last executing test programs: 3m31.151018025s ago: executing program 3 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000090000000200000a0900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000f0000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000240004802000018007000100727400001400028008000240000000040800014000000010a0000740be6c818d4e75bb9eebfa44cd99192ffe3984e8e946a76226bc38869cf725f3bc8db2788d4e608a29c3a29584be7567ba04f4ac0bcd7e1f474dd259fe0058a153e4f159a3144130a1ce3e7877be74ca53cdeaddc667c2e9a9692a2f387ebc74328163e35973dd5b2b7e238f2192305bce61c40ab8dfb31242ee74cc1370cecca0c308f0febd22b03a42799ece5ad33531a5b534859487ac95ec07ddee14000000110001"], 0x178}}, 0x0) 3m31.080846571s ago: executing program 3 (id=79): r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x766a, 0x10000, 0x2, 0x2bf}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x40) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000000180)=""/221) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x40}}, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000340)='squashfs\x00', 0x2418898, 0x0) 3m30.911397366s ago: executing program 3 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) 3m30.850043615s ago: executing program 3 (id=83): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x28c032, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e2c, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x6e1f, @private=0xa010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)='B', 0x1}], 0x1}, 0x20000010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x9}, &(0x7f0000000300)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000500), 0x40, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000580)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='add', 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') preadv(r2, &(0x7f0000002c00)=[{&(0x7f0000002b40)=""/182, 0xb6}], 0x37, 0xd6c40391, 0x0) 3m29.947946745s ago: executing program 3 (id=99): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x501, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x2081, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000240)='\f7', 0x2}, {0x0, 0x3b}], 0x2) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000692000/0x4000)=nil) munmap(&(0x7f0000c32000/0x4000)=nil, 0x4000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f0000a88000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) setns(0xc9, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r1, 0x100) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffa}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="ebdaaa18f6a5a9782aedfd341afdffa04c0f4577ad1bde8a43395a8c5205086dd9dfd94c5f6f357e", 0x28}, {&(0x7f0000000500)="fe250776cec922a7943ff548302347a1da2f15c468dc6cf97d009dbda239a44b219ab49913f490bcee7c286d57a17c19436c077a2d95c6788ebb579bb768c9c12570fecc90643571e755d0b3f3cba48f06d923f9af46d616cd83a398501c24ffb2b2aaff98c9fef2ce90a8ebd607ee174d326c869dec338223125c631abd7cb6450d9657c2727f15ef48416131473960397b", 0x92}, {&(0x7f00000005c0)="b9b38fd2bc3b482b6e2af11453142c5853bd20f4c94e0ad6f00683e09ee567e921cb371c77ff41097a255b9806e3f99af230d3c97e770f932daa22ccd1550b196532a763308f81c39625a5d766268cd21514c931f155cbf3dbe4e6891b655ddad90de01cb197dcb570c80958748cf0801dbf062704419e4855ce6a4da2a17e60", 0x80}], 0x3, 0x0, 0x0, 0x24044051}, 0x800) munmap(&(0x7f0000695000/0x3000)=nil, 0x3000) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) close(r3) r4 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x2000)=nil, r2, 0x2, 0x20010, r3, 0x0) brk(0x7) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000280)={0xa, 0x0, 0x79d4246e, @mcast2, 0x40}, 0x1c) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x32) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="ee", 0xfdef}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRESDEC=r4, @ANYRESHEX, @ANYRES32=r8, @ANYBLOB="10005a800c0000800500010048000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000769000/0x1000)=nil) 3m29.706759895s ago: executing program 3 (id=100): setns(0xc9, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/class/net/eth0/threaded\x00', 0x101) (rerun: 32) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/eth0/threaded\x00', 0x150142, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 3m29.666300358s ago: executing program 32 (id=100): setns(0xc9, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys/class/net/eth0/threaded\x00', 0x101) (rerun: 32) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/eth0/threaded\x00', 0x150142, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) 1m41.461036107s ago: executing program 2 (id=1520): syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x20000) (async) r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x20000) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e040a260c"], 0x7) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e040a260c"], 0x7) r1 = getpgrp(0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x23f5, 0xdd2f, 0x1, 0xfbffffffffffffff, 0x7f, r1}) setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="f8d857", 0x3}], 0x1) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/0:0:0:0\x00', 0x42c00, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg/0:0:0:0\x00', 0x42c00, 0x0) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) keyctl$assume_authority(0x10, 0x0) (async) keyctl$assume_authority(0x10, 0x0) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) 1m40.88730455s ago: executing program 2 (id=1530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) 1m40.883500717s ago: executing program 2 (id=1532): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=tcp,vers=3,mountport=2049,mountproto=udp\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800040000fcffff08000900fc000020080011000700000008002000800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x2004c8d0}, 0xfe42726433ecb91a) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x9c, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r7}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x9c}, 0x1, 0x400000000000000}, 