe0\xb8\x86\xc0\xd8>\x95\xe6$\xfa\xe3\a\xd9\xac\x14L*a\xcau\xb5*t\xa3\xc2\x14\b\t\xb9 \x97\x9d\"\xf9\xcdm;\x11\xb9\xf1\x9b\x05\r8h$\xf0\x17OzG\x98\xd5\xae\x96\x16\xea\x13-\x1c\x89\x12\x8d\x1fQ\xe7O\x97\xde\x98\x0f\xf8\xb0\b\x19\x01\x9dR,82!\xc0z\xe6O\xf6+\x9df\x99\xd3\x8f\xe5\xe4\x95\x9d\x92\xbf$\x149\xeb\xd5', 0x7fffffff) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) 949.29304ms ago: executing program 2 (id=393): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB, @ANYRES16=r0, @ANYBLOB="536849a90d99397ef8e3b5b48f82762d69f952b1ebfe17af27040606905242a91b0a5ba04ac090beecdca7662bff31e9588cd3bff341d4446f2b32063782", @ANYRES32=r0, @ANYRESDEC=r0], 0x88}}, 0x200800c5) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001d40)='/proc/misc\x00', 0xa182, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x541142, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x38100, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) bpf$auto(0x400007, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x3, 0xa) getsockopt$auto(r3, 0x0, 0x33, 0x0, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) r4 = socket(0x1d, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(r1, 0x0, 0x8ed) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00!\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000c7f24efe7e", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x890) 251.556626ms ago: executing program 0 (id=394): process_madvise$auto_MADV_COLLAPSE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000340)="5acda7999110269cb324a1e5b5dc798b77bf96ad938a51d401ace51b0c80419f1f671e70112f7c1587d8e6708a78150e7ab982998c8af10d07efd57870b8204473a3d6fc2d4ef2842ab3e1aa95d51f370a", 0xff}, 0x4, 0x19, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB="1100af"], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 107.64441ms ago: executing program 1 (id=395): r0 = fcntl$auto_F_RDLCK(0xffffffffffffffff, 0x7ff, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = getpgid$auto(0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nicvf0\x00', 0x0}) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x1c4, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY_CAPS={0x177, 0x18, 0x0, 0x1, [@nested={0x77, 0x9a, 0x0, 0x1, [@generic="0c5063f272e78f", @typed={0x8, 0x4c, 0x0, 0x0, @pid=r2}, @generic="e98d0ae5b8ce06abc04f7e7002961a97b0f1b5bcd4b5bb20b35b0a3f74c5c9fe522d10b2dc7e5b66f76c50511a1dafa063a4c9ceafd1b418c49097551d7b6ec28500cc101b57d3da7c8d055f7e0c93f01d82f4ed5ed7d453816caa24289afb39b6ce8e93"]}, @generic="89d18f3992d62036d48ffa1b2f9cd212d782a7f3d074a75dcf8b987a89753ff4bdf588e009b710731af9b6a6effa29b6cf38eb54529db240f02d470694aea17e1e9ed7c4a547a874de0d996f8093137e3a3f67c2cbdd0f48935f7b2d4a7ac5b6f0099ce20893f91a21f30bccb064326560aae916989cd5144a888c2f6b5b69019079db2890ca6aafea69ced51e274a2d3e055cca7fb0210b01126305c6743d683f6e45ca7dae", @typed={0x8, 0x120, 0x0, 0x0, @fd}, @nested={0x46, 0x11f, 0x0, 0x1, [@generic="4bc88a708e5f6703513fe3c2e35768bf7bbfec0135470bb3f3c0a9f298f6e2a33b3f", @nested={0x4, 0x3d}, @nested={0x4, 0x49}, @typed={0x16, 0x48, 0x0, 0x0, @str='/dev/input/event0\x00'}]}, @generic="c8def81314"]}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0x7}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x5}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0xe}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}]}, 0x1c4}}, 0x40001) mmap$auto(0x3, 0x8001, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x880080, 0x0) bpf$auto(0x40000e, &(0x7f00000002c0)=@bpf_attr_4={0x2, r5, 0x1, r5}, 0x5) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) r6 = open(0x0, 0x222ac2, 0x5d745cb200ae4d73) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/oom_adj\x00', 0x4000, 0x0) read$auto(r7, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0) mmap$auto(0x0, 0x4, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8002008000) read$auto(r8, 0x0, 0xf30) write$auto(0x3, 0x0, 0xffd8) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0956feb11fa823ac510530d808002bbd7000fc606ebb000000006b7cdbdf000000000000000000070000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/kvm/guest_mode\x00', 0x100, 0x0) writev$auto(r9, &(0x7f0000000200)={0x0, 0x7}, 0x3) r10 = gettid() openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x0) r11 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/7u\x00', 0x900, 0x0) read$auto_mon_fops_text_t_mon_text(r11, 0x0, 0x0) kill$auto(r10, 0x11) 0s ago: executing program 0 (id=396): mmap$auto(0x2, 0x401, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) clock_nanosleep$auto(0x1ff, 0x54, 0x0, 0x0) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0x4c00000072, 0x8b72, 0x1000000002, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xf00, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) socket(0xa, 0x2, 0x8) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r5, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x101}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) io_uring_setup$auto(0x8, 0x0) r6 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r6, &(0x7f0000001a00)=""/4097, 0x1001) ioctl$auto_IMADDTIMER(r6, 0x80044940, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 98.439093][ T5818] cgroup: Unknown subsys name 'net' [ 98.555545][ T5818] cgroup: Unknown subsys name 'cpuset' [ 98.565051][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.499126][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.187105][ T10] cfg80211: failed to load regulatory.db [ 102.906237][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.940748][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.948729][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.967367][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.977178][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.981409][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.986873][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.999814][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.999936][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.008108][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.018048][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.021234][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.029266][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.037370][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.044412][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.051690][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.057196][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.063510][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.088111][ T5140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.100258][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.608066][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 103.891010][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 103.941637][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 103.983120][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.991435][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.998877][ T5832] bridge_slave_0: entered allmulticast mode [ 104.006946][ T5832] bridge_slave_0: entered promiscuous mode [ 104.015706][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 104.043982][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.051400][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.058644][ T5832] bridge_slave_1: entered allmulticast mode [ 104.066432][ T5832] bridge_slave_1: entered promiscuous mode [ 104.220198][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.253271][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.260665][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.267952][ T5829] bridge_slave_0: entered allmulticast mode [ 104.276284][ T5829] bridge_slave_0: entered promiscuous mode [ 104.286374][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.333405][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.340984][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.348341][ T5829] bridge_slave_1: entered allmulticast mode [ 104.356930][ T5829] bridge_slave_1: entered promiscuous mode [ 104.385427][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.393068][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.400762][ T5838] bridge_slave_0: entered allmulticast mode [ 104.408263][ T5838] bridge_slave_0: entered promiscuous mode [ 104.435087][ T5832] team0: Port device team_slave_0 added [ 104.455649][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.463137][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.471248][ T5838] bridge_slave_1: entered allmulticast mode [ 104.478749][ T5838] bridge_slave_1: entered promiscuous mode [ 104.503670][ T5832] team0: Port device team_slave_1 added [ 104.569099][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.586089][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.610865][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.618058][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.625881][ T5835] bridge_slave_0: entered allmulticast mode [ 104.633545][ T5835] bridge_slave_0: entered promiscuous mode [ 104.677871][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.686174][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.712996][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.725045][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.732973][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.740378][ T5835] bridge_slave_1: entered allmulticast mode [ 104.748074][ T5835] bridge_slave_1: entered promiscuous mode [ 104.757984][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.797928][ T5829] team0: Port device team_slave_0 added [ 104.804851][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.812033][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.839084][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.882016][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.913115][ T5829] team0: Port device team_slave_1 added [ 104.985941][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.999056][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.013156][ T5838] team0: Port device team_slave_0 added [ 105.068589][ T5838] team0: Port device team_slave_1 added [ 105.075610][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.083049][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.109833][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.122911][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.130692][ T55] Bluetooth: hci2: command tx timeout [ 105.136483][ T55] Bluetooth: hci3: command tx timeout [ 105.136624][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.142056][ T5833] Bluetooth: hci1: command tx timeout [ 105.142721][ T5836] Bluetooth: hci0: command tx timeout [ 105.173812][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.202650][ T5832] hsr_slave_0: entered promiscuous mode [ 105.209937][ T5832] hsr_slave_1: entered promiscuous mode [ 105.292798][ T5835] team0: Port device team_slave_0 added [ 105.304221][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.311834][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.338285][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.351820][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.358868][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.385821][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.408457][ T5835] team0: Port device team_slave_1 added [ 105.525872][ T5829] hsr_slave_0: entered promiscuous mode [ 105.533024][ T5829] hsr_slave_1: entered promiscuous mode [ 105.539335][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.547583][ T5829] Cannot create hsr debugfs directory [ 105.555567][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.562890][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.590714][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.619009][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.626291][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.652762][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.844776][ T5838] hsr_slave_0: entered promiscuous mode [ 105.855637][ T5838] hsr_slave_1: entered promiscuous mode [ 105.863247][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.870963][ T5838] Cannot create hsr debugfs directory [ 105.896519][ T5835] hsr_slave_0: entered promiscuous mode [ 105.903150][ T5835] hsr_slave_1: entered promiscuous mode [ 105.909425][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.917242][ T5835] Cannot create hsr debugfs directory [ 106.313783][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.327898][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.342240][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.365468][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.431008][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.452588][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.465061][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.508525][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.574346][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.587329][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.612956][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.625605][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.739352][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.753594][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.781319][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.795041][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.839148][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.953139][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.001042][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.026877][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.034390][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.046807][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.054112][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.075408][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.127602][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.164109][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.171410][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.191399][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.210381][ T5836] Bluetooth: hci0: command tx timeout [ 107.210576][ T5140] Bluetooth: hci3: command tx timeout [ 107.215972][ T5833] Bluetooth: hci2: command tx timeout [ 107.227177][ T55] Bluetooth: hci1: command tx timeout [ 107.246616][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.253829][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.264223][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.271456][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.325479][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.352981][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.360629][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.424277][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.473019][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.480556][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.525173][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.532441][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.036421][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.206893][ T5832] veth0_vlan: entered promiscuous mode [ 108.239337][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.256242][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.280482][ T5832] veth1_vlan: entered promiscuous mode [ 108.338006][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.404660][ T5829] veth0_vlan: entered promiscuous mode [ 108.456541][ T5835] veth0_vlan: entered promiscuous mode [ 108.464956][ T5829] veth1_vlan: entered promiscuous mode [ 108.475952][ T5832] veth0_macvtap: entered promiscuous mode [ 108.505005][ T5832] veth1_macvtap: entered promiscuous mode [ 108.513573][ T5835] veth1_vlan: entered promiscuous mode [ 108.575491][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.584644][ T5838] veth0_vlan: entered promiscuous mode [ 108.613435][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.628972][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.641151][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.651392][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.661474][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.685140][ T5838] veth1_vlan: entered promiscuous mode [ 108.696976][ T5829] veth0_macvtap: entered promiscuous mode [ 108.742374][ T5829] veth1_macvtap: entered promiscuous mode [ 108.758379][ T5835] veth0_macvtap: entered promiscuous mode [ 108.788115][ T5835] veth1_macvtap: entered promiscuous mode [ 108.828729][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.840812][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.852721][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.895374][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.906359][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.917812][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.945924][ T5838] veth0_macvtap: entered promiscuous mode [ 108.958068][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.967961][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.984154][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.993228][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.019160][ T5838] veth1_macvtap: entered promiscuous mode [ 109.039296][ T4579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.041571][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.062945][ T4579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.063964][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.082304][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.092959][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.104279][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.140957][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.152014][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.162524][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.173664][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.185450][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.216114][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.227835][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.232063][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.246291][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.256595][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.268147][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.291188][ T5833] Bluetooth: hci3: command tx timeout [ 109.291208][ T5836] Bluetooth: hci1: command tx timeout [ 109.291251][ T5836] Bluetooth: hci2: command tx timeout [ 109.296746][ T55] Bluetooth: hci0: command tx timeout [ 109.323913][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.334714][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.344791][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.357144][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.367099][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.379241][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.392775][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.436231][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.446863][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.458821][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.469511][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.479448][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.490135][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.502028][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.538463][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.547750][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.549002][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.575467][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.585071][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.646301][ T4579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.665068][ T4579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.775997][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.788559][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.835690][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.849159][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.936185][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.947283][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.989099][ T5898] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 109.999158][ T5898] Zero length message leads to an empty skb [ 110.015832][ T4579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.042039][ T5899] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.042577][ T4579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.111829][ T5899] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.140727][ T5899] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.191135][ T5899] netlink: 338 bytes leftover after parsing attributes in process `syz.2.3'. [ 110.253084][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.264427][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.326308][ T5904] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 110.740002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.870011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.318630][ T5927] ubi0: attaching mtd0 [ 111.347465][ T5927] ubi0: scanning is finished [ 111.382172][ T55] Bluetooth: hci2: command tx timeout [ 111.382247][ T5836] Bluetooth: hci0: command tx timeout [ 111.387639][ T55] Bluetooth: hci3: command tx timeout [ 111.393888][ T5140] Bluetooth: hci1: command tx timeout [ 111.422075][ T5927] ubi0: empty MTD device detected [ 111.431191][ T5927] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 111.608263][ T5910] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.908447][ T5927] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 112.181973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.201417][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.918506][ T5945] mmap: syz.0.13 (5945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 113.049737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 113.409805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.466571][ T5951] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 115.283556][ T5974] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 115.319961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.328040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.474326][ T5976] capability: warning: `syz.3.18' uses 32-bit capabilities (legacy support in use) [ 115.490298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.499113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 115.546028][ T5977] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 115.570732][ T5976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18'. [ 115.598634][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18'. [ 115.787733][ T5976] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 117.214363][ T5988] netlink: 342 bytes leftover after parsing attributes in process `syz.3.21'. [ 117.589970][ T6008] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 117.655324][ T6004] sctp: [Deprecated]: syz.0.25 (pid 6004) Use of int in max_burst socket option deprecated. [ 117.655324][ T6004] Use struct sctp_assoc_value instead [ 118.888912][ T5986] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 118.919654][ T5986] netlink: 230 bytes leftover after parsing attributes in process `syz.3.21'. [ 118.974467][ T5986] team0: Port device team_slave_1 removed [ 120.310509][ T6025] netlink: 20 bytes leftover after parsing attributes in process `syz.0.29'. [ 120.496195][ T6030] netlink: 186 bytes leftover after parsing attributes in process `syz.3.32'. [ 120.560468][ T6012] vivid-003: ================= START STATUS ================= [ 120.568907][ T6012] vivid-003: Radio HW Seek Mode: Bounded [ 120.619253][ T6025] syz.0.29 (6025) used greatest stack depth: 19032 bytes left [ 120.634566][ T6012] vivid-003: Radio Programmable HW Seek: false [ 120.640976][ T6012] vivid-003: RDS Rx I/O Mode: Block I/O [ 120.646709][ T6012] vivid-003: Generate RBDS Instead of RDS: false [ 120.699992][ T6012] vivid-003: RDS Reception: true [ 120.809703][ T6012] vivid-003: RDS Program Type: 0 inactive [ 120.855300][ T6012] vivid-003: RDS PS Name: inactive [ 120.890411][ T6012] vivid-003: RDS Radio Text: inactive [ 120.896328][ T6031] tipc: Started in network mode [ 120.909618][ T6031] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 120.916649][ T6012] vivid-003: RDS Traffic Announcement: false inactive [ 120.937735][ T6031] tipc: Node number set to 2387504917 [ 120.976464][ T6012] vivid-003: RDS Traffic Program: false inactive [ 121.038778][ T6012] vivid-003: RDS Music: false inactive [ 121.145214][ T6012] vivid-003: ================== END STATUS ================== [ 126.167602][ T6107] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 127.039863][ T6115] binder: 6106:6115 ioctl c018620c 0 returned -1 [ 128.203435][ T6134] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 128.256162][ T6135] ubi0: attaching mtd0 [ 128.288349][ T6135] ubi0: scanning is finished [ 128.311315][ T6135] ubi0: empty MTD device detected [ 128.626867][ T6145] FAULT_INJECTION: forcing a failure. [ 128.626867][ T6145] name failslab, interval 1, probability 0, space 0, times 1 [ 128.688020][ T6145] CPU: 1 UID: 0 PID: 6145 Comm: syz.1.57 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 128.688072][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.688094][ T6145] Call Trace: [ 128.688104][ T6145] [ 128.688118][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 128.688172][ T6145] should_fail_ex+0x512/0x640 [ 128.688224][ T6145] should_failslab+0xc2/0x120 [ 128.688263][ T6145] __kmalloc_cache_noprof+0x6a/0x3e0 [ 128.688295][ T6145] ? proc_thread_self_get_link+0x1c6/0x240 [ 128.688331][ T6145] proc_thread_self_get_link+0x1c6/0x240 [ 128.688365][ T6145] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 128.688396][ T6145] step_into+0x19e7/0x2270 [ 128.688451][ T6145] ? __pfx_step_into+0x10/0x10 [ 128.688506][ T6145] ? lookup_fast+0x156/0x610 [ 128.688557][ T6145] walk_component+0xfc/0x5b0 [ 128.688608][ T6145] link_path_walk.part.0.constprop.0+0x685/0xd60 [ 128.688701][ T6145] path_openat+0x227/0x2d40 [ 128.688728][ T6145] ? __x64_sys_openat+0x174/0x210 [ 128.688789][ T6145] ? __pfx_path_openat+0x10/0x10 [ 128.688831][ T6145] do_filp_open+0x20b/0x470 [ 128.688864][ T6145] ? __pfx_do_filp_open+0x10/0x10 [ 128.688929][ T6145] ? alloc_fd+0x471/0x7d0 [ 128.688971][ T6145] do_sys_openat2+0x11b/0x1d0 [ 128.689016][ T6145] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.689087][ T6145] __x64_sys_openat+0x174/0x210 [ 128.689133][ T6145] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.689180][ T6145] ? rcu_is_watching+0x12/0xc0 [ 128.689224][ T6145] do_syscall_64+0xcd/0x230 [ 128.689275][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.689307][ T6145] RIP: 0033:0x7f8c6d38d2d0 [ 128.689332][ T6145] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 128.689369][ T6145] RSP: 002b:00007f8c6e286fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 128.689398][ T6145] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f8c6d38d2d0 [ 128.689417][ T6145] RDX: 0000000000000002 RSI: 00007f8c6d410d96 RDI: 00000000ffffff9c [ 128.689435][ T6145] RBP: 00007f8c6d410d96 R08: 0000000000000000 R09: 00007f8c6e288000 [ 128.689455][ T6145] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 128.689477][ T6145] R13: 0000000000000000 R14: 00007f8c6d5b5fa0 R15: 00007ffe5ddb0cc8 [ 128.689516][ T6145] [ 129.054746][ T6145] FAULT_INJECTION: forcing a failure. [ 129.054746][ T6145] name failslab, interval 1, probability 0, space 0, times 0 [ 129.057620][ T6135] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 129.159958][ T6145] CPU: 0 UID: 0 PID: 6145 Comm: syz.1.57 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 129.160002][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.160020][ T6145] Call Trace: [ 129.160031][ T6145] [ 129.160043][ T6145] dump_stack_lvl+0x16c/0x1f0 [ 129.160095][ T6145] should_fail_ex+0x512/0x640 [ 129.160141][ T6145] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 129.160183][ T6145] should_failslab+0xc2/0x120 [ 129.160225][ T6145] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 129.160266][ T6145] ? __d_alloc+0x31/0xaa0 [ 129.160307][ T6145] __d_alloc+0x31/0xaa0 [ 129.160346][ T6145] d_alloc_pseudo+0x1c/0xc0 [ 129.160390][ T6145] alloc_file_pseudo+0xcf/0x230 [ 129.160435][ T6145] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 129.160480][ T6145] ? alloc_fd+0x471/0x7d0 [ 129.160515][ T6145] sock_alloc_file+0x50/0x210 [ 129.160560][ T6145] __sys_socket+0x1c0/0x260 [ 129.160606][ T6145] ? fput+0x70/0xf0 [ 129.160643][ T6145] ? __pfx___sys_socket+0x10/0x10 [ 129.160690][ T6145] ? ksys_write+0x1b9/0x240 [ 129.160722][ T6145] ? __pfx_ksys_write+0x10/0x10 [ 129.160751][ T6145] ? rcu_is_watching+0x12/0xc0 [ 129.160790][ T6145] __x64_sys_socket+0x72/0xb0 [ 129.160837][ T6145] ? lockdep_hardirqs_on+0x7c/0x110 [ 129.160881][ T6145] do_syscall_64+0xcd/0x230 [ 129.160943][ T6145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.160978][ T6145] RIP: 0033:0x7f8c6d38e969 [ 129.161002][ T6145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.161033][ T6145] RSP: 002b:00007f8c6e287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 129.161063][ T6145] RAX: ffffffffffffffda RBX: 00007f8c6d5b5fa0 RCX: 00007f8c6d38e969 [ 129.161083][ T6145] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 129.161102][ T6145] RBP: 00007f8c6e287090 R08: 0000000000000000 R09: 0000000000000000 [ 129.161121][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.161140][ T6145] R13: 0000000000000000 R14: 00007f8c6d5b5fa0 R15: 00007ffe5ddb0cc8 [ 129.161181][ T6145] [ 129.381806][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.895280][ T6157] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 130.270369][ T6150] FAULT_INJECTION: forcing a failure. [ 130.270369][ T6150] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 130.311271][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.3.56 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 130.311303][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.311316][ T6150] Call Trace: [ 130.311323][ T6150] [ 130.311332][ T6150] dump_stack_lvl+0x16c/0x1f0 [ 130.311370][ T6150] should_fail_ex+0x512/0x640 [ 130.311408][ T6150] core_sys_select+0x4b2/0xbe0 [ 130.311451][ T6150] ? __pfx_core_sys_select+0x10/0x10 [ 130.311492][ T6150] ? proc_fail_nth_write+0x9f/0x250 [ 130.311549][ T6150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 130.311591][ T6150] kern_select+0x15d/0x1e0 [ 130.311625][ T6150] ? __pfx_kern_select+0x10/0x10 [ 130.311664][ T6150] ? __pfx_ksys_write+0x10/0x10 [ 130.311685][ T6150] ? rcu_is_watching+0x12/0xc0 [ 130.311711][ T6150] __x64_sys_select+0xbd/0x160 [ 130.311729][ T6150] ? do_syscall_64+0x91/0x230 [ 130.311761][ T6150] ? lockdep_hardirqs_on+0x7c/0x110 [ 130.311792][ T6150] do_syscall_64+0xcd/0x230 [ 130.311835][ T6150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.311858][ T6150] RIP: 0033:0x7f850378e969 [ 130.311876][ T6150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.311898][ T6150] RSP: 002b:00007f850463a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 130.311918][ T6150] RAX: ffffffffffffffda RBX: 00007f85039b5fa0 RCX: 00007f850378e969 [ 130.311933][ T6150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 130.311946][ T6150] RBP: 00007f850463a090 R08: 0000000000000000 R09: 0000000000000000 [ 130.311960][ T6150] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 130.311973][ T6150] R13: 0000000000000000 R14: 00007f85039b5fa0 R15: 00007ffcf1a51d98 [ 130.312002][ T6150] [ 130.724732][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.60'. [ 132.503306][ T6179] netlink: 146 bytes leftover after parsing attributes in process `syz.3.62'. [ 133.869705][ T6201] netlink: 16 bytes leftover after parsing attributes in process `syz.1.70'. [ 133.918592][ T6205] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 133.966567][ T6201] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 134.167933][ T6191] Invalid ELF header magic: != ELF [ 134.360223][ T6197] mkiss: ax0: crc mode is auto. [ 134.567260][ T6208] FAULT_INJECTION: forcing a failure. [ 134.567260][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 134.593238][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.1.71 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 134.593287][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.593306][ T6208] Call Trace: [ 134.593317][ T6208] [ 134.593331][ T6208] dump_stack_lvl+0x16c/0x1f0 [ 134.593387][ T6208] should_fail_ex+0x512/0x640 [ 134.593436][ T6208] ? fs_reclaim_acquire+0xae/0x150 [ 134.593493][ T6208] should_failslab+0xc2/0x120 [ 134.593537][ T6208] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 134.593582][ T6208] ? ima_alloc_tfm+0x21a/0x2e0 [ 134.593609][ T6208] ? ima_collect_measurement+0x4b5/0xa40 [ 134.593653][ T6208] krealloc_noprof+0x1fb/0x380 [ 134.593699][ T6208] ima_collect_measurement+0x4b5/0xa40 [ 134.593750][ T6208] ? __pfx_ima_collect_measurement+0x10/0x10 [ 134.593817][ T6208] ? do_raw_read_unlock+0x44/0xe0 [ 134.593882][ T6208] ? vfs_getxattr_alloc+0xec/0x340 [ 134.593923][ T6208] ? ima_get_hash_algo+0x27c/0x400 [ 134.593972][ T6208] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 134.594031][ T6208] ? process_measurement+0x11fa/0x23e0 [ 134.594093][ T6208] process_measurement+0x11fa/0x23e0 [ 134.594163][ T6208] ? __pfx_process_measurement+0x10/0x10 [ 134.594215][ T6208] ? __lock_acquire+0x5ca/0x1ba0 [ 134.594266][ T6208] ? futex_wait_queue+0x24/0x220 [ 134.594361][ T6208] ? mtree_load+0x325/0xa40 [ 134.594419][ T6208] ima_file_mmap+0x1b1/0x1d0 [ 134.594473][ T6208] ? __pfx_ima_file_mmap+0x10/0x10 [ 134.594538][ T6208] security_mmap_file+0x88c/0x990 [ 134.594588][ T6208] __do_sys_remap_file_pages+0x2e2/0xac0 [ 134.594655][ T6208] ? __pfx___might_resched+0x10/0x10 [ 134.594696][ T6208] ? __pfx___do_sys_remap_file_pages+0x10/0x10 [ 134.594751][ T6208] ? __x64_sys_futex+0x1e0/0x4c0 [ 134.594793][ T6208] ? xfd_validate_state+0x5d/0x180 [ 134.594828][ T6208] ? rcu_is_watching+0x12/0xc0 [ 134.594872][ T6208] do_syscall_64+0xcd/0x230 [ 134.594928][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.594962][ T6208] RIP: 0033:0x7f8c6d38e969 [ 134.594989][ T6208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.595022][ T6208] RSP: 002b:00007f8c6e287038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 134.595054][ T6208] RAX: ffffffffffffffda RBX: 00007f8c6d5b5fa0 RCX: 00007f8c6d38e969 [ 134.595083][ T6208] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000006a2b [ 134.595104][ T6208] RBP: 00007f8c6d410ab1 R08: 0000000000010000 R09: 0000000000000000 [ 134.595124][ T6208] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 134.595145][ T6208] R13: 0000000000000000 R14: 00007f8c6d5b5fa0 R15: 00007ffe5ddb0cc8 [ 134.595189][ T6208] [ 134.609721][ T30] audit: type=1800 audit(1747344657.851:2): pid=6208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.71" name="dev/zero" dev="tmpfs" ino=1062 res=0 errno=0 [ 135.549241][ T6225] netlink: 146 bytes leftover after parsing attributes in process `syz.2.75'. [ 136.749094][ T6240] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 136.771128][ T6240] CPU: 1 UID: 0 PID: 6240 Comm: syz.1.80 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 136.771175][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.771194][ T6240] Call Trace: [ 136.771204][ T6240] [ 136.771217][ T6240] dump_stack_lvl+0x16c/0x1f0 [ 136.771273][ T6240] sysfs_warn_dup+0x7f/0xa0 [ 136.771328][ T6240] sysfs_do_create_link_sd+0x124/0x140 [ 136.771387][ T6240] sysfs_create_link+0x61/0xc0 [ 136.771442][ T6240] device_add+0x62c/0x1a70 [ 136.771495][ T6240] ? __pfx_device_add+0x10/0x10 [ 136.771541][ T6240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.771590][ T6240] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 136.771654][ T6240] wiphy_register+0x1c9c/0x2850 [ 136.771692][ T6240] ? netdev_run_todo+0x864/0x1320 [ 136.771736][ T6240] ? __dev_printk+0x1c0/0x270 [ 136.771780][ T6240] ? __pfx_wiphy_register+0x10/0x10 [ 136.771854][ T6240] ieee80211_register_hw+0x2432/0x4020 [ 136.771909][ T6240] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 136.771953][ T6240] ? find_held_lock+0x2b/0x80 [ 136.771988][ T6240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 136.772044][ T6240] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 136.772085][ T6240] ? __hrtimer_setup+0x176/0x280 [ 136.772138][ T6240] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 136.772211][ T6240] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 136.772256][ T6240] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 136.772311][ T6240] ? __asan_memcpy+0x3c/0x60 [ 136.772349][ T6240] hwsim_new_radio_nl+0xb51/0x12c0 [ 136.772407][ T6240] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 136.772475][ T6240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 136.772528][ T6240] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 136.772590][ T6240] genl_family_rcv_msg_doit+0x206/0x2f0 [ 136.772645][ T6240] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 136.772697][ T6240] ? trace_cap_capable+0x18d/0x200 [ 136.772745][ T6240] ? bpf_lsm_capable+0x9/0x10 [ 136.772779][ T6240] ? security_capable+0x7e/0x260 [ 136.772815][ T6240] ? ns_capable+0xd7/0x110 [ 136.772855][ T6240] genl_rcv_msg+0x55c/0x800 [ 136.772911][ T6240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.772959][ T6240] ? __pfx___dev_queue_xmit+0x10/0x10 [ 136.772990][ T6240] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 136.773057][ T6240] ? __lock_acquire+0xaa4/0x1ba0 [ 136.773107][ T6240] netlink_rcv_skb+0x16d/0x440 [ 136.773151][ T6240] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.773205][ T6240] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.773274][ T6240] ? __pfx_down_read+0x10/0x10 [ 136.773307][ T6240] ? netlink_deliver_tap+0x1ae/0xd30 [ 136.773354][ T6240] genl_rcv+0x28/0x40 [ 136.773399][ T6240] netlink_unicast+0x53a/0x7f0 [ 136.773448][ T6240] ? __pfx_netlink_unicast+0x10/0x10 [ 136.773488][ T6240] ? __lock_acquire+0xaa4/0x1ba0 [ 136.773549][ T6240] netlink_sendmsg+0x8d1/0xdd0 [ 136.773600][ T6240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.773662][ T6240] ____sys_sendmsg+0xa98/0xc70 [ 136.773714][ T6240] ? copy_msghdr_from_user+0x10a/0x160 [ 136.773754][ T6240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.773812][ T6240] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 136.773872][ T6240] ___sys_sendmsg+0x134/0x1d0 [ 136.773914][ T6240] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.774011][ T6240] __sys_sendmsg+0x16d/0x220 [ 136.774061][ T6240] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.774102][ T6240] ? __x64_sys_futex+0x1e0/0x4c0 [ 136.774152][ T6240] ? rcu_is_watching+0x12/0xc0 [ 136.774198][ T6240] do_syscall_64+0xcd/0x230 [ 136.774252][ T6240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.774284][ T6240] RIP: 0033:0x7f8c6d38e969 [ 136.774310][ T6240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.774343][ T6240] RSP: 002b:00007f8c6e287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.774373][ T6240] RAX: ffffffffffffffda RBX: 00007f8c6d5b5fa0 RCX: 00007f8c6d38e969 [ 136.774395][ T6240] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 136.774416][ T6240] RBP: 00007f8c6d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 136.774436][ T6240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.774455][ T6240] R13: 0000000000000000 R14: 00007f8c6d5b5fa0 R15: 00007ffe5ddb0cc8 [ 136.774501][ T6240] [ 138.043748][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.050454][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.533811][ T6293] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 141.680922][ T6296] FAULT_INJECTION: forcing a failure. [ 141.680922][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 141.738530][ T6296] CPU: 1 UID: 0 PID: 6296 Comm: syz.2.92 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 141.738576][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.738594][ T6296] Call Trace: [ 141.738604][ T6296] [ 141.738616][ T6296] dump_stack_lvl+0x16c/0x1f0 [ 141.738670][ T6296] should_fail_ex+0x512/0x640 [ 141.738719][ T6296] should_failslab+0xc2/0x120 [ 141.738760][ T6296] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 141.738800][ T6296] ? skb_clone+0x190/0x3f0 [ 141.738844][ T6296] skb_clone+0x190/0x3f0 [ 141.738883][ T6296] netlink_deliver_tap+0xabd/0xd30 [ 141.738931][ T6296] netlink_unicast+0x6b2/0x7f0 [ 141.738980][ T6296] ? __pfx_netlink_unicast+0x10/0x10 [ 141.739024][ T6296] ? ethnl_put_bitset+0x2e/0x60 [ 141.739064][ T6296] ethnl_set_features+0x9e1/0xd00 [ 141.739117][ T6296] ? __pfx_ethnl_set_features+0x10/0x10 [ 141.739164][ T6296] ? __pfx___nla_validate_parse+0x10/0x10 [ 141.739207][ T6296] ? rcu_is_watching+0x12/0xc0 [ 141.739241][ T6296] ? __nla_parse+0x40/0x60 [ 141.739279][ T6296] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 141.739342][ T6296] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 141.739401][ T6296] genl_family_rcv_msg_doit+0x206/0x2f0 [ 141.739449][ T6296] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 141.739499][ T6296] ? trace_cap_capable+0x18d/0x200 [ 141.739543][ T6296] ? bpf_lsm_capable+0x9/0x10 [ 141.739577][ T6296] ? security_capable+0x7e/0x260 [ 141.739612][ T6296] ? ns_capable+0xd7/0x110 [ 141.739648][ T6296] genl_rcv_msg+0x55c/0x800 [ 141.739697][ T6296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.739739][ T6296] ? __pfx___dev_queue_xmit+0x10/0x10 [ 141.739768][ T6296] ? __pfx_ethnl_set_features+0x10/0x10 [ 141.739815][ T6296] ? __lock_acquire+0xaa4/0x1ba0 [ 141.739862][ T6296] netlink_rcv_skb+0x16d/0x440 [ 141.739901][ T6296] ? __pfx_genl_rcv_msg+0x10/0x10 [ 141.739948][ T6296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.740008][ T6296] ? __pfx_down_read+0x10/0x10 [ 141.740037][ T6296] ? netlink_deliver_tap+0x1ae/0xd30 [ 141.740081][ T6296] genl_rcv+0x28/0x40 [ 141.740119][ T6296] netlink_unicast+0x53a/0x7f0 [ 141.740162][ T6296] ? __pfx_netlink_unicast+0x10/0x10 [ 141.740198][ T6296] ? __lock_acquire+0xaa4/0x1ba0 [ 141.740246][ T6296] netlink_sendmsg+0x8d1/0xdd0 [ 141.740290][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.740353][ T6296] ____sys_sendmsg+0xa98/0xc70 [ 141.740400][ T6296] ? copy_msghdr_from_user+0x10a/0x160 [ 141.740435][ T6296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.740499][ T6296] ___sys_sendmsg+0x134/0x1d0 [ 141.740536][ T6296] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.740625][ T6296] __sys_sendmsg+0x16d/0x220 [ 141.740663][ T6296] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.740715][ T6296] ? rcu_is_watching+0x12/0xc0 [ 141.740757][ T6296] do_syscall_64+0xcd/0x230 [ 141.740809][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.740840][ T6296] RIP: 0033:0x7fa64858e969 [ 141.740865][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.740895][ T6296] RSP: 002b:00007fa64930e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.740924][ T6296] RAX: ffffffffffffffda RBX: 00007fa6487b5fa0 RCX: 00007fa64858e969 [ 141.740944][ T6296] RDX: 0000000024048084 RSI: 0000200000000440 RDI: 0000000000000003 [ 141.740963][ T6296] RBP: 00007fa64930e090 R08: 0000000000000000 R09: 0000000000000000 [ 141.740979][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.740994][ T6296] R13: 0000000000000000 R14: 00007fa6487b5fa0 R15: 00007ffdc30e7b18 [ 141.741028][ T6296] [ 142.128432][ T6286] vivid-003: ================= START STATUS ================= [ 142.137926][ T6286] vivid-003: Radio HW Seek Mode: Bounded [ 142.146329][ T6286] vivid-003: Radio Programmable HW Seek: false [ 142.198742][ T6286] vivid-003: RDS Rx I/O Mode: Block I/O [ 142.212353][ T6286] vivid-003: Generate RBDS Instead of RDS: false [ 142.221926][ T6286] vivid-003: RDS Reception: true [ 142.243459][ T6286] vivid-003: RDS Program Type: 0 inactive [ 142.286712][ T6286] vivid-003: RDS PS Name: inactive [ 142.377346][ T6286] vivid-003: RDS Radio Text: inactive [ 142.469622][ T6286] vivid-003: RDS Traffic Announcement: false inactive [ 142.543649][ T6286] vivid-003: RDS Traffic Program: false inactive [ 142.550572][ T6286] vivid-003: RDS Music: false inactive [ 142.556223][ T6286] vivid-003: ================== END STATUS ================== [ 145.413732][ T6343] vivid-003: ================= START STATUS ================= [ 145.523871][ T6343] vivid-003: Radio HW Seek Mode: Bounded [ 145.604482][ T6343] vivid-003: Radio Programmable HW Seek: false [ 145.645332][ T6343] vivid-003: RDS Rx I/O Mode: Block I/O [ 145.710713][ T6343] vivid-003: Generate RBDS Instead of RDS: false [ 145.795040][ T6343] vivid-003: RDS Reception: true [ 145.831994][ T6343] vivid-003: RDS Program Type: 0 inactive [ 145.913551][ T6343] vivid-003: RDS PS Name: inactive [ 145.989723][ T6343] vivid-003: RDS Radio Text: inactive [ 146.035857][ T6343] vivid-003: RDS Traffic Announcement: false inactive [ 