0x40) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 1m39.980634714s ago: executing program 2 (id=1551): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000bc0)) timer_settime(0x0, 0x0, &(0x7f0000000c00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000c40)=ANY=[], 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(r1, &(0x7f0000000c40)=[{&(0x7f0000000c80)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000006c0)=0x7ff, 0x12) 1m39.421371518s ago: executing program 2 (id=1552): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="c02da4c8b6d34a1489e67f6ff4ebf6d0790a132749a0e1853ce081647fbb726484c37001e71a2b33660700174a298e7e431e23cc6bd2f657772feeec382e7dfb624278929f34bd92b9028e103f2348600f0e20a21b51fe16bf2442bf9f569d6db40575346e1654f8b8cfff4074a3f98116f5196bad0903000000db422316e5de0bef014c1d7a56cc7775bb8805"], 0x0, 0x80, 0x3, 0x1}, 0x13) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000640)={'#! ', './debug/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) write(r3, &(0x7f0000000380)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400150008000200010101010500040040000000", 0x60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/ip_vs\x00') ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x24000894) sendmsg$nl_route(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r7, &(0x7f00000002c0)='0', 0x1) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone(0x40000211, 0x0, 0xfffffeae, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x1ff) 1m38.800929406s ago: executing program 2 (id=1558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x41, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x1, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x3f, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0x6, 0x18e, 0x1000, 0x5, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000003, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x8002, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000002900000036000000330000800000000014000000000000002900000008"], 0x30}}], 0x1, 0x4001c00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000c00)={&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000e40)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000ec0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x2007fffffffffffe, 0x7, 0x5, 0xb, 0x6, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0xb04}) syz_open_dev$vcsa(&(0x7f0000000f80), 0x7b95b611, 0x802) openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000010c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000001140)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001180)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="be"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 1m23.529712478s ago: executing program 33 (id=1558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000006c0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0x41, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x1, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0x4d5d, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x3f, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x1, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0x6, 0x18e, 0x1000, 0x5, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000003, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x8002, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000000002900000036000000330000800000000014000000000000002900000008"], 0x30}}], 0x1, 0x4001c00) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000c00)={&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0), &(0x7f0000000d00)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)=ANY=[], 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000e40)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000ec0)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x2007fffffffffffe, 0x7, 0x5, 0xb, 0x6, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0xb04}) syz_open_dev$vcsa(&(0x7f0000000f80), 0x7b95b611, 0x802) openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000010c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001100)=[@text32={0x20, &(0x7f0000001140)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001180)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="7b87f20f", @ANYBLOB="be"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 34.421545182s ago: executing program 4 (id=2310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000920010073797a300000000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002"], 0xdc}}, 0x0) 34.341539135s ago: executing program 4 (id=2311): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffef7, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0036000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) 34.338359061s ago: executing program 4 (id=2319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x178}}, 0x0) 34.261156927s ago: executing program 4 (id=2313): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = getpgid(0x0) r1 = landlock_create_ruleset(&(0x7f0000000640)={0x2832, 0x2, 0x2, 0xc, 0x1}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) pidfd_send_signal(r2, 0xd, 0x0, 0x4) landlock_create_ruleset(&(0x7f0000000200)={0x248, 0x0, 0x2, 0x4840, 0x1, 0x1}, 0x30, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180), &(0x7f0000000280), 0x2, 0x0) mkdir(&(0x7f0000000480)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000007c0)='./bus\x00', 0x200000, 0xb9) write(r4, &(0x7f0000000580)="303132333a616263643a3073a95e0cfa026d95820e4718efef4126670a6ba59cb94a1fa435af5a52d706da8f676f04b7467317f2194803c26c35270e3ee076c25f72", 0x42) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400), 0x40, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) process_mrelease(r2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0x81) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x8000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000006c0)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000740)=[@text64={0x40, &(0x7f0000000780)="430f7f484f0f20e035000002000f22e0f3a50fc75b00c4c3fd5f15cd7effff060f01cf66b836018ee80f32400fc7586e450f20c1", 0x34}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_setup(0x47a5, &(0x7f0000000000)={0x0, 0x6ed1, 0x100, 0x3, 0x305}, &(0x7f00000001c0), &(0x7f0000000600), &(0x7f0000000240)) 33.928914152s ago: executing program 4 (id=2317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010400000000000f00000a0000000900010073797a30000000004c000000030a010400000000000000000a0000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000005e000b00070066696c746572000044010000060a010400000000000000000a0000000900010073797a30000000000900020073797a300000000018010480380001800e000100696d6d6564696174650000002400028008000140000000011800028014000100000000000000000000000000000000012c0001800e000100696d6d6564696174650000001800028008000140000000020c0002800800010000000001200001800800010064757000140002800800014000000001080002"], 0x1d8}}, 0x0) 33.661305743s ago: executing program 4 (id=2329): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) move_pages(0x0, 0x20a0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) socket(0x2, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000780)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x13}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000210001000000000004000000ff0100000000000000c8ad36fc39d5317147e446a100000000000001fc0200000000000000000000000000004e220005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xbc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='xprtsec\x00', &(0x7f0000000100)='6ls\x00'/13, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f00000002c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000010800000000fddbdf2500000000", @ANYRES64=r5, @ANYBLOB="00000200011000000c002b0100000100", @ANYRESOCT=r0, @ANYRES32=r8], 0x2c}}, 0x0) 33.55542467s ago: executing program 34 (id=2329): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) move_pages(0x0, 0x20a0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) socket(0x2, 0xa, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000780)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0x13}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4000000004c94215d121cd0c53e27eec317", 0xd8}], 0x1}, 0x800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="bc000000210001000000000004000000ff0100000000000000c8ad36fc39d5317147e446a100000000000001fc0200000000000000000000000000004e220005", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xbc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='xprtsec\x00', &(0x7f0000000100)='6ls\x00'/13, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f00000002c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000010800000000fddbdf2500000000", @ANYRES64=r5, @ANYBLOB="00000200011000000c002b0100000100", @ANYRESOCT=r0, @ANYRES32=r8], 0x2c}}, 0x0) 15.872590272s ago: executing program 0 (id=2584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) 15.872320019s ago: executing program 0 (id=2585): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/keys\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xd, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl(r1, 0xc4c85513, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 14.68864159s ago: executing program 0 (id=2602): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) r3 = dup(r2) getsockname$l2tp6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000500)=0x20) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x5000, 0x0, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x5}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000005c0)="06c3", 0x2}, {&(0x7f0000000880)="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", 0x615}, {&(0x7f0000000040)="4c7911315ed07e13be5391e38b475840b64ca77cee504724dd2da16f11", 0x1d}], 0x3) 14.621110601s ago: executing program 0 (id=2603): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x40000000, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x4}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x400}, 0x28) sendmsg$key(r1, &(0x7f00000002c0)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000bf83ed48a6cad41d2f0fc662f33e04d00002a601ff487f0b8b5fe623ef00130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000"], 0x80}}, 0x4000000) r2 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000bc0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000c00)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = accept(r0, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000080)=0xfffffffffffffffa) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000840)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f0000000800)={&(0x7f0000000780)={0x3, 0x202, 0x7, {}, {}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3d, 0x0, 0x0, 0x0, "21f6bbc7dfee204811b19b0bef3514d59bf47f160481dcfd3ea4ae91ec37e1cbffd85dd6abb2b95739587fdaf1bce9c571d94f5c2c2195555b30f5e77e03ef4d"}}, 0x80}, 0x1, 0x0, 0x0, 0x1084}, 0x20004004) socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x0, 0x0) symlink(&(0x7f0000000440)='.\x00', &(0x7f0000000480)='./file0\x00') mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x16f0d8, 0x0) r6 = syz_usbip_server_init(0x4) write$usbip_server(r6, &(0x7f0000000380)=@ret_submit={{0x3, 0x80000000, 0x0, 0x0, 0x9}, 0xe, 0x0, 0xfffffffd, 0x0, 0x3ff}, 0x30) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000880)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f00000008c0)={r7, 0x1, 0x80, "c94f3a4bcbc57dc911822a858fba503c0a6b0a82"}) mount$bind(&(0x7f0000000540)='./proc\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x8f100a, 0x0) mount$bind(&(0x7f0000000700)='.