146.101055][ T6343] vivid-003: RDS Traffic Program: false inactive [ 146.154714][ T6343] vivid-003: RDS Music: false inactive [ 146.225063][ T6343] vivid-003: ================== END STATUS ================== [ 146.763299][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.103'. [ 147.003527][ T6350] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 147.657942][ T6365] mkiss: ax0: crc mode is auto. [ 148.680953][ T6383] FAULT_INJECTION: forcing a failure. [ 148.680953][ T6383] name failslab, interval 1, probability 0, space 0, times 0 [ 148.885056][ T6383] CPU: 1 UID: 0 PID: 6383 Comm: syz.0.109 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 148.885090][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.885103][ T6383] Call Trace: [ 148.885111][ T6383] [ 148.885119][ T6383] dump_stack_lvl+0x16c/0x1f0 [ 148.885158][ T6383] should_fail_ex+0x512/0x640 [ 148.885191][ T6383] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 148.885222][ T6383] should_failslab+0xc2/0x120 [ 148.885251][ T6383] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 148.885278][ T6383] ? security_file_alloc+0x34/0x2b0 [ 148.885314][ T6383] security_file_alloc+0x34/0x2b0 [ 148.885346][ T6383] init_file+0x93/0x4c0 [ 148.885375][ T6383] alloc_empty_file+0x73/0x1e0 [ 148.885406][ T6383] alloc_file_pseudo+0x13a/0x230 [ 148.885444][ T6383] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 148.885475][ T6383] ? alloc_fd+0x471/0x7d0 [ 148.885500][ T6383] sock_alloc_file+0x50/0x210 [ 148.885612][ T6383] __sys_socket+0x1c0/0x260 [ 148.885651][ T6383] ? fput+0x70/0xf0 [ 148.885680][ T6383] ? __pfx___sys_socket+0x10/0x10 [ 148.885718][ T6383] ? ksys_write+0x1b9/0x240 [ 148.885740][ T6383] ? __pfx_ksys_write+0x10/0x10 [ 148.885761][ T6383] ? rcu_is_watching+0x12/0xc0 [ 148.885788][ T6383] __x64_sys_socket+0x72/0xb0 [ 148.885822][ T6383] ? lockdep_hardirqs_on+0x7c/0x110 [ 148.885854][ T6383] do_syscall_64+0xcd/0x230 [ 148.885890][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.885924][ T6383] RIP: 0033:0x7fdff878e969 [ 148.885946][ T6383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.885968][ T6383] RSP: 002b:00007fdff65d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 148.885989][ T6383] RAX: ffffffffffffffda RBX: 00007fdff89b6080 RCX: 00007fdff878e969 [ 148.886004][ T6383] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 148.886018][ T6383] RBP: 00007fdff65d5090 R08: 0000000000000000 R09: 0000000000000000 [ 148.886031][ T6383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.886049][ T6383] R13: 0000000000000000 R14: 00007fdff89b6080 R15: 00007fff230ae8f8 [ 148.886077][ T6383] [ 152.810956][ T6455] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 153.290024][ T6460] binder: 6452:6460 ioctl c018620c 0 returned -1 [ 154.164163][ T6479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.134'. [ 154.655360][ T6484] FAULT_INJECTION: forcing a failure. [ 154.655360][ T6484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.730972][ T6484] CPU: 1 UID: 0 PID: 6484 Comm: syz.2.136 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 154.731017][ T6484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.731036][ T6484] Call Trace: [ 154.731046][ T6484] [ 154.731058][ T6484] dump_stack_lvl+0x16c/0x1f0 [ 154.731110][ T6484] should_fail_ex+0x512/0x640 [ 154.731172][ T6484] _copy_from_iter+0x2a4/0x15b0 [ 154.731227][ T6484] ? __alloc_skb+0x200/0x380 [ 154.731263][ T6484] ? __pfx__copy_from_iter+0x10/0x10 [ 154.731315][ T6484] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 154.731356][ T6484] ? __lock_acquire+0xaa4/0x1ba0 [ 154.731408][ T6484] netlink_sendmsg+0x829/0xdd0 [ 154.731458][ T6484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 154.731516][ T6484] ____sys_sendmsg+0xa98/0xc70 [ 154.731566][ T6484] ? copy_msghdr_from_user+0x10a/0x160 [ 154.731604][ T6484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.731673][ T6484] ___sys_sendmsg+0x134/0x1d0 [ 154.731714][ T6484] ? __pfx____sys_sendmsg+0x10/0x10 [ 154.731805][ T6484] __sys_sendmsg+0x16d/0x220 [ 154.731844][ T6484] ? __pfx___sys_sendmsg+0x10/0x10 [ 154.731898][ T6484] ? rcu_is_watching+0x12/0xc0 [ 154.731941][ T6484] do_syscall_64+0xcd/0x230 [ 154.731989][ T6484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.732022][ T6484] RIP: 0033:0x7fa64858e969 [ 154.732047][ T6484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.732077][ T6484] RSP: 002b:00007fa64930e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 154.732106][ T6484] RAX: ffffffffffffffda RBX: 00007fa6487b5fa0 RCX: 00007fa64858e969 [ 154.732134][ T6484] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000004 [ 154.732154][ T6484] RBP: 00007fa64930e090 R08: 0000000000000000 R09: 0000000000000000 [ 154.732173][ T6484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.732192][ T6484] R13: 0000000000000000 R14: 00007fa6487b5fa0 R15: 00007ffdc30e7b18 [ 154.732234][ T6484] [ 155.799193][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.140'. [ 155.995740][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.062749][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.228182][ T6494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.235752][ T6494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.893193][ T6509] FAULT_INJECTION: forcing a failure. [ 156.893193][ T6509] name failslab, interval 1, probability 0, space 0, times 0 [ 156.933637][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.0.143 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 156.933681][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.933699][ T6509] Call Trace: [ 156.933709][ T6509] [ 156.933721][ T6509] dump_stack_lvl+0x16c/0x1f0 [ 156.933775][ T6509] should_fail_ex+0x512/0x640 [ 156.933823][ T6509] ? fs_reclaim_acquire+0xae/0x150 [ 156.933876][ T6509] ? tomoyo_encode2+0x100/0x3e0 [ 156.933922][ T6509] should_failslab+0xc2/0x120 [ 156.933963][ T6509] __kmalloc_noprof+0xd2/0x510 [ 156.934008][ T6509] tomoyo_encode2+0x100/0x3e0 [ 156.934061][ T6509] tomoyo_encode+0x29/0x50 [ 156.934105][ T6509] tomoyo_realpath_from_path+0x18f/0x6e0 [ 156.934164][ T6509] tomoyo_check_open_permission+0x2ab/0x3c0 [ 156.934210][ T6509] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 156.934298][ T6509] ? find_held_lock+0x2b/0x80 [ 156.934343][ T6509] tomoyo_file_open+0x6b/0x90 [ 156.934377][ T6509] security_file_open+0x84/0x1e0 [ 156.934431][ T6509] do_dentry_open+0x596/0x1c10 [ 156.934480][ T6509] vfs_open+0x82/0x3f0 [ 156.934530][ T6509] path_openat+0x1e5e/0x2d40 [ 156.934586][ T6509] ? __pfx_path_openat+0x10/0x10 [ 156.934633][ T6509] do_filp_open+0x20b/0x470 [ 156.934672][ T6509] ? __pfx_do_filp_open+0x10/0x10 [ 156.934720][ T6509] ? __pfx_kfree_link+0x10/0x10 [ 156.934778][ T6509] ? alloc_fd+0x471/0x7d0 [ 156.934819][ T6509] do_sys_openat2+0x11b/0x1d0 [ 156.934865][ T6509] ? __pfx_do_sys_openat2+0x10/0x10 [ 156.934928][ T6509] __x64_sys_openat+0x174/0x210 [ 156.934976][ T6509] ? __pfx___x64_sys_openat+0x10/0x10 [ 156.935025][ T6509] ? rcu_is_watching+0x12/0xc0 [ 156.935069][ T6509] do_syscall_64+0xcd/0x230 [ 156.935123][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.935155][ T6509] RIP: 0033:0x7fdff878d2d0 [ 156.935180][ T6509] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 156.935210][ T6509] RSP: 002b:00007fdff65f5fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 156.935240][ T6509] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fdff878d2d0 [ 156.935260][ T6509] RDX: 0000000000000002 RSI: 00007fdff8810d96 RDI: 00000000ffffff9c [ 156.935279][ T6509] RBP: 00007fdff8810d96 R08: 0000000000000000 R09: 00007fdff950a000 [ 156.935299][ T6509] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 156.935317][ T6509] R13: 0000000000000000 R14: 00007fdff89b5fa0 R15: 00007fff230ae8f8 [ 156.935360][ T6509] [ 156.935464][ T6509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.249946][ T6509] FAULT_INJECTION: forcing a failure. [ 157.249946][ T6509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.374638][ T6509] CPU: 1 UID: 0 PID: 6509 Comm: syz.0.143 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 157.374683][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.374701][ T6509] Call Trace: [ 157.374711][ T6509] [ 157.374723][ T6509] dump_stack_lvl+0x16c/0x1f0 [ 157.374785][ T6509] should_fail_ex+0x512/0x640 [ 157.374838][ T6509] _copy_to_user+0x32/0xd0 [ 157.374893][ T6509] simple_read_from_buffer+0xcb/0x170 [ 157.374947][ T6509] proc_fail_nth_read+0x197/0x270 [ 157.374996][ T6509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.375045][ T6509] ? rw_verify_area+0xcf/0x680 [ 157.375093][ T6509] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 157.375139][ T6509] vfs_read+0x1de/0xc70 [ 157.375177][ T6509] ? __pfx___mutex_lock+0x10/0x10 [ 157.375225][ T6509] ? __pfx_vfs_read+0x10/0x10 [ 157.375269][ T6509] ? __fget_files+0x20e/0x3c0 [ 157.375310][ T6509] ksys_read+0x12a/0x240 [ 157.375341][ T6509] ? __pfx_ksys_read+0x10/0x10 [ 157.375370][ T6509] ? rcu_is_watching+0x12/0xc0 [ 157.375412][ T6509] do_syscall_64+0xcd/0x230 [ 157.375463][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.375495][ T6509] RIP: 0033:0x7fdff878d37c [ 157.375519][ T6509] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 157.375550][ T6509] RSP: 002b:00007fdff65f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.375580][ T6509] RAX: ffffffffffffffda RBX: 00007fdff89b5fa0 RCX: 00007fdff878d37c [ 157.375600][ T6509] RDX: 000000000000000f RSI: 00007fdff65f60a0 RDI: 0000000000000005 [ 157.375619][ T6509] RBP: 00007fdff65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.375638][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.375657][ T6509] R13: 0000000000000000 R14: 00007fdff89b5fa0 R15: 00007fff230ae8f8 [ 157.375699][ T6509] [ 157.994226][ T6506] vivid-003: ================= START STATUS ================= [ 158.035109][ T6506] vivid-003: Radio HW Seek Mode: Bounded [ 158.079930][ T6506] vivid-003: Radio Programmable HW Seek: false [ 158.116878][ T6506] vivid-003: RDS Rx I/O Mode: Block I/O [ 158.139553][ T6506] vivid-003: Generate RBDS Instead of RDS: false [ 158.146153][ T6506] vivid-003: RDS Reception: true [ 158.201999][ T6506] vivid-003: RDS Program Type: 0 inactive [ 158.227971][ T6506] vivid-003: RDS PS Name: inactive [ 158.236069][ T6506] vivid-003: RDS Radio Text: inactive [ 158.275149][ T6506] vivid-003: RDS Traffic Announcement: false inactive [ 158.289504][ T6506] vivid-003: RDS Traffic Program: false inactive [ 158.324361][ T6506] vivid-003: RDS Music: false inactive [ 158.339698][ T6506] vivid-003: ================== END STATUS ================== [ 159.020244][ T6528] netlink: 2 bytes leftover after parsing attributes in process `syz.1.147'. [ 160.296220][ T6541] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 160.312430][ T6542] debugfs: Directory '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' with parent 'ieee80211' already present! [ 161.049836][ T6541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.068299][ T6541] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.256471][ T6541] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 161.388697][ T6541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.422366][ T6541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.486780][ T6541] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 161.601104][ T6541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.607205][ T6541] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.627352][ T6541] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 161.792637][ T6541] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.815840][ T6541] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.076290][ T6541] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 162.275187][ T6562] FAULT_INJECTION: forcing a failure. [ 162.275187][ T6562] name failslab, interval 1, probability 0, space 0, times 0 [ 162.319663][ T6562] CPU: 0 UID: 0 PID: 6562 Comm: syz.0.158 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 162.319705][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.319723][ T6562] Call Trace: [ 162.319733][ T6562] [ 162.319744][ T6562] dump_stack_lvl+0x16c/0x1f0 [ 162.319796][ T6562] should_fail_ex+0x512/0x640 [ 162.319846][ T6562] should_failslab+0xc2/0x120 [ 162.319886][ T6562] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 162.319924][ T6562] ? skb_clone+0x190/0x3f0 [ 162.319980][ T6562] skb_clone+0x190/0x3f0 [ 162.320019][ T6562] netlink_deliver_tap+0xabd/0xd30 [ 162.320067][ T6562] netlink_unicast+0x5df/0x7f0 [ 162.320116][ T6562] ? __pfx_netlink_unicast+0x10/0x10 [ 162.320156][ T6562] ? __lock_acquire+0xaa4/0x1ba0 [ 162.320215][ T6562] netlink_sendmsg+0x8d1/0xdd0 [ 162.320262][ T6562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.320323][ T6562] ____sys_sendmsg+0xa98/0xc70 [ 162.320374][ T6562] ? copy_msghdr_from_user+0x10a/0x160 [ 162.320411][ T6562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.320481][ T6562] ___sys_sendmsg+0x134/0x1d0 [ 162.320521][ T6562] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.320610][ T6562] __sys_sendmsg+0x16d/0x220 [ 162.320650][ T6562] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.320699][ T6562] ? rcu_is_watching+0x12/0xc0 [ 162.320742][ T6562] do_syscall_64+0xcd/0x230 [ 162.320794][ T6562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.320827][ T6562] RIP: 0033:0x7fdff878e969 [ 162.320851][ T6562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.320881][ T6562] RSP: 002b:00007fdff65f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.320911][ T6562] RAX: ffffffffffffffda RBX: 00007fdff89b5fa0 RCX: 00007fdff878e969 [ 162.320931][ T6562] RDX: 000000002000c800 RSI: 0000200000000040 RDI: 0000000000000004 [ 162.320958][ T6562] RBP: 00007fdff65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.320977][ T6562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.320995][ T6562] R13: 0000000000000000 R14: 00007fdff89b5fa0 R15: 00007fff230ae8f8 [ 162.321038][ T6562] [ 162.321201][ T6562] block nbd9: NBD_DISCONNECT [ 162.491610][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.743756][ T6564] netlink: 2 bytes leftover after parsing attributes in process `syz.3.159'. [ 162.959809][ T6569] random: crng reseeded on system resumption [ 163.052147][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 163.140068][ T6573] process 'syz.3.162' launched './file0' with NULL argv: empty string added [ 163.449852][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 163.689776][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.849622][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.965576][ T6576] block nbd9: NBD_DISCONNECT [ 164.323521][ T6574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 164.384955][ T6569] can: request_module (can-proto-0) failed. [ 164.491752][ T6584] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 164.824563][ T6592] netlink: 342 bytes leftover after parsing attributes in process `syz.1.167'. [ 165.130464][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.531173][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.774840][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.939543][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 