\x00', &(0x7f0000000740)='./file0/file0\x00', 0x0, 0x10dcd8, 0x0) timer_gettime(r3, &(0x7f0000000000)) 14.025591887s ago: executing program 0 (id=2611): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000011c0)='./proc\x00', &(0x7f0000001200)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000040)='./debug/kvm/halt_successful_poll\x00', 0x28683, 0x19) write(r2, &(0x7f0000001280)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000000c0)={{0x3a, @loopback, 0x4e20, 0x3, 'lblc\x00', 0x34, 0x8, 0x27}, {@private=0xa010101, 0x4e23, 0x4, 0x1, 0x0, 0x1}}, 0x44) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f00000012c0)='projid_map\x00') 13.761908701s ago: executing program 0 (id=2612): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000480)=0x3, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4000007}) (async) write$sndseq(r1, &(0x7f0000000180)=[{0x22, 0x0, 0x0, 0x0, @tick, {0x8}, {}, @raw32={[0x0, 0x1, 0xfdffffff]}}], 0x1c) (async) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000440)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 13.550585151s ago: executing program 35 (id=2612): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0xe0c81) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000480)=0x3, 0x4) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4000007}) (async) write$sndseq(r1, &(0x7f0000000180)=[{0x22, 0x0, 0x0, 0x0, @tick, {0x8}, {}, @raw32={[0x0, 0x1, 0xfdffffff]}}], 0x1c) (async) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1) (async) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000440)={0xf, 0x8, 0xfa00, {r4, 0xc}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009f00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000900)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 6.986662156s ago: executing program 6 (id=2703): socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x8080, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), 0x0, 0x0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000200), 0x10) (async) bind$vsock_stream(r3, &(0x7f0000000200), 0x10) listen(r3, 0x0) (async) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000280), 0x10) sendmmsg$alg(r4, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000400)={0x1, 0x5}, 0x8) (async) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000400)={0x1, 0x5}, 0x8) sendmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/73, 0x49}], 0x1}, 0x10000) recvfrom$unix(r5, &(0x7f0000000600)=""/263, 0x107, 0x0, 0x0, 0x0) (async) recvfrom$unix(r5, &(0x7f0000000600)=""/263, 0x107, 0x0, 0x0, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x6}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x35e, {[@window={0x9, 0x3}, @sack={0x5, 0x2}]}}}}}}, 0x3e) (async) write$tun(r1, &(0x7f0000000140)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x6}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x35e, {[@window={0x9, 0x3}, @sack={0x5, 0x2}]}}}}}}, 0x3e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xffff}, {0xfff2, 0xfff9}, {0x1, 0x9}}}, 0x24}}, 0x4000004) 3.64314371s ago: executing program 6 (id=2703): socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x8080, 0x0) fsetxattr$security_capability(r0, &(0x7f00000001c0), 0x0, 0x0, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local}) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000200), 0x10) (async) bind$vsock_stream(r3, &(0x7f0000000200), 0x10) listen(r3, 0x0) (async) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000280), 0x10) sendmmsg$alg(r4, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000400)={0x1, 0x5}, 0x8) (async) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000400)={0x1, 0x5}, 0x8) sendmmsg(r4, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/73, 0x49}], 0x1}, 0x10000) recvfrom$unix(r5, &(0x7f0000000600)=""/263, 0x107, 0x0, 0x0, 0x0) (async) recvfrom$unix(r5, &(0x7f0000000600)=""/263, 0x107, 0x0, 0x0, 0x0) write$tun(r1, &(0x7f0000000140)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x6}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x35e, {[@window={0x9, 0x3}, @sack={0x5, 0x2}]}}}}}}, 0x3e) (async) write$tun(r1, &(0x7f0000000140)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x6}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e24, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x35e, {[@window={0x9, 0x3}, @sack={0x5, 0x2}]}}}}}}, 0x3e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r10}, 0x10) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0xb, 0xffff}, {0xfff2, 0xfff9}, {0x1, 0x9}}}, 0x24}}, 0x4000004) 1.87961188s ago: executing program 5 (id=2749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300003000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002"], 0xdc}}, 0x0) 1.879143212s ago: executing program 6 (id=2750): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000005140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005100)={&(0x7f00000008c0)={0x4818, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x82}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xaa}, @NL80211_ATTR_CSA_IES={0x4798, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x11f0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x63, 0x3, "1be8e001ec7b9946a4852cf6d8a6f27c48fc2cf59090a3c6c963360c5ee2e05a2e04654981fc018848b46cd7ff880be633776c63e0a917dbd3f3da37a057c6bb51c6193d4f0c13803a5287f8063a1723db0fbc09a07ce70e59a35f8db9aa2a"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x75, 0x3, "ef00fc12c209da010901d586b8ecea25c7a4021558417a32905596fd65139a73e69e1f2dad4a9cd10719327f827438cd64a10b8692321f7727789e09ba79491038f61536e28b0efd605a80a9225e594ce32e7577f115dc619c57efa71c1bd99bbb676b140d85612467d2de1cee27f497a6"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "c839d828aa46e8cd447c3dcb791a2fc91fe090eeae666da86e100dfe6d71065e87ffde0d001d6094f28e4a1cd929daa5bd7b7c6e0806065d631dbc4aea399e43ce918c28af2b1ffd9098543db58e041db82acb952c84e8f61a0fb9bf588264b71a1e485dad75aec2a54f64d56ab658ac7f6f88f861b7d57f72111d1acec1c6175360354b37a61800a8197844f976bfc1e5820d0b020e289b3cdba60d26232d1d1c70d4441f48972fdf8629b7b891bb95b2f3c5aa66ef668c22d561124192902a1f2ff1466e2554f4c5a5c444c61b8d481db72e97e465ad4570c2fc2aa5a47822339ad7b58f9aef2bf28556ae56f6bb875c3a392ba2a897ea57a7228763d068fb2da67841267539d6dcb48bfad72083f65ae3c06384bb7726e7dcec60cfda9f2e924d0fd34575043ee699cc36c39e8a83ad7918618b98695da89f43fb3898b7c171da0f00e12a8f35ed31d6be380c3759ce5e68996e343f8dcc292257da7990dcf79f7fe6eecc56ed0cadd875c5be461f5e824ba5f74f3b4472b4c3f1620f7860a878cfa3e142b8c2fa0b57c29ffbb79ebe45dc7e48639ca9904be042a730831ea4c6dd3c106758aa983e64eec192fb2da6275708bb8bac78d8f661fcab92c95bed78af1771802cb69936569c64c98b96653652cc562a2ef571adb41de826a946f3477494e1464d1f3571bf0eecaf7f7a2c34705d6d7b8415f296886b079871ed18b1d03691b6420ad0f6c74f34ad6d390247d9f7c49bae063b7ebf118d0940fb1dd282c91dfe04885eddf122435ae89c8eecceb9f6a4ce5022140f4328d97aec200569bf7ea6720419100b5708bdf9dc2844b92cef081e27dc4b8cc8241b290093a78612e05701830909f49b710a43afbc888e2d4d5b74c5fd19ac46e6cc1ccd1f3d8f4cc358e42ed3bcd19d1a3cb436db24e7d8aae79f1cdfb65642fc3d3f86304a6e8ca967612d41e58895d0ac4d3b486f5b09c0f85e72b951fdbc712649164bee85057e6a4e51c73dccccb3043f48ca757111ce46ff9fc7b750255e2be0def79a818a736f2bd70ee9f1ae94a7e78ec9005276a309e289fadb7ee5321acd9beb00788fa505ab649b1c4e40fdc22d23e1dd5b3726f84265e0320809e1c5d88d68f38e471d188f74acffc3852d1b525db24c6a672fcb43754b5a0797c7bc7d1b3765a25d53e5cfc1d578c3653ae360d72659310c671591c9ac3b976e2871b92783a085dfa128dffbdb674663e9a81283e4530a0bce587de860f56ac4751038d5fdcc5bd3a2519a5b5ec95070e47050ca47389f1be42cb58dcd16b70936d2fe2611eb24c8023a1d8c4db6758f4f34970de498e4ddc0e9f42d56633c630f608845dbc7554ad517e56b2091c6c37ab846a89897947d54baafc0068b2e2edb2c64e7c1991953538708f9aa1f79f02115ca9f24d419caee1019bc23ee2c99de18c68b55a63c63defbb37ac75eca40772d4873c34209341b517d835afd18fad2c61d1b9c90f5ccb752aedc9c37cf6dd26d5c3dc3bbc0e4724b0e0021611cababd66145a427e04bad7cea78e60a69f4474636a950a7c210d9d8fbc2585ee3cafdabd17888f78fc2c2aa2061c0738bcc1c96aabb6e5c98497a502e1a7a9a78d36d29a33055671d2809d2e1dbc65217ae1e5eadc6c2cb85527871a1bc6f6e0d78495e5c70cfb1f71dc25630cf9dd86dc0c730ae266acb1713d02161f9d8da7f99ab78342bb56babc434c26dfd374bffad6d531045cd69f4a2a64adce385cdd7ac90978566e527e457d539e8827dd729486a8f62400ca871c33af3a3e8b00161762e609cfbea9260c331503d5ba1ac84fd462c530efbb1b0fd5b3d6d6ccbc51a3c66c14394624947879e6aa345c126c9cbfe120ee8910ea1c313b7f17693ed5c2d99b34b53d8454634549e231cea120fb15392652b46f79e83549006e45464f09c0f14e221aac9376815843c96dea79ee18c2bcfb256e42fb6ba04100194c87d6d91f42313affca4b5620ac4db193e20a6eebf87567cbfce4cf34d472c36cdeade6a9b7ae42b6528d8384732773432d3475caa3683ca00bd5f325320dc0a34479631805732c7efaab83bb01d3c611e3d6841bdfb197ebf767a1db1aacdf2a20f75bea6290d11293d97f440a53bacd53dbb1ce061cd9e8443c8848bc6b69835e15f1b68b5742b307074fd5880f19e2690b0aac66d8194ce6f20ac267e93bfdd0f935dcf722fd551fb861441a98efe928994f4ad69dc2cf6c79c414d2aa9d1ef55a4f763f9cf82aa61f54b1cb19c950ddd7d4363526f27f10f34446d5a470b16aceec9191ebad2825a7c7f070acd421fa567c95787a664b3fd53ba93089793f7a171a7aa476b424bb1e60869e1ac38643650daed31e6cf70e11701700be53c36e9cc7c50052c7d5c0a7cc8ddc62d37a0c23125a145ca8bee7501b133098ad518fcd1f32d23bf7a5ac37f0a53b5e0509601632cdc3cc68f603925096aca98d7d9f2aa92e5ed51809ce7804cfe8d711f0a502ed36b6cebd8967bb50895fc15a9ba4e871a7951317e95a1051fb45b648f06f6a890ca8f203f424441965e5259cb1dbf3b29dff123ec3f93a3e21923b6dfbe8b7de76e143f98caf4a1d1f0242e5bd53e192b7a134e04104e9dd52ad0a881fa38c0345aa40578f46e9ce9ee04619df7830bdee05f3c0187b4408581c9fbf38f13f21b1d28196b827fb6baec74d6935c5b0b290dece9efab3b9cbd5dd9c9be5dc2a083b692d879e40fc59efae074999591cf0325410a2b15a436b5258df5f84ce73d5fe27b4b241be05f0ccec11a92273cd14507c3ef93c3568a85eec9e83173f989fcc2df7aa3a9107d841a544aa9ce0392574ff0ebc333169b30cd45e3d6f780e16a193b69114ee8dacd942ac43f09e9bac94e4f9850006fb3fc3b0c31477c02aa3150fc1b313bf5d4593f916598d69c2729e7fc570feafb7ff1b39bb377098601f924f870e263b9b0558de61658ee334a23107b2669d662e8e2762cd10499915bfa8d48b1d347d8d2299ce168dd625a5329eaced036e9696bf469e0a3882ea82ed14c61f30b71a86167031588d9032371c18d4cfe6a670994f7637b72681cf150b892ea18e0b6477deae807aab81301ba047d861583dbda5be14f9776827713d533569568fc3a4ae9a40f6c980ca53bb1577d9d4ecd7e985f67169c043a378f0629ccad27a39116111e8e855ddfd3e5a133442e22c6559018e765c68daedf1edd808936bf5ba44b170c3bb3811ac0c4fd316f45b8c61bcab1b893c26264013a0e5b0f18db86c60221e706c6e24a444ef5d854107775f5bbff270e1fe2fb993ac80465ad8bb8491004eabc4c728d6ab418e7e675780ccae306aee3fe0621a81c07b590fc54bde58b6b7edf8cd58b5220acd44bbec646744cf8878400716ed30aea1db90a0e127a2affca46c2acc14769d10dc36f4d339e148b7a8ab9f44664810ae0d6cde5c85e09da851b91d648a7361ccacce1ee282f541da7ba9088a4f1d33615a883fe09f177c34ae6b1346d0583f1b5929396f0b17bcf6a6d0b5f28209756ce7f9608d14d34524cdbed30609543b81415b69dd2de2dd36ef75743bba2736957c61ca807d51b2e13c8d9602240ae2103c29461d400db003d9a30abce01fd23dfadba69d4a77bd67f7aae558aa1d37f151effac9fdc51880fb0eff85643cd4ab8b7cfb42085733f197b58c8b0ff2c9218f45170bfcee440d22f9f226a0d4b1e31225086c7f4a5b09bd9a73d0f0a63e65505284d552c9888a68a11d4528efd51fdd166f0023c49a53719e999470bfb34d11a1019f90efa1cb365f93ab6474962f5053351b1ec4f6a1961a111e27aaea41a5bfc36bc2b47eb51b1ec966fda0230aa127db43501027dba89236eeafe45fc20e478b9e7725d6b2c2a8939621633553e16859f079912e2d27ff5e4634b9259e41b7d0170dae12bb6c74e554d51e5fc4afe2e97541a5c17bc75a11056bd5d77e6dddba083e131fc7daa3e5bd83616e178982b909c1ee97f10a9323d5009b354a07cfc87e86c07e2ed1c7ee88d19a7fd4cc346a23db5ed6f16940ecfcb3be5018ee7da9509b19e5aa4e00907a8ceddad1c4eb3ac150ae6f17b85b1bae22e0a7d8d77db17a291a55d435e3b0c3f4a19bff56ee1ae13574d7f8f6c6d5b18a084d5a60d48dce5be3b70b457fce53382d3ff997fa5c9630913e4d8ffd786a46a5f31496b7e3f1b94f3fd4e1767c2baff81643416b0b91b4796c5cbdd8678e88f87d77c68d9c42982f98a01bafa9241f5e962b52af28b34127227b2efd74a81cce74118ad64b83e1c258d6d8b743b49e455722fb101465f79b46747489e96fc836eb0c82bec56c7a83804d24cfe46022af372206adbe592faa57be22fdfac615b28cb740c2f1b4118ed53ec1c095a5de85f81d43685cdd51dbf53beda4cde7dd0d2bc13036018816b895c676ed7c9723fa43cc7ab8fe16b25dfb1227e412b4756f0e06fb0b088acf10b238bac317fbbe051ea2b47e1afbe1d6825d7f1b3c6ad13ca2edef51a808b64e05c307f65c39fe6eb3c8d75c1696158fd55ec0d20ace56014ecf4eaf065974749e51378224294f088915399f14534c1458fd6f55577cd1ee5d6695c6305e6b4d03d50dcb1d906e6e184a9e359dc00722831a4eb53429d3c29bb7cc644ec992e2f258cab298d92cb2fdd464bff15a58d873eee0e9d57b5f88870ce2ce8bd71a665051833de0e71ffb418c246e02158c925f28df5bae945472613569924c358f066d2a66c6841c295b066e2f9ab37b553fbc0d3e2006ca6f042449d5138f6a7b749751b0c30993063cd1dba419bb433de8346d2097f2e86cfb78b19a34c13c39c215d5b61da19625d3869799a404ca796701bccbee982886e35f16727cfca1bc500554256da40df551017f12498583679d4f7f13f4e30fe84e87a23670acb1affb3a235f514c87bc20d313aa797066f7d39c56ac53205709e6d16092fb094d6da1e89ed120295c2e6dddb454b0b775d343460a9bd37ca798abc8892f1bf3f9a3be3dc88a0d187c4713cc33a228fa7f5ac1207256432cef7f2fc7848c48b1baa998ad55656d15856375cbd867ee50405086b30e29fabc79ef8d630819c0a09a3515426ac8887fcde2eaadc3d492458d5ca1718c17db7e90ea9d6c91346b2e954dae1694c481d4a50fb6272f69f98976f5b1e90bebaa32d1d9f139648a697625c6be25592d04f81587a42d7f5f589df0e6817048c3a0d3c748a29ac75a8b6816594e95d37d518466ae8f00928ecf4a5e7db19be308f345711b111231a523d1ac3c0d53b65c809c16fa3c0b026b34975f0fab1d62177215b1f6ca27de1ea2f44f77aa1c4719b44eee5c188985eebde6fb23f00f67ba0d8b0a88c15bbd15fcc96db3d9065df0e80d6b165c749fd545b20989890d0e9a94db6e7d95d30ae2b8727ef3f92268047a6c6be80844f123a0abfdcf02861cbaccd9f763c0ec61aea84cbb9d645bb0d9478b1ad7f7c7f13db780a7bcc83f81100ca253908e926a38135be8704f0a4c4eb0a4ab43d861d15125c5776db18cf77e99fd342d96b309ede5c0a3ed56036c39cc8142cd1b8d6dc28c8ef2b815d6f4b4db994c87f8d997019b8e1cf743abd71f57ccfd225f00ba621df6cd56055bd3f3842bf36ad2c8e5a60e29b5c305035cb602865bbdececb64b60670f84606a844e4f79090262eda5373c60c1212580c37fb9083b958d51b182237d7da68966d825a1ecd5d1bb3efbf2eb6fa34b294424c55e1b805b9a307df69b7030faf3482a42e3f7f5a99dfeab1081f76"}, @NL80211_FTM_RESP_ATTR_LCI={0x102, 0x2, "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"}]}, @NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@challenge={0x10, 0x1, 0xc5}, @cf={0x4, 0x6, {0x1, 0x0, 0x5, 0xff}}]}, @NL80211_ATTR_FTM_RESPONDER={0x1a4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x81, 0x2, "ea1c9b0ee9b3ddbc3d1e905316fef91b0f5703b30563cdf3b2abd72f92b5e5996e69f4a67a4fd159186afdc18c5eaebd7882c001c808ec6009f719627d1bf4e8b7321964b2dd334f9c38586613d74e2111e589831615eaf1ad38c477b90ac2f883a1ab99ff4c1853f9939d8a51e7457393c8ffc60416afb082105f8641"}, @NL80211_FTM_RESP_ATTR_LCI={0x2b, 0x2, "cabd018afd372857b284abb782ba18bda550403aec44e33a4ae7e732282dcf976c6e3e88bf2149"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x18, 0x3, "0a2bfeeeab6da43b79fdc1820407855ad836e2dc"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd2, 0x3, "27833c25fae669d139e241745f8d7bc1ca8d2f7e423e80d552f49d7965079023c9de5a57ce6b13ea0a378a0ebadf649208b36fd1b6fdfe4e8cdd83232f586733b4dc3d4a970483a3c0a2ee526be1cced5312f8453d7975a937ee640d834314fee59ef59027ae1163738c7fbf82c8fe406ffaad3fabc522a4194f808bd7cdfa04702ed64b5c846e0a4b6d76d73f154f8a7047df5836405d7bed98f5e92ffd380ce0d0109c92518ef96ecfe2317543be94a0b49348a047af457fcea9a444b6a183c1ceac8bcc9b3c6303197a41e5ed"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x192, 0x80, [@random={0x1, 0x21, "8b4441ba31cbeba02b624f03b0176b08d6ab22b2b94f8db31a02410378d88130c6"}, @random_vendor={0xdd, 0xd3, "18167255050a72351246ab8f3672aab341eb384551553d8dc16a565d6307c4e4914954d376c47acb397cb93bad269f90d379f6ee55fb58b2564b2858d7f70b733fb34c7268ba37f6cd2fb5a479aebef78a6e9a7f7ffc0bd6e6a4b1d8ed5da635ec9c90f23d8c5f8b93b4e62041dbddeab9e32dd55f0f8749ac3a442de693dde1de9e10680ec8debd58ed94f565e522c947a10919342054947c33e0dd8645d9734597612ef2fbc2dde2a80f3b7386f63501ba83a0e81fb48b8dadbb552c12410519ca704647d796054eadbae63feaa17384ce55"}, @fast_bss_trans={0x37, 0x7d, {0x0, 0x2, "484272d61621031841310c022820dff2", "04b2b56d97392aaf6757aaaa0993279268254d188c7a1e19f0b4fbe8e1b708ed", "843d3c1307956f6c3a9d5e14e22a2d6e59a8dd96928f29d1a5a4a0444a3aec11", [{0x4, 0x22, "88ebb39afe77e59ac39f932c540cab5cde7c664c769529f1a57987279c5638e19fa8"}, {0x3, 0x5, "086b9fe5b6"}]}}, @dsss={0x3, 0x1, 0x70}, @ibss={0x6, 0x2, 0x54}, @supported_rates={0x1, 0x6, [{0x2}, {}, {0x5, 0x1}, {0x36, 0x1}, {0x9, 0x1}, {0x36, 0x1}]}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_PROBE_RESP={0x7b2, 0x91, "642e101fa8a27c89ce1db6026cbd0728bde4bfc6d2ae6400521ee9bc8a4725e18f1ac23d8d36c2e00c96af279aa817739df1b1361a3c00602dc0c34ce1e25541afdb671c5c25aa153e4bbd266f33b0d592975b24c35da7557eaab06493bac9ceb18856b654ec827f4e6938e609f248bd2c749ff5cd0536579531e9e1fe7c05d8b28c4410456464a5f559d7c476413a414e187a269e3b78155c1a6f33be67947cbecb9a3464db8ccdd32c8cab8c53e99199a1f9d1fe811d03a805d247cc4f312e0a96644909832be4d5f22beb19297dc2f592435fb82021b2d7971aefa92b8a8e2c9f93a82429c666da301c1ff1a70796e66ae1a7145e71d9124274507b0170ef79e10ddcf38c12bbd701d0890eef6887733a8e1fa7f24fb6cefb0449df4d9ca53826f288a4900751944883cedf538ec6eba94ee39222b2f6c0e91df5010deeafd5cce4adf9f71ea9706933494216e310c44fc487d0e7b258d19377d068754c7b45d8df32bac8ab540f65e99a05073e9824793e4d64e56ea8e796acaabd1f144cd56da5acf7f6251649d07638e6b031736febb6f3779d0e0fae8980692d9c8e53cec8379316523661f714235d6151b619b9fbdfa2c9d447c66b31416ed6b9c2433a76378b612752c3a848491d81b961920fcbd819964270ae1077b6b3d6cdc47c39da2c06ff4c4c75bf82f4f86b1077002356913922ab5063bc1311bcc89708623e632ad503adb01949524ae0f061b733ddfe70c4cd5ba8ca399c7b693356ed0b74d899fce90ea08ef9c699bc94ba2dc9d027122481dcb592f4067b334a069f782897b1d66ec7821c7db3bfe97953f6dc7e245fe42c00e9ff371e9a37f8e65d483fd46f6c294d7180758895e48e6f9e0a5f059fb2e01ec8fe73f82274e22be9ceb2e7b7cc8427c57b3e96be4653d493b13d87a4c0e8f85753d60d1d571a3cf2e04fd608131921b24d5a6caff09cdd7121eb29ecfaf1bea7b50ba778b6182b1f67a110b2338e4c539630a4184a601e77eeb7d96b0590987ee7f4912a489a8691131f54db1e7efbe76607e73c2df5110e1395b400cb427762a88f2eb5b25f008c36ccbe8af514ae78238f48be9d10b228a2033835295721b1591f1b99172f228fc2c942487a47f93f7ebc65879593b118e29eb838521c0ac0772613b542e71e495a6863cf364d48428fc310256ddb529d86e20a3ec535e0a1955ef2043aebea4370be8b0053703fbcc00007a8a926606dd182cdf4175e78043f7c79d175322a14d630528e4442e7705d46f7c601c770f2d47701cb49ee361d85645b8cbf544184687d21349eb806a1c7bd0a575f6dfe4cb630135dd8facb7984e0d23c1766e959b7f9ca5ba7c29d12b71af5427ebd57c444e1e05e1619fdf43b2cdc4fd56a746a4d5c5d8663fbb6aec8b86ac910f9cbfa00ffd64852bb8d0a96ef885069c98364dcdbcc48171d79d859bdb38c1703151a4631ab6054c95c75e455d1b79557d2f562183bc39750aae459a269391ad091b59f8da15cdfbcb8a850f573195d62582d52bccbbe379f68807ff91a0c21525f1e6cb1f99df2e19eabffa2d5ccee04e4b4dbea0ddf4273e5faeae7a8d2f49ca31d216f2e50ceaf1809f65c7b71dbff146ce2a91cc9de25fe07fe051536663060f3e5fd42761020f87a6463c22b110867e81a6b28d83a1070529b39234505134b1e028cdd06609fa105d8e658414f46ca468c8ba07f87256c4cef0c76b6ca8704f3b8bc987c3cc68b9b86af3c6924a9a625772c98ace23dde7833d2ea23a2aafd26a8d4011e6e5b530a85d5d5c1e44cebac49d