166.023737][ T6612] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 167.210237][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 167.609783][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 167.863647][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 167.900704][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.179'. [ 167.950934][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.971536][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.009997][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 168.074899][ T6650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.084016][ T6650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.975130][ T6670] random: crng reseeded on system resumption [ 169.611383][ T6678] vivid-003: ================= START STATUS ================= [ 169.619113][ T6678] vivid-003: Radio HW Seek Mode: Bounded [ 169.629761][ T6678] vivid-003: Radio Programmable HW Seek: false [ 169.636028][ T6678] vivid-003: RDS Rx I/O Mode: Block I/O [ 169.646732][ T6678] vivid-003: Generate RBDS Instead of RDS: false [ 169.677734][ T6678] vivid-003: RDS Reception: true [ 169.706328][ T6678] vivid-003: RDS Program Type: 0 inactive [ 169.712345][ T6678] vivid-003: RDS PS Name: inactive [ 169.717724][ T6678] vivid-003: RDS Radio Text: inactive [ 169.724458][ T6678] vivid-003: RDS Traffic Announcement: false inactive [ 169.749611][ T6678] vivid-003: RDS Traffic Program: false inactive [ 169.756310][ T6678] vivid-003: RDS Music: false inactive [ 169.776109][ T6678] vivid-003: ================== END STATUS ================== [ 169.921425][ T6684] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 169.962024][ T6684] netlink: 314 bytes leftover after parsing attributes in process `syz.0.188'. [ 171.546994][ T6705] sctp: [Deprecated]: syz.3.193 (pid 6705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.546994][ T6705] Use struct sctp_sack_info instead [ 172.454437][ T6717] netlink: 342 bytes leftover after parsing attributes in process `syz.1.197'. [ 173.201561][ T6734] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.479930][ T6744] FAULT_INJECTION: forcing a failure. [ 173.479930][ T6744] name failslab, interval 1, probability 0, space 0, times 0 [ 173.516428][ T6744] CPU: 1 UID: 0 PID: 6744 Comm: syz.2.203 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 173.516476][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.516496][ T6744] Call Trace: [ 173.516507][ T6744] [ 173.516519][ T6744] dump_stack_lvl+0x16c/0x1f0 [ 173.516574][ T6744] should_fail_ex+0x512/0x640 [ 173.516624][ T6744] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 173.516662][ T6744] should_failslab+0xc2/0x120 [ 173.516700][ T6744] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 173.516728][ T6744] ? lockdep_init_map_type+0x5c/0x280 [ 173.516761][ T6744] ? __d_alloc+0x31/0xaa0 [ 173.516791][ T6744] __d_alloc+0x31/0xaa0 [ 173.516820][ T6744] d_alloc_pseudo+0x1c/0xc0 [ 173.516852][ T6744] alloc_file_pseudo+0xcf/0x230 [ 173.516885][ T6744] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 173.516917][ T6744] ? alloc_fd+0x471/0x7d0 [ 173.516944][ T6744] sock_alloc_file+0x50/0x210 [ 173.516984][ T6744] __sys_socket+0x1c0/0x260 [ 173.517022][ T6744] ? __pfx___sys_socket+0x10/0x10 [ 173.517060][ T6744] ? rcu_is_watching+0x12/0xc0 [ 173.517088][ T6744] __x64_sys_socket+0x72/0xb0 [ 173.517125][ T6744] ? lockdep_hardirqs_on+0x7c/0x110 [ 173.517159][ T6744] do_syscall_64+0xcd/0x230 [ 173.517197][ T6744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.517222][ T6744] RIP: 0033:0x7fa64858e969 [ 173.517240][ T6744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.517263][ T6744] RSP: 002b:00007fa64930e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 173.517285][ T6744] RAX: ffffffffffffffda RBX: 00007fa6487b5fa0 RCX: 00007fa64858e969 [ 173.517301][ T6744] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 173.517315][ T6744] RBP: 00007fa648610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 173.517329][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.517343][ T6744] R13: 0000000000000000 R14: 00007fa6487b5fa0 R15: 00007ffdc30e7b18 [ 173.517372][ T6744] [ 174.094569][ T6752] Invalid ELF header magic: != ELF [ 174.322018][ T6764] FAULT_INJECTION: forcing a failure. [ 174.322018][ T6764] name failslab, interval 1, probability 0, space 0, times 0 [ 174.322082][ T6764] CPU: 0 UID: 0 PID: 6764 Comm: syz.2.206 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 174.322124][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.322145][ T6764] Call Trace: [ 174.322155][ T6764] [ 174.322168][ T6764] dump_stack_lvl+0x16c/0x1f0 [ 174.322223][ T6764] should_fail_ex+0x512/0x640 [ 174.322273][ T6764] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 174.322312][ T6764] should_failslab+0xc2/0x120 [ 174.322356][ T6764] __kmalloc_cache_noprof+0x6a/0x3e0 [ 174.322390][ T6764] ? device_create_groups_vargs+0x8a/0x270 [ 174.322449][ T6764] device_create_groups_vargs+0x8a/0x270 [ 174.322505][ T6764] device_create+0xed/0x130 [ 174.322556][ T6764] ? __pfx_device_create+0x10/0x10 [ 174.322706][ T6764] ? do_raw_spin_lock+0x12c/0x2b0 [ 174.322762][ T6764] ? is_console_locked+0x9/0x20 [ 174.322800][ T6764] ? con_is_visible+0x65/0x150 [ 174.322831][ T6764] ? csi_J+0x54a/0xad0 [ 174.322877][ T6764] vcs_make_sysfs+0x32/0x80 [ 174.322909][ T6764] vc_allocate+0x501/0x880 [ 174.322950][ T6764] ? __pfx_vc_allocate+0x10/0x10 [ 174.323005][ T6764] con_install+0xa1/0x600 [ 174.323048][ T6764] ? __pfx_con_install+0x10/0x10 [ 174.323097][ T6764] ? __pfx_con_install+0x10/0x10 [ 174.323138][ T6764] tty_init_dev.part.0+0x99/0x500 [ 174.323188][ T6764] tty_open+0xa50/0xf90 [ 174.323242][ T6764] ? __pfx_tty_open+0x10/0x10 [ 174.323287][ T6764] ? chrdev_open+0x58c/0x6a0 [ 174.323330][ T6764] ? __pfx_tty_open+0x10/0x10 [ 174.323372][ T6764] chrdev_open+0x231/0x6a0 [ 174.323419][ T6764] ? __pfx_chrdev_open+0x10/0x10 [ 174.323460][ T6764] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 174.323521][ T6764] do_dentry_open+0x741/0x1c10 [ 174.323583][ T6764] ? __pfx_chrdev_open+0x10/0x10 [ 174.323631][ T6764] vfs_open+0x82/0x3f0 [ 174.323682][ T6764] path_openat+0x1e5e/0x2d40 [ 174.323735][ T6764] ? __pfx_path_openat+0x10/0x10 [ 174.323782][ T6764] do_filp_open+0x20b/0x470 [ 174.323816][ T6764] ? __pfx_do_filp_open+0x10/0x10 [ 174.323881][ T6764] ? alloc_fd+0x471/0x7d0 [ 174.323923][ T6764] do_sys_openat2+0x11b/0x1d0 [ 174.323967][ T6764] ? __pfx_do_sys_openat2+0x10/0x10 [ 174.324027][ T6764] __x64_sys_openat+0x174/0x210 [ 174.324074][ T6764] ? __pfx___x64_sys_openat+0x10/0x10 [ 174.324124][ T6764] ? rcu_is_watching+0x12/0xc0 [ 174.324170][ T6764] do_syscall_64+0xcd/0x230 [ 174.324225][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.324258][ T6764] RIP: 0033:0x7fa64858e969 [ 174.324284][ T6764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.324316][ T6764] RSP: 002b:00007fa6463f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 174.324346][ T6764] RAX: ffffffffffffffda RBX: 00007fa6487b6080 RCX: 00007fa64858e969 [ 174.324366][ T6764] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 174.324386][ T6764] RBP: 00007fa648610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 174.324406][ T6764] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 174.324424][ T6764] R13: 0000000000000000 R14: 00007fa6487b6080 R15: 00007ffdc30e7b18 [ 174.324461][ T6764] [ 174.403046][ T6756] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 174.403094][ T6756] CPU: 1 UID: 0 PID: 6756 Comm: syz.0.207 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 174.403136][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.403155][ T6756] Call Trace: [ 174.403166][ T6756] [ 174.403178][ T6756] dump_stack_lvl+0x16c/0x1f0 [ 174.403233][ T6756] sysfs_warn_dup+0x7f/0xa0 [ 174.403286][ T6756] sysfs_do_create_link_sd+0x124/0x140 [ 174.403346][ T6756] sysfs_create_link+0x61/0xc0 [ 174.403400][ T6756] device_add+0x62c/0x1a70 [ 174.403453][ T6756] ? __pfx_device_add+0x10/0x10 [ 174.403499][ T6756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.403568][ T6756] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 174.403633][ T6756] wiphy_register+0x1c9c/0x2850 [ 174.403670][ T6756] ? netdev_run_todo+0x864/0x1320 [ 174.403714][ T6756] ? __dev_printk+0x1c0/0x270 [ 174.403757][ T6756] ? __pfx_wiphy_register+0x10/0x10 [ 174.403827][ T6756] ieee80211_register_hw+0x2432/0x4020 [ 174.403882][ T6756] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 174.403924][ T6756] ? find_held_lock+0x2b/0x80 [ 174.403959][ T6756] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 174.404006][ T6756] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 174.404051][ T6756] ? __hrtimer_setup+0x176/0x280 [ 174.404105][ T6756] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 174.404185][ T6756] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 174.404231][ T6756] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 174.404288][ T6756] ? __asan_memcpy+0x3c/0x60 [ 174.404327][ T6756] hwsim_new_radio_nl+0xb51/0x12c0 [ 174.404382][ T6756] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 174.404449][ T6756] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 174.404502][ T6756] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 174.404565][ T6756] genl_family_rcv_msg_doit+0x206/0x2f0 [ 174.404619][ T6756] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 174.404672][ T6756] ? trace_cap_capable+0x18d/0x200 [ 174.404719][ T6756] ? bpf_lsm_capable+0x9/0x10 [ 174.404755][ T6756] ? security_capable+0x7e/0x260 [ 174.404791][ T6756] ? ns_capable+0xd7/0x110 [ 174.404838][ T6756] genl_rcv_msg+0x55c/0x800 [ 174.404896][ T6756] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.404942][ T6756] ? __pfx___dev_queue_xmit+0x10/0x10 [ 174.404975][ T6756] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 174.405031][ T6756] ? __lock_acquire+0xaa4/0x1ba0 [ 174.405080][ T6756] netlink_rcv_skb+0x16d/0x440 [ 174.405120][ T6756] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.405167][ T6756] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.405232][ T6756] ? __pfx_down_read+0x10/0x10 [ 174.405262][ T6756] ? netlink_deliver_tap+0x1ae/0xd30 [ 174.405309][ T6756] genl_rcv+0x28/0x40 [ 174.405351][ T6756] netlink_unicast+0x53a/0x7f0 [ 174.405401][ T6756] ? __pfx_netlink_unicast+0x10/0x10 [ 174.405453][ T6756] ? __lock_acquire+0xaa4/0x1ba0 [ 174.405507][ T6756] netlink_sendmsg+0x8d1/0xdd0 [ 174.405557][ T6756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.405619][ T6756] ____sys_sendmsg+0xa98/0xc70 [ 174.405670][ T6756] ? copy_msghdr_from_user+0x10a/0x160 [ 174.405710][ T6756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.405779][ T6756] ___sys_sendmsg+0x134/0x1d0 [ 174.405830][ T6756] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.405928][ T6756] __sys_sendmsg+0x16d/0x220 [ 174.405970][ T6756] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.406009][ T6756] ? __x64_sys_futex+0x1e0/0x4c0 [ 174.406058][ T6756] ? rcu_is_watching+0x12/0xc0 [ 174.406118][ T6756] do_syscall_64+0xcd/0x230 [ 174.406173][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.406205][ T6756] RIP: 0033:0x7fdff878e969 [ 174.406231][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.406263][ T6756] RSP: 002b:00007fdff65f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.406294][ T6756] RAX: ffffffffffffffda RBX: 00007fdff89b5fa0 RCX: 00007fdff878e969 [ 174.406316][ T6756] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 174.406335][ T6756] RBP: 00007fdff8810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 174.406355][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.406374][ T6756] R13: 0000000000000000 R14: 00007fdff89b5fa0 R15: 00007fff230ae8f8 [ 174.406419][ T6756] [ 174.479771][ T6754] ======================================================= [ 174.479771][ T6754] WARNING: The mand mount option has been deprecated and [ 174.479771][ T6754] and is ignored by this kernel. Remove the mand [ 174.479771][ T6754] option from the mount to silence this warning. [ 174.479771][ T6754] ======================================================= [ 175.122651][ T6768] binder: 6755:6768 ioctl c018620c 0 returned -1 [ 175.890785][ T6772] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 175.927473][ T6772] CPU: 1 UID: 0 PID: 6772 Comm: syz.3.209 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 175.927520][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.927539][ T6772] Call Trace: [ 175.927549][ T6772] [ 175.927561][ T6772] dump_stack_lvl+0x16c/0x1f0 [ 175.927617][ T6772] sysfs_warn_dup+0x7f/0xa0 [ 175.927672][ T6772] sysfs_do_create_link_sd+0x124/0x140 [ 175.927730][ T6772] sysfs_create_link+0x61/0xc0 [ 175.927784][ T6772] device_add+0x62c/0x1a70 [ 175.927837][ T6772] ? __pfx_device_add+0x10/0x10 [ 175.927882][ T6772] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.927933][ T6772] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 175.927996][ T6772] wiphy_register+0x1c9c/0x2850 [ 175.928032][ T6772] ? netdev_run_todo+0x864/0x1320 [ 175.928074][ T6772] ? __dev_printk+0x1c0/0x270 [ 175.928110][ T6772] ? __pfx_wiphy_register+0x10/0x10 [ 175.928159][ T6772] ieee80211_register_hw+0x2432/0x4020 [ 175.928202][ T6772] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 175.928236][ T6772] ? find_held_lock+0x2b/0x80 [ 175.928264][ T6772] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 175.928302][ T6772] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 175.928335][ T6772] ? __hrtimer_setup+0x176/0x280 [ 175.928378][ T6772] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 175.928452][ T6772] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 175.928490][ T6772] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 175.928536][ T6772] ? __asan_memcpy+0x3c/0x60 [ 175.928567][ T6772] hwsim_new_radio_nl+0xb51/0x12c0 [ 175.928613][ T6772] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 175.928670][ T6772] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 175.928715][ T6772] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 175.928773][ T6772] genl_family_rcv_msg_doit+0x206/0x2f0 [ 175.928820][ T6772] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 175.928863][ T6772] ? trace_cap_capable+0x18d/0x200 [ 175.928902][ T6772] ? bpf_lsm_capable+0x9/0x10 [ 175.928931][ T6772] ? security_capable+0x7e/0x260 [ 175.928960][ T6772] ? ns_capable+0xd7/0x110 [ 175.929001][ T6772] genl_rcv_msg+0x55c/0x800 [ 175.929047][ T6772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.929087][ T6772] ? __pfx___dev_queue_xmit+0x10/0x10 [ 175.929114][ T6772] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 175.929160][ T6772] ? __lock_acquire+0xaa4/0x1ba0 [ 175.929204][ T6772] netlink_rcv_skb+0x16d/0x440 [ 175.929240][ T6772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 175.929283][ T6772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 175.929338][ T6772] ? __pfx_down_read+0x10/0x10 [ 175.929365][ T6772] ? netlink_deliver_tap+0x1ae/0xd30 [ 175.929410][ T6772] genl_rcv+0x28/0x40 [ 175.929446][ T6772] netlink_unicast+0x53a/0x7f0 [ 175.929497][ T6772] ? __pfx_netlink_unicast+0x10/0x10 [ 175.929537][ T6772] ? __lock_acquire+0xaa4/0x1ba0 [ 175.929589][ T6772] netlink_sendmsg+0x8d1/0xdd0 [ 175.929631][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.929684][ T6772] ____sys_sendmsg+0xa98/0xc70 [ 175.929726][ T6772] ? copy_msghdr_from_user+0x10a/0x160 [ 175.929758][ T6772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.929817][ T6772] ___sys_sendmsg+0x134/0x1d0 [ 175.929852][ T6772] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.929930][ T6772] __sys_sendmsg+0x16d/0x220 [ 175.929964][ T6772] ? __pfx___sys_sendmsg+0x10/0x10 [ 175.929995][ T6772] ? __x64_sys_futex+0x1e0/0x4c0 [ 175.930035][ T6772] ? rcu_is_watching+0x12/0xc0 [ 175.930071][ T6772] do_syscall_64+0xcd/0x230 [ 175.930115][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.930142][ T6772] RIP: 0033:0x7f850378e969 [ 175.930164][ T6772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.930190][ T6772] RSP: 002b:00007f850463a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.930215][ T6772] RAX: ffffffffffffffda RBX: 00007f85039b5fa0 RCX: 00007f850378e969 [ 175.930233][ T6772] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 175.930249][ T6772] RBP: 00007f8503810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 175.930265][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.930281][ T6772] R13: 0000000000000000 R14: 00007f85039b5fa0 R15: 00007ffcf1a51d98 [ 175.930315][ T6772] [ 176.830758][ T6783] netlink: 'syz.2.212': attribute type 4 has an invalid length. [ 176.870935][ T6776] netlink: 'syz.1.210': attribute type 3 has an invalid length. [ 176.891649][ T6784] netlink: 'syz.1.210': attribute type 3 has an invalid length. [ 176.909712][ T6783] netlink: 314 bytes leftover after parsing attributes in process `syz.2.212'. [ 177.163646][ T6772] binder: 6771:6772 ioctl c018620c 0 returned -1 [ 177.573053][ T6801] block nbd9: NBD_DISCONNECT [ 177.981139][ T6814] program syz.2.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.715264][ T6825] vivid-003: ================= START STATUS ================= [ 178.755841][ T6825] vivid-003: Radio HW Seek Mode: Bounded [ 178.824117][ T6825] vivid-003: Radio Programmable HW Seek: false [ 178.858704][ T6825] vivid-003: RDS Rx I/O Mode: Block I/O [ 178.875389][ T6825] vivid-003: Generate RBDS Instead of RDS: false [ 178.889270][ T6825] vivid-003: RDS Reception: true [ 178.907969][ T6825] vivid-003: RDS Program Type: 0 inactive [ 178.923131][ T6825] vivid-003: RDS PS Name: inactive [ 178.950792][ T6825] vivid-003: RDS Radio Text: inactive [ 178.971044][ T6825] vivid-003: RDS Traffic Announcement: false inactive [ 179.012073][ T6825] vivid-003: RDS Traffic Program: false inactive [ 179.018634][ T6825] vivid-003: RDS Music: false inactive [ 179.108357][ T6825] vivid-003: ================== END STATUS ================== [ 179.147387][ T6830] FAULT_INJECTION: forcing a failure. [ 179.147387][ T6830] name failslab, interval 1, probability 0, space 0, times 0 [ 179.176860][ T6828] FAULT_INJECTION: forcing a failure. [ 179.176860][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 179.189630][ T6830] CPU: 0 UID: 0 PID: 6830 Comm: syz.0.225 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 179.189679][ T6830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.189696][ T6830] Call Trace: [ 179.189707][ T6830] [ 179.189717][ T6830] dump_stack_lvl+0x16c/0x1f0 [ 179.189764][ T6830] should_fail_ex+0x512/0x640 [ 179.189806][ T6830] ? __kvmalloc_node_noprof+0x122/0x600 [ 179.189844][ T6830] should_failslab+0xc2/0x120 [ 179.189884][ T6830] __kvmalloc_node_noprof+0x135/0x600 [ 179.189914][ T6830] ? __lock_acquire+0xaa4/0x1ba0 [ 179.189955][ T6830] ? seq_read_iter+0x826/0x12c0 [ 179.190010][ T6830] ? seq_read_iter+0x826/0x12c0 [ 179.190051][ T6830] seq_read_iter+0x826/0x12c0 [ 179.190097][ T6830] ? __mutex_trylock_common+0xe9/0x250 [ 179.190163][ T6830] proc_reg_read_iter+0x21d/0x310 [ 179.190205][ T6830] vfs_read+0x8cb/0xc70 [ 179.190245][ T6830] ? __pfx___mutex_lock+0x10/0x10 [ 179.190297][ T6830] ? __pfx_vfs_read+0x10/0x10 [ 179.190367][ T6830] ksys_read+0x12a/0x240 [ 179.190400][ T6830] ? __pfx_ksys_read+0x10/0x10 [ 179.190431][ T6830] ? rcu_is_watching+0x12/0xc0 [ 179.190476][ T6830] do_syscall_64+0xcd/0x230 [ 179.190530][ T6830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.190565][ T6830] RIP: 0033:0x7fdff878e969 [ 179.190592][ T6830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.190624][ T6830] RSP: 002b:00007fdff65f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.190655][ T6830] RAX: ffffffffffffffda RBX: 00007fdff89b5fa0 RCX: 00007fdff878e969 [ 179.190677][ T6830] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 179.190698][ T6830] RBP: 00007fdff65f6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.190717][ T6830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.190737][ T6830] R13: 0000000000000000 R14: 00007fdff89b5fa0 R15: 00007fff230ae8f8 [ 179.190781][ T6830] [ 179.426305][ T6828] CPU: 1 UID: 0 PID: 6828 Comm: syz.3.224 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 179.426351][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.426369][ T6828] Call Trace: [ 179.426379][ T6828] [ 179.426390][ T6828] dump_stack_lvl+0x16c/0x1f0 [ 179.426441][ T6828] should_fail_ex+0x512/0x640 [ 179.426486][ T6828] ? fs_reclaim_acquire+0xae/0x150 [ 179.426538][ T6828] should_failslab+0xc2/0x120 [ 179.426577][ T6828] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 179.426614][ T6828] ? security_inode_alloc+0x3b/0x2b0 [ 179.426653][ T6828] security_inode_alloc+0x3b/0x2b0 [ 179.426688][ T6828] inode_init_always_gfp+0xce4/0x1030 [ 179.426722][ T6828] alloc_inode+0x86/0x240 [ 179.426757][ T6828] new_inode+0x22/0x1c0 [ 179.426797][ T6828] proc_pid_make_inode+0x22/0x160 [ 179.426826][ T6828] proc_ns_instantiate+0x57/0x100 [ 179.426855][ T6828] proc_ns_dir_lookup+0x1af/0x2f0 [ 179.426888][ T6828] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 179.426914][ T6828] lookup_open.isra.0+0x4d7/0x1580 [ 179.426969][ T6828] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 179.427036][ T6828] ? mnt_get_write_access+0x20c/0x300 [ 179.427093][ T6828] path_openat+0x905/0x2d40 [ 179.427141][ T6828] ? __pfx_path_openat+0x10/0x10 [ 179.427183][ T6828] do_filp_open+0x20b/0x470 [ 179.427214][ T6828] ? __pfx_do_filp_open+0x10/0x10 [ 179.427258][ T6828] ? __pfx_kfree_link+0x10/0x10 [ 179.427312][ T6828] ? alloc_fd+0x471/0x7d0 [ 179.427351][ T6828] do_sys_openat2+0x11b/0x1d0 [ 179.427393][ T6828] ? __pfx_do_sys_openat2+0x10/0x10 [ 179.427452][ T6828] __x64_sys_openat+0x174/0x210 [ 179.427495][ T6828] ? __pfx___x64_sys_openat+0x10/0x10 [ 179.427540][ T6828] ? do_user_addr_fault+0x843/0x1370 [ 179.427581][ T6828] do_syscall_64+0xcd/0x230 [ 179.427630][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.427660][ T6828] RIP: 0033:0x7f850378d2d0 [ 179.427684][ T6828] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 179.427713][ T6828] RSP: 002b:00007f8504639f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 179.427741][ T6828] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f850378d2d0 [ 179.427761][ T6828] RDX: 0000000000000002 RSI: 00007f8504639fa0 RDI: 00000000ffffff9c [ 179.427779][ T6828] RBP: 00007f8504639fa0 R08: 0000000000000000 R09: 0000000000000000 [ 179.427797][ T6828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.427815][ T6828] R13: 0000000000000000 R14: 00007f85039b5fa0 R15: 00007ffcf1a51d98 [ 179.427854][ T6828] [ 180.106386][ T6850] netlink: 326 bytes leftover after parsing attributes in process `syz.3.231'. [ 180.133051][ T6850] veth1_macvtap: left promiscuous mode [ 180.829425][ T5836] Bluetooth: hci2: unexpected event 0x03 length: 18 > 11 [ 181.476625][ T6866] vivid-003: ================= START STATUS ================= [ 181.586889][ T6866] vivid-003: Radio HW Seek Mode: Bounded [ 181.592991][ T6866] vivid-003: Radio Programmable HW Seek: false [ 181.603074][ T6866] vivid-003: RDS Rx I/O Mode: Block I/O [ 181.608751][ T6866] vivid-003: Generate RBDS Instead of RDS: false [ 181.619649][ T6866] vivid-003: RDS Reception: true [ 181.624712][ T6866] vivid-003: RDS Program Type: 0 inactive [ 181.635985][ T6866] vivid-003: RDS PS Name: inactive [ 181.641524][ T6866] vivid-003: RDS Radio Text: inactive [ 181.647411][ T6866] vivid-003: RDS Traffic Announcement: false inactive [ 181.654851][ T6866] vivid-003: RDS Traffic Program: false inactive [ 181.662542][ T6866] vivid-003: RDS Music: false inactive [ 181.668251][ T6866] vivid-003: ================== END STATUS ================== [ 182.124346][ T6878] netlink: 'syz.3.238': attribute type 4 has an invalid length. [ 182.164913][ T6878] netlink: 314 bytes leftover after parsing attributes in process `syz.3.238'. [ 182.513079][ T6885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.240'. [ 182.843391][ T6887] block nbd9: NBD_DISCONNECT [ 183.362287][ T6901] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 183.388295][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.0.247 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 183.388343][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.388363][ T6901] Call Trace: [ 183.388374][ T6901] [ 183.388386][ T6901] dump_stack_lvl+0x16c/0x1f0 [ 183.388442][ T6901] sysfs_warn_dup+0x7f/0xa0 [ 183.388496][ T6901] sysfs_do_create_link_sd+0x124/0x140 [ 183.388560][ T6901] sysfs_create_link+0x61/0xc0 [ 183.388623][ T6901] device_add+0x62c/0x1a70 [ 183.388677][ T6901] ? __pfx_device_add+0x10/0x10 [ 183.388721][ T6901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.388772][ T6901] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 183.388836][ T6901] wiphy_register+0x1c9c/0x2850 [ 183.388874][ T6901] ? netdev_run_todo+0x864/0x1320 [ 183.388918][ T6901] ? __dev_printk+0x1c0/0x270 [ 183.388962][ T6901] ? __pfx_wiphy_register+0x10/0x10 [ 183.389026][ T6901] ieee80211_register_hw+0x2432/0x4020 [ 183.389081][ T6901] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 183.389124][ T6901] ? find_held_lock+0x2b/0x80 [ 183.389159][ T6901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.389209][ T6901] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 183.389249][ T6901] ? __hrtimer_setup+0x176/0x280 [ 183.389304][ T6901] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 183.389384][ T6901] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 183.389430][ T6901] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 183.389484][ T6901] ? __asan_memcpy+0x3c/0x60 [ 183.389521][ T6901] hwsim_new_radio_nl+0xb51/0x12c0 [ 183.389579][ T6901] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.389654][ T6901] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 183.389709][ T6901] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 183.389773][ T6901] genl_family_rcv_msg_doit+0x206/0x2f0 [ 183.389830][ T6901] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.389881][ T6901] ? trace_cap_capable+0x18d/0x200 [ 183.389929][ T6901] ? bpf_lsm_capable+0x9/0x10 [ 183.389964][ T6901] ? security_capable+0x7e/0x260 [ 183.389999][ T6901] ? ns_capable+0xd7/0x110 [ 183.390040][ T6901] genl_rcv_msg+0x55c/0x800 [ 183.390097][ T6901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.390145][ T6901] ? __pfx___dev_queue_xmit+0x10/0x10 [ 183.390179][ T6901] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.390236][ T6901] ? __lock_acquire+0xaa4/0x1ba0 [ 183.390290][ T6901] netlink_rcv_skb+0x16d/0x440 [ 183.390334][ T6901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.390388][ T6901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.390458][ T6901] ? __pfx_down_read+0x10/0x10 [ 183.390492][ T6901] ? netlink_deliver_tap+0x1ae/0xd30 [ 183.390542][ T6901] genl_rcv+0x28/0x40 [ 183.390588][ T6901] netlink_unicast+0x53a/0x7f0 [ 183.390645][ T6901] ? __pfx_netlink_unicast+0x10/0x10 [ 183.390686][ T6901] ? __lock_acquire+0xaa4/0x1ba0 [ 183.390741][ T6901] netlink_sendmsg+0x8d1/0xdd0 [ 183.390794][ T6901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.390858][ T6901] ____sys_sendmsg+0xa98/0xc70 [ 183.390912][ T6901] ? copy_msghdr_from_user+0x10a/0x160 [ 183.390952][ T6901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.391028][ T6901] ___sys_sendmsg+0x134/0x1d0 [ 183.391072][ T6901] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.391174][ T6901] __sys_sendmsg+0x16d/0x220 [ 183.391216][ T6901] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.391256][ T6901] ? __x64_sys_futex+0x1e0/0x4c0 [ 183.391307][ T6901] ? rcu_is_watching+0x12/0xc0 [ 183.391354][ T6901] do_syscall_64+0xcd/0x230 [ 183.391409][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.391443][ T6901] RIP: 0033:0x7fdff878e969 [ 183.391469][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.391502][ T6901] RSP: 002b:00007fdff65f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.391534][ T6901] RAX: ffffffffffffffda RBX: 00007fdff89b5fa0 RCX: 00007fdff878e969 [ 183.391556][ T6901] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 183.391576][ T6901] RBP: 00007fdff8810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 183.391597][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.391624][ T6901] R13: 0000000000000000 R14: 00007fdff89b5fa0 R15: 00007fff230ae8f8 [ 183.391670][ T6901] [ 183.806320][ C1] vkms_vblank_simulate: vblank timer overrun [ 184.390129][ T6916] random: crng reseeded on system resumption [ 184.805899][ T6923] netlink: 326 bytes leftover after parsing attributes in process `syz.2.251'. [ 184.817529][ T6923] veth1_macvtap: left promiscuous mode [ 184.884796][ T6918] netlink: 516 bytes leftover after parsing attributes in process `syz.0.250'. [ 185.411196][ T6932] FAULT_INJECTION: forcing a failure. [ 185.411196][ T6932] name fail_futex, interval 1, probability 0, space 0, times 1 [ 185.469527][ T6932] CPU: 0 UID: 0 PID: 6932 Comm: syz.2.252 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 185.469574][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.469593][ T6932] Call Trace: [ 185.469603][ T6932] [ 185.469615][ T6932] dump_stack_lvl+0x16c/0x1f0 [ 185.469678][ T6932] should_fail_ex+0x512/0x640 [ 185.469736][ T6932] get_futex_key+0x49e/0x1000 [ 185.469778][ T6932] ? __pfx_get_futex_key+0x10/0x10 [ 185.469823][ T6932] futex_wake+0xe7/0x4e0 [ 185.469870][ T6932] ? __pfx_futex_wake+0x10/0x10 [ 185.469914][ T6932] ? rcu_is_watching+0x12/0xc0 [ 185.469964][ T6932] do_futex+0x1e3/0x350 [ 185.470002][ T6932] ? __pfx_do_futex+0x10/0x10 [ 185.470043][ T6932] ? __pfx___might_resched+0x10/0x10 [ 185.470086][ T6932] __x64_sys_futex+0x1e0/0x4c0 [ 185.470127][ T6932] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 185.470173][ T6932] ? __pfx___x64_sys_futex+0x10/0x10 [ 185.470210][ T6932] ? __pfx___do_sys_close_range+0x10/0x10 [ 185.470244][ T6932] ? rcu_is_watching+0x12/0xc0 [ 185.470289][ T6932] do_syscall_64+0xcd/0x230 [ 185.470341][ T6932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.470376][ T6932] RIP: 0033:0x7fa64858e969 [ 185.470404][ T6932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.470436][ T6932] RSP: 002b:00007fa64930e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 185.470468][ T6932] RAX: ffffffffffffffda RBX: 00007fa6487b5fa8 RCX: 00007fa64858e969 [ 185.470490][ T6932] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa6487b5fac [ 185.470511][ T6932] RBP: 00007fa6487b5fa0 R08: 00007fa64930f000 R09: 0000000000000000 [ 185.470532][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa6487b5fac [ 185.470552][ T6932] R13: 0000000000000000 R14: 00007ffdc30e7a30 R15: 00007ffdc30e7b18 [ 185.470592][ T6932] [ 186.964280][ T6954] netlink: 326 bytes leftover after parsing attributes in process `syz.0.257'. [ 187.694210][ T6965] netlink: 16 bytes leftover after parsing attributes in process `syz.0.261'. [ 188.019417][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.261'. [ 188.075015][ T6966] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 188.392850][ T6972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.263'. [ 189.361307][ T6985] vivid-003: ================= START STATUS ================= [ 189.501840][ T6985] vivid-003: Radio HW Seek Mode: Bounded [ 189.507624][ T6985] vivid-003: Radio Programmable HW Seek: false [ 189.656811][ T6985] vivid-003: RDS Rx I/O Mode: Block I/O [ 189.781378][ T6985] vivid-003: Generate RBDS Instead of RDS: false [ 189.813761][ T6985] vivid-003: RDS Reception: true [ 189.903371][ T6985] vivid-003: RDS Program Type: 0 inactive [ 189.985113][ T6985] vivid-003: RDS PS Name: inactive [ 190.008555][ T6985] vivid-003: RDS Radio Text: inactive [ 190.221784][ T6985] vivid-003: RDS Traffic Announcement: false inactive [ 190.349441][ T6985] vivid-003: RDS Traffic Program: false inactive [ 190.436813][ T6985] vivid-003: RDS Music: false inactive [ 190.451190][ T7000] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 190.491168][ T6985] vivid-003: ================== END STATUS ================== [ 190.517784][ T7000] CPU: 0 UID: 0 PID: 7000 Comm: syz.1.270 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 190.517832][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.517851][ T7000] Call Trace: [ 190.517863][ T7000] [ 190.517876][ T7000] dump_stack_lvl+0x16c/0x1f0 [ 190.517932][ T7000] sysfs_warn_dup+0x7f/0xa0 [ 190.517987][ T7000] sysfs_do_create_link_sd+0x124/0x140 [ 190.518046][ T7000] sysfs_create_link+0x61/0xc0 [ 190.518109][ T7000] device_add+0x62c/0x1a70 [ 190.518162][ T7000] ? __pfx_device_add+0x10/0x10 [ 190.518207][ T7000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.518257][ T7000] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 190.518321][ T7000] wiphy_register+0x1c9c/0x2850 [ 190.518358][ T7000] ? netdev_run_todo+0x864/0x1320 [ 190.518400][ T7000] ? __dev_printk+0x1c0/0x270 [ 190.518443][ T7000] ? __pfx_wiphy_register+0x10/0x10 [ 190.518505][ T7000] ieee80211_register_hw+0x2432/0x4020 [ 190.518559][ T7000] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 190.518602][ T7000] ? find_held_lock+0x2b/0x80 [ 190.518636][ T7000] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 190.518685][ T7000] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 190.518726][ T7000] ? __hrtimer_setup+0x176/0x280 [ 190.518780][ T7000] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 190.518864][ T7000] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 190.518909][ T7000] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 190.518967][ T7000] ? __asan_memcpy+0x3c/0x60 [ 190.519006][ T7000] hwsim_new_radio_nl+0xb51/0x12c0 [ 190.519072][ T7000] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.519141][ T7000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 190.519196][ T7000] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 190.519260][ T7000] genl_family_rcv_msg_doit+0x206/0x2f0 [ 190.519315][ T7000] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 190.519366][ T7000] ? trace_cap_capable+0x18d/0x200 [ 190.519409][ T7000] ? bpf_lsm_capable+0x9/0x10 [ 190.519441][ T7000] ? security_capable+0x7e/0x260 [ 190.519473][ T7000] ? ns_capable+0xd7/0x110 [ 190.519512][ T7000] genl_rcv_msg+0x55c/0x800 [ 190.519569][ T7000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.519625][ T7000] ? __pfx___dev_queue_xmit+0x10/0x10 [ 190.519659][ T7000] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 190.519717][ T7000] ? __lock_acquire+0xaa4/0x1ba0 [ 190.519770][ T7000] netlink_rcv_skb+0x16d/0x440 [ 190.519816][ T7000] ? __pfx_genl_rcv_msg+0x10/0x10 [ 190.519868][ T7000] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 190.519937][ T7000] ? __pfx_down_read+0x10/0x10 [ 190.519971][ T7000] ? netlink_deliver_tap+0x1ae/0xd30 [ 190.520021][ T7000] genl_rcv+0x28/0x40 [ 190.520074][ T7000] netlink_unicast+0x53a/0x7f0 [ 190.520125][ T7000] ? __pfx_netlink_unicast+0x10/0x10 [ 190.520167][ T7000] ? __lock_acquire+0xaa4/0x1ba0 [ 190.520225][ T7000] netlink_sendmsg+0x8d1/0xdd0 [ 190.520280][ T7000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.520342][ T7000] ____sys_sendmsg+0xa98/0xc70 [ 190.520395][ T7000] ? copy_msghdr_from_user+0x10a/0x160 [ 190.520435][ T7000] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.520509][ T7000] ___sys_sendmsg+0x134/0x1d0 [ 190.520554][ T7000] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.520654][ T7000] __sys_sendmsg+0x16d/0x220 [ 190.520696][ T7000] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.520737][ T7000] ? __x64_sys_futex+0x1e0/0x4c0 [ 190.520787][ T7000] ? rcu_is_watching+0x12/0xc0 [ 190.520832][ T7000] do_syscall_64+0xcd/0x230 [ 190.520888][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.520922][ T7000] RIP: 0033:0x7f8c6d38e969 [ 190.520949][ T7000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.520981][ T7000] RSP: 002b:00007f8c6e287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.521014][ T7000] RAX: ffffffffffffffda RBX: 00007f8c6d5b5fa0 RCX: 00007f8c6d38e969 [ 190.521035][ T7000] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 190.521063][ T7000] RBP: 00007f8c6d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 190.521084][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.521104][ T7000] R13: 0000000000000000 R14: 00007f8c6d5b5fa0 R15: 00007ffe5ddb0cc8 [ 190.521149][ T7000] [ 191.378313][ T7004] netlink: 326 bytes leftover after parsing attributes in process `syz.0.271'. [ 191.458195][ T7004] veth1_macvtap: left promiscuous mode [ 191.574218][ T7007] netlink: 2 bytes leftover after parsing attributes in process `syz.2.273'. [ 193.131857][ T7026] Invalid ELF header magic: != ELF [ 196.315183][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.0.291'. [ 197.706501][ T7080] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.714687][ T7080] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.722700][ T7080] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.741083][ T7080] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.748782][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.039482][ T7123] nbd: must specify an index to disconnect [ 199.449142][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.455595][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.787104][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.787113][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.787165][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.838392][ T7138] netlink: 'syz.3.308': attribute type 4 has an invalid length. [ 199.847771][ T7138] netlink: 314 bytes leftover after parsing attributes in process `syz.3.308'. [ 201.755493][ T7166] binder: 7164:7166 ioctl c018620c 0 returned -1 [ 201.785944][ T7165] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 201.809329][ T7165] CPU: 0 UID: 0 PID: 7165 Comm: syz.0.313 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 201.809409][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.809444][ T7165] Call Trace: [ 201.809464][ T7165] [ 201.809485][ T7165] dump_stack_lvl+0x16c/0x1f0 [ 201.809549][ T7165] sysfs_warn_dup+0x7f/0xa0 [ 201.809603][ T7165] sysfs_do_create_link_sd+0x124/0x140 [ 201.809661][ T7165] sysfs_create_link+0x61/0xc0 [ 201.809716][ T7165] device_add+0x62c/0x1a70 [ 201.809804][ T7165] ? __pfx_device_add+0x10/0x10 [ 201.809849][ T7165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.809900][ T7165] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 201.809963][ T7165] wiphy_register+0x1c9c/0x2850 [ 201.810000][ T7165] ? netdev_run_todo+0x864/0x1320 [ 201.810044][ T7165] ? __dev_printk+0x1c0/0x270 [ 201.810087][ T7165] ? __pfx_wiphy_register+0x10/0x10 [ 201.810150][ T7165] ieee80211_register_hw+0x2432/0x4020 [ 201.810203][ T7165] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 201.810246][ T7165] ? find_held_lock+0x2b/0x80 [ 201.810278][ T7165] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.810323][ T7165] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 201.810363][ T7165] ? __hrtimer_setup+0x176/0x280 [ 201.810417][ T7165] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 201.810495][ T7165] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 201.810543][ T7165] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 201.810601][ T7165] ? __asan_memcpy+0x3c/0x60 [ 201.810640][ T7165] hwsim_new_radio_nl+0xb51/0x12c0 [ 201.810698][ T7165] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.810774][ T7165] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 201.810830][ T7165] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 201.810894][ T7165] genl_family_rcv_msg_doit+0x206/0x2f0 [ 201.810948][ T7165] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.811001][ T7165] ? trace_cap_capable+0x18d/0x200 [ 201.811048][ T7165] ? bpf_lsm_capable+0x9/0x10 [ 201.811082][ T7165] ? security_capable+0x7e/0x260 [ 201.811118][ T7165] ? ns_capable+0xd7/0x110 [ 201.811159][ T7165] genl_rcv_msg+0x55c/0x800 [ 201.811215][ T7165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.811264][ T7165] ? __pfx___dev_queue_xmit+0x10/0x10 [ 201.811310][ T7165] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.811367][ T7165] ? __lock_acquire+0xaa4/0x1ba0 [ 201.811420][ T7165] netlink_rcv_skb+0x16d/0x440 [ 201.811465][ T7165] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.811517][ T7165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.811585][ T7165] ? __pfx_down_read+0x10/0x10 [ 201.811619][ T7165] ? netlink_deliver_tap+0x1ae/0xd30 [ 201.811669][ T7165] genl_rcv+0x28/0x40 [ 201.811712][ T7165] netlink_unicast+0x53a/0x7f0 [ 201.811769][ T7165] ? __pfx_netlink_unicast+0x10/0x10 [ 201.811811][ T7165] ? __lock_acquire+0xaa4/0x1ba0 [ 201.811869][ T7165] netlink_sendmsg+0x8d1/0xdd0 [ 201.811921][ T7165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.811981][ T7165] ____sys_sendmsg+0xa98/0xc70 [ 201.812032][ T7165] ? copy_msghdr_from_user+0x10a/0x160 [ 201.812072][ T7165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.812133][ T7165] ? try_to_wake_up+0xa2f/0x1680 [ 201.812172][ T7165] ___sys_sendmsg+0x134/0x1d0 [ 201.812215][ T7165] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.812315][ T7165] __sys_sendmsg+0x16d/0x220 [ 201.812357][ T7165] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.812396][ T7165] ? __x64_sys_futex+0x1e0/0x4c0 [ 201.812447][ T7165] ? rcu_is_watching+0x12/0xc0 [ 201.812491][ T7165] do_syscall_64+0xcd/0x230 [ 201.812547][ T7165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.812581][ T7165] RIP: 0033:0x7fdff878e969 [ 201.812608][ T7165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.812641][ T7165] RSP: 002b:00007fdff65f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.812672][ T7165] RAX: ffffffffffffffda RBX: 00007fdff89b5fa0 RCX: 00007fdff878e969 [ 201.812692][ T7165] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000005 [ 201.812713][ T7165] RBP: 00007fdff8810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 201.812733][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.812753][ T7165] R13: 0000000000000000 R14: 00007fdff89b5fa0 R15: 00007fff230ae8f8 [ 201.812807][ T7165] [ 202.673068][ T7180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.315'. [ 203.077630][ T7195] random: crng reseeded on system resumption [ 203.263738][ T7190] vivid-003: ================= START STATUS ================= [ 203.283867][ T7190] vivid-003: Radio HW Seek Mode: Bounded [ 203.299504][ T7190] vivid-003: Radio Programmable HW Seek: false [ 203.318957][ T7190] vivid-003: RDS Rx I/O Mode: Block I/O [ 203.403217][ T7190] vivid-003: Generate RBDS Instead of RDS: false [ 203.409771][ T7190] vivid-003: RDS Reception: true [ 203.425712][ T7190] vivid-003: RDS Program Type: 0 inactive [ 203.431948][ T7190] vivid-003: RDS PS Name: inactive [ 203.437255][ T7190] vivid-003: RDS Radio Text: inactive [ 203.477574][ T7190] vivid-003: RDS Traffic Announcement: false inactive [ 203.484753][ T7190] vivid-003: RDS Traffic Program: false inactive [ 203.493028][ T7190] vivid-003: RDS Music: false inactive [ 203.507117][ T7190] vivid-003: ================== END STATUS ================== [ 204.253805][ T7197] can: request_module (can-proto-0) failed. [ 204.627710][ T7225] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 204.645019][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.1.326 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 204.645066][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 204.645085][ T7225] Call Trace: [ 204.645096][ T7225] [ 204.645109][ T7225] dump_stack_lvl+0x16c/0x1f0 [ 204.645166][ T7225] sysfs_warn_dup+0x7f/0xa0 [ 204.645222][ T7225] sysfs_do_create_link_sd+0x124/0x140 [ 204.645291][ T7225] sysfs_create_link+0x61/0xc0 [ 204.645345][ T7225] device_add+0x62c/0x1a70 [ 204.645396][ T7225] ? __pfx_device_add+0x10/0x10 [ 204.645439][ T7225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.645491][ T7225] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 204.645554][ T7225] wiphy_register+0x1c9c/0x2850 [ 204.645591][ T7225] ? netdev_run_todo+0x864/0x1320 [ 204.645634][ T7225] ? __dev_printk+0x1c0/0x270 [ 204.645679][ T7225] ? __pfx_wiphy_register+0x10/0x10 [ 204.645742][ T7225] ieee80211_register_hw+0x2432/0x4020 [ 204.645796][ T7225] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 204.645849][ T7225] ? find_held_lock+0x2b/0x80 [ 204.645885][ T7225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.645934][ T7225] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 204.645974][ T7225] ? __hrtimer_setup+0x176/0x280 [ 204.646032][ T7225] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 204.646110][ T7225] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 204.646155][ T7225] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 204.646211][ T7225] ? __asan_memcpy+0x3c/0x60 [ 204.646257][ T7225] hwsim_new_radio_nl+0xb51/0x12c0 [ 204.646316][ T7225] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 204.646384][ T7225] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 204.646438][ T7225] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 204.646502][ T7225] genl_family_rcv_msg_doit+0x206/0x2f0 [ 204.646558][ T7225] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 204.646610][ T7225] ? trace_cap_capable+0x18d/0x200 [ 204.646657][ T7225] ? bpf_lsm_capable+0x9/0x10 [ 204.646692][ T7225] ? security_capable+0x7e/0x260 [ 204.646727][ T7225] ? ns_capable+0xd7/0x110 [ 204.646768][ T7225] genl_rcv_msg+0x55c/0x800 [ 204.646825][ T7225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 204.646874][ T7225] ? __pfx___dev_queue_xmit+0x10/0x10 [ 204.646907][ T7225] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 204.646963][ T7225] ? __lock_acquire+0xaa4/0x1ba0 [ 204.647016][ T7225] netlink_rcv_skb+0x16d/0x440 [ 204.647061][ T7225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 204.647114][ T7225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 204.647182][ T7225] ? __pfx_down_read+0x10/0x10 [ 204.647216][ T7225] ? netlink_deliver_tap+0x1ae/0xd30 [ 204.647273][ T7225] genl_rcv+0x28/0x40 [ 204.647319][ T7225] netlink_unicast+0x53a/0x7f0 [ 204.647371][ T7225] ? __pfx_netlink_unicast+0x10/0x10 [ 204.647411][ T7225] ? __lock_acquire+0xaa4/0x1ba0 [ 204.647466][ T7225] netlink_sendmsg+0x8d1/0xdd0 [ 204.647519][ T7225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.647581][ T7225] ____sys_sendmsg+0xa98/0xc70 [ 204.647635][ T7225] ? copy_msghdr_from_user+0x10a/0x160 [ 204.647675][ T7225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.647748][ T7225] ___sys_sendmsg+0x134/0x1d0 [ 204.647792][ T7225] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.647891][ T7225] __sys_sendmsg+0x16d/0x220 [ 204.647934][ T7225] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.647973][ T7225] ? __x64_sys_futex+0x1e0/0x4c0 [ 204.648023][ T7225] ? rcu_is_watching+0x12/0xc0 [ 204.648068][ T7225] do_syscall_64+0xcd/0x230 [ 204.648123][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.648157][ T7225] RIP: 0033:0x7f8c6d38e969 [ 204.648183][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.648215][ T7225] RSP: 002b:00007f8c6e287038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.648255][ T7225] RAX: ffffffffffffffda RBX: 00007f8c6d5b5fa0 RCX: 00007f8c6d38e969 [ 204.648277][ T7225] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 204.648297][ T7225] RBP: 00007f8c6d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 204.648317][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.648337][ T7225] R13: 0000000000000000 R14: 00007f8c6d5b5fa0 R15: 00007ffe5ddb0cc8 [ 204.648382][ T7225] [ 205.451068][ T7234] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 205.691757][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 206.358539][ T7251] netlink: 342 bytes leftover after parsing attributes in process `syz.2.332'. [ 208.812243][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.345'. [ 209.322163][ T7296] ima: policy update failed [ 209.388237][ T30] audit: type=1802 audit(4294967322.711:3): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.346" res=0 errno=0 [ 209.830202][ T7326] netlink: 338 bytes leftover after parsing attributes in process `syz.0.353'. [ 211.837432][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 211.857322][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.360'. [ 212.737254][ T7373] netlink: 342 bytes leftover after parsing attributes in process `syz.1.365'. [ 214.919890][ T7402] netlink: 186 bytes leftover after parsing attributes in process `syz.2.374'. [ 217.952213][ T7446] FAULT_INJECTION: forcing a failure. [ 217.952213][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 218.029798][ T7446] CPU: 1 UID: 0 PID: 7446 Comm: syz.3.386 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 218.029843][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 218.029861][ T7446] Call Trace: [ 218.029871][ T7446] [ 218.029883][ T7446] dump_stack_lvl+0x16c/0x1f0 [ 218.029947][ T7446] should_fail_ex+0x512/0x640 [ 218.029995][ T7446] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 218.030038][ T7446] should_failslab+0xc2/0x120 [ 218.030080][ T7446] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 218.030118][ T7446] ? __proc_create+0xc3/0x8c0 [ 218.030153][ T7446] ? __proc_create+0x2ce/0x8c0 [ 218.030197][ T7446] __proc_create+0x2ce/0x8c0 [ 218.030235][ T7446] ? __pfx___proc_create+0x10/0x10 [ 218.030272][ T7446] ? pcpu_chunk_relocate+0x126/0x190 [ 218.030311][ T7446] ? find_held_lock+0x2b/0x80 [ 218.030351][ T7446] proc_create_reg+0x7d/0x180 [ 218.030391][ T7446] ? __pfx_xfrm_statistics_seq_show+0x10/0x10 [ 218.030431][ T7446] proc_create_net_single+0x86/0x170 [ 218.030474][ T7446] ? __pfx_proc_create_net_single+0x10/0x10 [ 218.030532][ T7446] ? __pfx_xfrm_net_init+0x10/0x10 [ 218.030584][ T7446] xfrm_proc_init+0x4d/0x70 [ 218.030620][ T7446] xfrm_net_init+0x1f0/0xcc0 [ 218.030681][ T7446] ? __pfx_xfrm_net_init+0x10/0x10 [ 218.030733][ T7446] ops_init+0x1df/0x5f0 [ 218.030781][ T7446] setup_net+0x21e/0x850 [ 218.030827][ T7446] ? __pfx_setup_net+0x10/0x10 [ 218.030866][ T7446] ? lockdep_init_map_type+0x5c/0x280 [ 218.030918][ T7446] ? __pfx_down_read_killable+0x10/0x10 [ 218.030955][ T7446] ? debug_mutex_init+0x37/0x70 [ 218.030990][ T7446] copy_net_ns+0x2a6/0x5f0 [ 218.031042][ T7446] create_new_namespaces+0x3ea/0xad0 [ 218.031092][ T7446] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 218.031135][ T7446] ksys_unshare+0x45b/0xa40 [ 218.031183][ T7446] ? __pfx_ksys_unshare+0x10/0x10 [ 218.031227][ T7446] ? xfd_validate_state+0x5d/0x180 [ 218.031262][ T7446] ? rcu_is_watching+0x12/0xc0 [ 218.031302][ T7446] __x64_sys_unshare+0x31/0x40 [ 218.031346][ T7446] do_syscall_64+0xcd/0x230 [ 218.031398][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.031432][ T7446] RIP: 0033:0x7f850378e969 [ 218.031459][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.031491][ T7446] RSP: 002b:00007f850463a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 218.031522][ T7446] RAX: ffffffffffffffda RBX: 00007f85039b5fa0 RCX: 00007f850378e969 [ 218.031543][ T7446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 218.031561][ T7446] RBP: 00007f8503810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 218.031579][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.031598][ T7446] R13: 0000000000000000 R14: 00007f85039b5fa0 R15: 00007ffcf1a51d98 [ 218.031639][ T7446] [ 218.708551][ T7450] [U]  [ 218.711764][ T7450] [U] [ 218.714562][ T7450] [U] [ 218.717318][ T7450] [U] [ 218.798244][ T7450] [U] [ 218.801054][ T7450] [U] [ 218.803907][ T7450] [U] [ 218.806675][ T7450] [U] [ 218.839640][ T7450] [U] [ 218.842840][ T7450] [U] [ 218.845612][ T7450] [U] [ 218.848376][ T7450] [U] [ 218.949282][ T7450] [U] [ 219.456635][ T7467] random: crng reseeded on system resumption [ 219.554196][ T7460] vivid-003: ================= START STATUS ================= [ 219.562336][ T7460] vivid-003: Radio HW Seek Mode: Bounded [ 219.568447][ T7460] vivid-003: Radio Programmable HW Seek: false [ 219.579380][ T7460] vivid-003: RDS Rx I/O Mode: Block I/O [ 219.589054][ T7460] vivid-003: Generate RBDS Instead of RDS: false [ 219.603510][ T7460] vivid-003: RDS Reception: true [ 219.623208][ T7460] vivid-003: RDS Program Type: 0 inactive [ 219.629074][ T7460] vivid-003: RDS PS Name: inactive [ 219.676034][ T7460] vivid-003: RDS Radio Text: inactive [ 219.683212][ T7460] vivid-003: RDS Traffic Announcement: false inactive [ 219.690281][ T7460] vivid-003: RDS Traffic Program: false inactive [ 219.699783][ T7460] vivid-003: RDS Music: false inactive [ 219.705497][ T7460] vivid-003: ================== END STATUS ================== [ 220.381584][ T7479] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 220.433787][ T7474] [ 220.436277][ T7474] ====================================================== [ 220.443428][ T7474] WARNING: possible circular locking dependency detected [ 220.450493][ T7474] 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 Not tainted [ 220.457740][ T7474] ------------------------------------------------------ [ 220.464853][ T7474] syz.1.395/7474 is trying to acquire lock: [ 220.470789][ T7474] ffff888025cbdd98 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 220.480721][ T7474] [ 220.480721][ T7474] but task is already holding lock: [ 220.488171][ T7474] ffff888025cbd868 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 220.499518][ T7474] [ 220.499518][ T7474] which lock already depends on the new lock. [ 220.499518][ T7474] [ 220.510055][ T7474] [ 220.510055][ T7474] the existing dependency chain (in reverse order) is: [ 220.519114][ T7474] [ 220.519114][ T7474] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 220.527974][ T7474] blk_alloc_queue+0x619/0x760 [ 220.533339][ T7474] blk_mq_alloc_queue+0x179/0x290 [ 220.538983][ T7474] __blk_mq_alloc_disk+0x29/0x120 [ 220.544607][ T7474] loop_add+0x496/0xb70 [ 220.549357][ T7474] loop_init+0x164/0x270 [ 220.554186][ T7474] do_one_initcall+0x120/0x6e0 [ 220.559546][ T7474] kernel_init_freeable+0x5c2/0x900 [ 220.565362][ T7474] kernel_init+0x1c/0x2b0 [ 220.570273][ T7474] ret_from_fork+0x48/0x80 [ 220.575264][ T7474] ret_from_fork_asm+0x1a/0x30 [ 220.580622][ T7474] [ 220.580622][ T7474] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 220.587917][ T7474] fs_reclaim_acquire+0x102/0x150 [ 220.593548][ T7474] kmem_cache_alloc_noprof+0x53/0x3b0 [ 220.599525][ T7474] __kernfs_new_node+0xd2/0x8a0 [ 220.604951][ T7474] kernfs_new_node+0x13c/0x1e0 [ 220.610307][ T7474] kernfs_create_dir_ns+0x4c/0x1a0 [ 220.616008][ T7474] sysfs_create_dir_ns+0x13a/0x2b0 [ 220.621802][ T7474] kobject_add_internal+0x2c4/0x9b0 [ 220.627580][ T7474] kobject_add+0x16e/0x240 [ 220.632582][ T7474] elv_register_queue+0xd3/0x2a0 [ 220.638108][ T7474] blk_register_queue+0x3c4/0x560 [ 220.643713][ T7474] add_disk_fwnode+0x911/0x13a0 [ 220.649155][ T7474] nbd_dev_add+0x78e/0xbb0 [ 220.654147][ T7474] nbd_init+0x181/0x320 [ 220.658883][ T7474] do_one_initcall+0x120/0x6e0 [ 220.664412][ T7474] kernel_init_freeable+0x5c2/0x900 [ 220.670206][ T7474] kernel_init+0x1c/0x2b0 [ 220.675209][ T7474] ret_from_fork+0x48/0x80 [ 220.680201][ T7474] ret_from_fork_asm+0x1a/0x30 [ 220.685557][ T7474] [ 220.685557][ T7474] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 220.693460][ T7474] __lock_acquire+0x1173/0x1ba0 [ 220.698891][ T7474] lock_acquire+0x179/0x350 [ 220.703982][ T7474] __mutex_lock+0x199/0xb90 [ 220.709078][ T7474] queue_requests_store+0x1c7/0x310 [ 220.714856][ T7474] queue_attr_store+0x273/0x310 [ 220.720383][ T7474] sysfs_kf_write+0xef/0x150 [ 220.725661][ T7474] kernfs_fop_write_iter+0x354/0x510 [ 220.731501][ T7474] vfs_write+0x5bd/0x1180 [ 220.736379][ T7474] ksys_write+0x12a/0x240 [ 220.741252][ T7474] do_syscall_64+0xcd/0x230 [ 220.746318][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.752758][ T7474] [ 220.752758][ T7474] other info that might help us debug this: [ 220.752758][ T7474] [ 220.763000][ T7474] Chain exists of: [ 220.763000][ T7474] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 220.763000][ T7474] [ 220.776785][ T7474] Possible unsafe locking scenario: [ 220.776785][ T7474] [ 220.784249][ T7474] CPU0 CPU1 [ 220.789636][ T7474] ---- ---- [ 220.795010][ T7474] lock(&q->q_usage_counter(io)#29); [ 220.800414][ T7474] lock(fs_reclaim); [ 220.806938][ T7474] lock(&q->q_usage_counter(io)#29); [ 220.814862][ T7474] lock(&q->elevator_lock); [ 220.819477][ T7474] [ 220.819477][ T7474] *** DEADLOCK *** [ 220.819477][ T7474] [ 220.827629][ T7474] 6 locks held by syz.1.395/7474: [ 220.832665][ T7474] #0: ffff888031d0e9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 220.841768][ T7474] #1: ffff888032618420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 220.850795][ T7474] #2: ffff88805ff40c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 220.860742][ T7474] #3: ffff8881417f3d28 (kn->active#101){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 220.871000][ T7474] #4: ffff888025cbd868 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 220.882735][ T7474] #5: ffff888025cbd8a0 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 220.894724][ T7474] [ 220.894724][ T7474] stack backtrace: [ 220.900628][ T7474] CPU: 0 UID: 0 PID: 7474 Comm: syz.1.395 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(full) [ 220.900664][ T7474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.900680][ T7474] Call Trace: [ 220.900689][ T7474] [ 220.900699][ T7474] dump_stack_lvl+0x116/0x1f0 [ 220.900741][ T7474] print_circular_bug+0x275/0x350 [ 220.900776][ T7474] check_noncircular+0x14c/0x170 [ 220.900813][ T7474] __lock_acquire+0x1173/0x1ba0 [ 220.900855][ T7474] lock_acquire+0x179/0x350 [ 220.900888][ T7474] ? queue_requests_store+0x1c7/0x310 [ 220.900916][ T7474] ? __pfx___might_resched+0x10/0x10 [ 220.900946][ T7474] ? do_raw_spin_lock+0x12c/0x2b0 [ 220.900988][ T7474] __mutex_lock+0x199/0xb90 [ 220.901027][ T7474] ? queue_requests_store+0x1c7/0x310 [ 220.901054][ T7474] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 220.901090][ T7474] ? queue_requests_store+0x1c7/0x310 [ 220.901115][ T7474] ? lockdep_hardirqs_on+0x7c/0x110 [ 220.901154][ T7474] ? __pfx___mutex_lock+0x10/0x10 [ 220.901197][ T7474] ? __pfx_autoremove_wake_function+0x10/0x10 [ 220.901235][ T7474] ? queue_requests_store+0x1c7/0x310 [ 220.901260][ T7474] queue_requests_store+0x1c7/0x310 [ 220.901287][ T7474] ? __pfx_queue_requests_store+0x10/0x10 [ 220.901315][ T7474] ? __mutex_trylock_common+0xe9/0x250 [ 220.901354][ T7474] ? __pfx_queue_requests_store+0x10/0x10 [ 220.901381][ T7474] queue_attr_store+0x273/0x310 [ 220.901406][ T7474] ? __pfx_queue_attr_store+0x10/0x10 [ 220.901458][ T7474] ? find_held_lock+0x2b/0x80 [ 220.901483][ T7474] ? sysfs_file_kobj+0xe4/0x290 [ 220.901524][ T7474] ? __pfx_queue_attr_store+0x10/0x10 [ 220.901567][ T7474] sysfs_kf_write+0xef/0x150 [ 220.901613][ T7474] kernfs_fop_write_iter+0x354/0x510 [ 220.901648][ T7474] ? __pfx_sysfs_kf_write+0x10/0x10 [ 220.901688][ T7474] vfs_write+0x5bd/0x1180 [ 220.901714][ T7474] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 220.901751][ T7474] ? __pfx___mutex_lock+0x10/0x10 [ 220.901791][ T7474] ? __pfx_vfs_write+0x10/0x10 [ 220.901827][ T7474] ksys_write+0x12a/0x240 [ 220.901852][ T7474] ? __pfx_ksys_write+0x10/0x10 [ 220.901876][ T7474] ? rcu_is_watching+0x12/0xc0 [ 220.901906][ T7474] do_syscall_64+0xcd/0x230 [ 220.901947][ T7474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.901974][ T7474] RIP: 0033:0x7f8c6d38e969 [ 220.901996][ T7474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.902023][ T7474] RSP: 002b:00007f8c6e287038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.902048][ T7474] RAX: ffffffffffffffda RBX: 00007f8c6d5b5fa0 RCX: 00007f8c6d38e969 [ 220.902066][ T7474] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 220.902082][ T7474] RBP: 00007f8c6d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 220.902099][ T7474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.902115][ T7474] R13: 0000000000000000 R14: 00007f8c6d5b5fa0 R15: 00007ffe5ddb0cc8 [ 220.902140][ T7474] [ 220.984972][ T7467] PM: hibernation: Basic memory bitmaps created [ 221.330591][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 221.472424][ T7483] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 221.495144][ T7467] can: request_module (can-proto-0) failed. [ 221.715419][ T7465] PM: hibernation: Basic memory bitmaps freed