607e961736dda64039f79ed473aa44f06c8c639d5c42ee4013569a443237dbc57e3dfeea01df2a6886d1c18b3cec1ad3c8440542fcf91d8eaccb1d4a161a5d4f368c0dadaa41eb03731a00e6e716bc207bd9601af01110faeafcd6b21df95eb2a3ceeb2a05ac23b486172dca02d86b8141f363763243f190681bf02172b65e664b7a998c7ef96c55be410048c18f70a9ae16ee5e9e5752d11bb581d8479bb5c48cd79c45863873d75892f0663a5eecb24aaee0d1ab106b18d3d5e30ef56bbdc8e8d31769f5c6205e08e0168afb39bc9597fb7deff29abc969deebe9f59cdb230a4bdcbf2336e9e27d763e31949b7a9c79f7e19a195b64dd8f5ea978e32e66a3ca08a0d675fc1ac78f2c352fe299a2dd5c34e0e42cedf1ba363fb6dfd6a0f19e1a617089d6e87b49da43b427fc07685e9cb5faf8ec95591f82d743868d1e1b1e0ac2e73c0bde974a43b4ddab9f9b62a4aa3bba7b67e53b0e38889a6992d34e478e4fd4b37a885acec23bc6d1813c25c7968a90b80e163e170dfff6caaf968f9ff3d7b687e1477ee1823f9b9093cccbf288c0976650703f8c387442735cba6bb4d559190d4e69656f481ddcaa7da3e66c55e6bf5a6304622912417733eb1881d8d904ec61f3159bed5a6031fad40d772b0bde5be08fa852be81516a017d1b9645e5235edcdc0727b1df9f441c4ae981d966815bfdb79e9b4da4a88846987db6e6c55131f20b6cf79d01d564bcc30131f381d0693f787ad5011fd07b7bf929252d7ddcbb065079ddfe31ed0a3ee4c958ae37969d3615726e2b8643685dce217e94f6489838d765c92b09a67aed84b3c7ef1f2930428f15636d2005992a964ce538ac949c2ee9424a3eadb276e1a4372354105588aa78a96d5c042ce00af5fff87dab767931d601bcc7842918aa987043cc23342ce657732069ad34133df138a0be5b499a720a6f2077bdd983b1e5c7"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x7, 0x6, 0x7, 0x1000, 0x0]}, @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x1c0, 0x7f, [@measure_req={0x26, 0xa6, {0xa, 0xf5, 0x1, "9255f71974263126540847c25235396d37bdc9960545caa6df46b3603fdc10d7d4afebec8649da90b35f4ca4111d85da5f0653137fdec080b247089cda80b58f20392b2f95f27fad34babb2ffc4347dc1dd700dabfed63f91356c16dfe55eca1c475fdf949bef88cd8e2b1943c42598ab31e5d1cea5691f8c0ffa63faadcf29955347cc33929416d8c78c91cdbfd807e64924c8295d53db680de5f93f4f247a0b853dc"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @peer_mgmt={0x75, 0x16, {0x0, 0x2, @val=0xe397, @void, @val="b3d953dd4afa16c40258467d59005842"}}, @ibss={0x6, 0x2, 0x8}, @ssid={0x0, 0x6, @default_ibss_ssid}, @dsss={0x3, 0x1, 0xa5}, @fast_bss_trans={0x37, 0xe3, {0x2c, 0x6, "76f43c4dab814fceaef011c56dae971d", "b2e10baaf514f12c7c9c7a1ac7940fb2a722e506b2b18529fc8b3f6257b127c1", "e13b6c7c719bb0663aa9b7c369ef524e089a046d5f22df7d1553623fff77e50c", [{0x3, 0x26, "b1ee990206f921b747c6dad8a20c1197c257ad22e6203921e95c9853e454110e5f094cf99429"}, {0x2, 0x24, "8bda432eee70e25f4eddd7626100772114abfcc314d12ea5e967a71e2892c843fad92e6e"}, {0x1, 0x4, "b7f3d201"}, {0x3, 0x17, "54dccbde46cb905a2be519b6345890a4ae77bf4d004d28"}, {0x1, 0xd, "89de9744ae44a2842a0b763ae7"}, {0x2, 0x13, "32682fefdd0a322d869b156bd3a933bbc177c3"}]}}]}, @NL80211_ATTR_IE={0x163, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x5a}, 0x40, 0xe5, @device_a, 0x9f, 0x1, 0x7ff}}, @measure_req={0x26, 0x69, {0x9, 0x9, 0x4, "690dd60357331bcd9c8691e16e914755811355678d9d150062fd209b3c955cf13b2c6df7002cab53d3e9f7911b59a4e9d0272e263f322a08714d3c1923ce4315f894c48abf37a90a6fff3b10b4a3344283613e0e5e8aa96a9c52a1ca3b1dfd4000c3986815dc"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0xf, 0xb2, 0x8}}, @measure_req={0x26, 0xd5, {0x66, 0x4, 0x6, "1faf219c6e77658daa2a1af5339e3479b02900f915576161894122028f9dc2bc7d22e53e9f3faa848d700566ebbc0c013b68c7602c0a7b3203ca735a892768f49dcd3f4b3f6ad159dd4d1d8d4dc6a921ef0b00ab9d8a39456bb40d87c9c3ba1b1f8939bae189bb58dbe4668bc57ced831b29202854ddf03de30b451976c53f14591e9b7005ca3865a29a44c3793b3c6a733fd10308b7dd9472b0c7bd229b0fa2c1556a82408e0205fbab76e9643bdf564c99c9d7a56dd4bf34b62b6c71d6de1a65f3e76a3c4dfc6caffeb2f5c1fe0ea30e0c"}}]}, @NL80211_ATTR_PROBE_RESP={0x85e, 0x91, "eba4d1353fb487c69e700b21ed6fa61a72a928d6856771d9cf5722923239752d3e2182ec4a0d81bf9a40d23df8ad9afe5c5118d34ee6d621fc8783fe6eee86a25526dd0a05ccda6317d01e22a81fa45b636f918b3114d997c12fba9256337d86adea906f01de0a912ebda42b0a5047c35df559733f5bc185417bb70b8d6a1e81392b8645033da9e07c95df43e2387de7efdf18fd04aa07c3a7a89a05d3223916a117cfbab459f8b649afbc3ebfb099719fccbcdca2ae7d061654950a9ab9c81e115c2bb8c2d86b1f24c7973af5dc1448f8214863b88689d0b9f0d36948ffb82f378b0acbada72e51d9b3a9206c5da3b7a2aaa1ddd83febf0694b1a850aea82fd906c443d167f22f8769ac4c33a7f7d3c2528392d267ae0f5be9f9db675c1599eab8d03ccbf558ea0000f8a4d9aa386b14762efc60142a2464959777c4767acd50f11f44d15d247142f5b112d680a40286c9043db4a059072cc2cacf7066ae42b9c18bbd713ae4addd5ff50e5a77b25a4746f2890751149c71aaeea63a87dd354ad43d35dea127a70a7deea2e711b15489c2e5f24797dedd3e176aa36a443c2bf0af26eb6c0c1282aa9e547d9b057afaa1b08028cc7b595607da9dbc6baf1b363e4f956e345974b4b45629300dbf497163c9ea9f262e4c8761fcf6422733b47c85680ea0b1ed3a5120a73d25c24a0da9d96c25087b830c3577202078611aa41aefdbb20661ced980a8cd950e5bd6f8c1c4154e6807a81f362ca79a27ca0cff12e04e34ad53cc83b365f41df2bb87abc041495f23eac16a2276ad8b4f7215ad83cddb3d4c5a51ca8962db396c578b316aa8805d3f25bb9e1543cdc952ead84942ccd3ec5838fd2cc2ee3d74d9a67ac8457d4c5ee413f85881a34f791831f1ca964c5f75b729ef7d0e307ecebe311427b2fa5c6162243c13377f72bdc581df8bd6a6f7a3864f153e004a400995256499f252e9b7d9fca9a58e95a63789e0c2ddd5d94ac78046bd147c31e21d4e61701b511593d6c953f061c8dc6fd6e216af975d041c3e3ac2f0cc4440bff12475bf12237a76e7defb625974dbba479a57e5db77cb5667d05e0b0e60c072e41c737aa1be07bba98c31499f3af5e21e3eb9f868e9d786d0da858e5a0172962b39859b417ea4f4c47025bc699f42733aa272b71a9f48f1f60a0e6da677bdb13f82155c4127ae77e90ac04910d11e14839a0affbb1a717cc42e9727db157ee019fd0ad2bc1ba54076cecfd70c78bce808dc25bc04a30e5d891ae96cd268829bf442c26a5cef0c6b4be5db4413d1a3d7f68334bbd188a419a132cf58bd663d2095845635e212afbb355826a81c6ac3151f79fbd3b743c3dea73914e15772ee8ab491f1932d152cdbc3ced16b599617208847d63ea5662542d9a57a8ba77c36cb02be03c804212fea0e85d291ddfa5bbb635b78b1db02d2915253eb0de504033027e29fd2e07d385b8f344bb761164b6e3f5fbb9ea0e00d9d29ddd5a5fe43912f221bfe0369cca3c225f6f8d205cc0e68e8426d3a17c6d6a3a5865d601d9a368fa8fcec8050e40b6dfa619d1aa32da7ee3990acb96730f3608e4ac9a9d9c99ea322ef6103b18f3fbfd4cbc6b65e07cd1917e409f9f59c59e9edca9b439a727cdadac453c18c45fc6d8163ec439f59061deb76686fee2aba39a7a637a5cd76bced444e1e66168a08f148c6ee5d7df123f683706caf88aee68c136e45437b0a9847eeb5e4c429249012c2bb217d630ac267a2e683cc2979749282edbe4e799a04e5dec95c0de1afc296b4fde19db326fee480948d9faebb18c3605d9b00a2283a554098c002a42dfc8a7b5f0d809c8aaa4aba18b57db8b9b7ffdbc5e16023a2f858bc90cfd6efc673d4668dde476edab3681148cb85606dd8d20cf8e7b516467bff9d5df18f6d924dce8290e8b6d4f9447e19f0e2c8082c4a633e587c9b7b73a09bfaad0b4e776efc9cecbf9468d4dfbbbce1ece7c9fd8916008a6a4a10b7c09de842ad7f4b78aa911e5a1386f4d2ece5a77d5d7b6e60c537e2779fd192cb4d0a359ff0c2b9879c92a34477ef4876eb9b40875f3dd98097f6dd1feffec972ece14df39e4328bb3dff5d4ad33551cc27e2a1140471e9673782193dbc2803d5f596b6ba6540d0ab35e4c0886e31c2202d61fb7903753d8695b963c984569ef3f0578478e6ca6fa24e664e1b96f5b76b753d49df3c7c7756780c93c3803054f37b155edcbbbbe292d5858bcead314af64ac380a082df653d15194d89e10975c3a595c6261510cfb68057e757df9ac5bf7201ef5b060fcc82302390226d9eddbad8297c60b9c3c3453077c9a77a0fdda1c6d1dfebb63bbc3e750c267ac25582bc75feedc8dfe04186914b3bf7733c5fdcc639763abfe797125f4e3694a783a48f097c8e9469eddc526c23324404aa74c0633b43d63cba29fa8afd20fe0e11b912159ebe2ff852ff58c047dba8e6964cd13ff60921fd8848c50517ed27d626dfd438f2cd6577d60e3f6395038d19ffb75cdc03723d12c53f0b656f9c66b003ff38dd1ab64997799bb79f87023ab7e1c49027e6daf4d586531e98ca89ac60da60b203bd1c0fc40095abf69adf5ee4fda36fb5d2b8456077d55c077818697cfbaad4fb30924a0c80c1050fabde4b6b7eccacb28a265aa3b4bf7acf43c834f2e03cede9d742881b08b3fa8eca9eef2fee2b586522d38516277c8cfd30439f98ea33709a1f8e70bb8d2b82b25972a44919c46d6fde1026946540bf6f735834ef3852a658c5c6d42c3f4529502dd0c78d5e589dc387968f8731f5f89cdf618ab09025e8610f35e0e18b3198f727e9d08276f688cdc2709b07b250786ec0d245f2f75e1d6f2848b6914900e356137200aecaf9ccb9d0702ad0e636c367460ca36ebcbb046711a372ffdc5ccb9e08b40446088aeac41d920577610a23be7ca6e2398154b18165ea6947fe31810df6156ce1b2a698a4a4c12071ad77cd2e0fc88b86f8d3a8f67c8d1d9641231b30d7f0869b3f2bc846f6b9a"}, @NL80211_ATTR_FTM_RESPONDER={0x12a4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x73, 0x2, "30d251356fde11d5f5f2aaa5ba22b33b68ef4926f3bf7228e2f2f84d1a66db3ff8f30f8ca5212790ef0c0d3d08e441ab0014010ca409c0fd353adcedd69f336043537541bc10746db27cfb4e7d4a84820dce3f8c1854ce0403e566b1930b73fe840534a7736706676db8a9e41ecca3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x9f, 0x3, "6a51d92bc3615236c87ab8b508b5948f1c3aac8558242d42446e552f89e285b60318cb82984435a03394874ea18ad38a2f6999a014dd37d2e3faae7e03d29c6d7c8bef6b2260f1a9079824d8a6866b9ca7b9a158d88765294b79a87e7f190c346a8eb1deb93c186df9b720a39067fecdb52319ce27b3e45afbc78b9afe2c54c888acd3ea09a9a77f8d2fd30412f4af1b6edc0ae2d3466aa9aa3df3"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xc9, 0x2, "f5f37337a8f8a3e55c6c671732cd2e49789260950071644d1ca3ae27bfc6ba8dbced664cc920125d9fc6a5b4ed27a6b9ff41990a7e9f6deeb04df8bce07fc92d1bbfac04be5a7f3404febdf701c81c37e539ac50e77dfd76466c3f61fc5ce0eebfc48b1a67958207c0017b1ebc5fa72934aa7d22fb5cc08b8651bdfb78de4e92cea1db98f37e341ab8e02544587ecd11d9acfd7fc1c0ea5d57258244aa163cbde2d759bc97b7ec2be0fb29f89291c97d852ea2d554cb8ef288b4de00884d693b1ccf041292"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb2, 0x3, "bbcb69d8e40b01b9ceb2f3d4344215ed4fb9f3632bcc16ffbb97c4f90ea913ed184b925754c166502b7b2297eb02384b2d7ae99282c009e4883d6c5093fe5dde7bb72d02400f42067b527f7475c558f41f87bf07bdb1416439f912a2185a9cac18dbb1833efc2788c13f6a967f44d61bcfd4945376fd6f726c5cb40f4c008642ea67853aebe156279b4de44d3ea62de1b0ef4fe383132532a06073221e9ed65c4b6e3964c4306bc59f1c74398bc7"}, @NL80211_FTM_RESP_ATTR_LCI={0x1004, 0x2, "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"}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0x80, [@link_id={0x65, 0x12, {@from_mac, @device_b}}]}], @beacon_params=[@NL80211_ATTR_IE={0x13a, 0x2a, [@random={0xc5, 0x6c, "1c2bf352b0355323a0ff3c7981ea8af0732c7c1b32e3d1f4f7a6e097c0d9b3c5b3fca877baf87955439109fae9211fabafc06498c51411d8a9b4d42fafc1b191eb9dd749e02ad00d0bfed6b8ac5d9ea74187af63b60688964bcd9dec56469cf528c4a0e51b3398ae4ce0ef32"}, @cf={0x4, 0x6, {0x6, 0x0, 0xfff9, 0x8}}, @random={0x5, 0x10, "b018315856a207e815a50ba2d988915a"}, @perr={0x84, 0xa2, {0x9, 0xa, [{{}, @device_a, 0x72, @void, 0x30}, {{}, @device_a, 0x1000, @void, 0xf}, {{0x0, 0x1}, @broadcast, 0x8001, @value=@device_b, 0x25}, {{}, @broadcast, 0x384, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x37}, {{}, @broadcast, 0x3, @void, 0xe}, {{0x0, 0x1}, @device_b, 0x101, @value, 0x3b}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x1b}, {{0x0, 0x1}, @device_a, 0x58, @value=@device_b, 0xe}, {{}, @broadcast, 0xfffffffa, @void, 0xc}]}}, @channel_switch={0x25, 0x3, {0x1, 0x88, 0x5}}, @channel_switch={0x25, 0x3, {0xfc, 0x0, 0x2}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3d, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x3a, 0x7, 0x3}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @supported_rates={0x1, 0x3, [{0x36, 0x1}, {0x18, 0x1}, {0x6, 0x1}]}, @sec_chan_ofs={0x3e, 0x1}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x4c, 0x4, @broadcast, 0x7fffffff, 0x1, 0x1000}}]}, @NL80211_ATTR_BEACON_HEAD={0x3a7, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x169}, @device_b, @device_a, @initial, {0x3}}, 0x8, @default, 0x42, @val={0x0, 0x3, @random="b4279e"}, @val={0x1, 0x8, [{0xc, 0x1}, {0x73}, {0x30}, {0x12, 0x1}, {0x5, 0x1}, {0x36}, {0x1b, 0x1}, {0x48}]}, @val={0x3, 0x1, 0x84}, @void, @val={0x6, 0x2, 0x7}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xd, 0x9d, 0x4b}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xaa, 0x20}}, @void, [{0xdd, 0xf6, "153e38998cb365489b72b1a718ead49fa2ae562b9b4c03916ce026f730422b381486a1a55e8948c56430deaf3167391f55c2d709fdb7addc6cf55c8fde0997e332e39d0ff85b6e2d8aa2f82c8ed8e3473f2cfd174a2dd31276ecc9384b777c6f0289c6a7bf04553b0a885b57ef9c348859d182b23f7d3eb13041baf451d24d2c68577178e9960b1f443c2992db8c1f3cbee1e8ae390c0d93ce7bd814a02f486eb0e99701eab2a287f7f7a158ab5d56af85df24e4e632d74aab55664049859d21c3db96bbdea028e2f44fcf6d4bd67b9607df4c00e6b980de3eb856c407a8b2190ccb2eb88b034923d25091cccd0c7518f7f522c30585"}, {0xdd, 0xf3, "37878e44f407cd558bc014dafb24c8f07aebc2f45815bbda9e21c7e913d1935cfce9f9e57a299a4d2a73a57136b4110db882410240ebf915b07f6397774de47360ecd7f3625481d65621e5340b0f526bc6b3af786ccda4879d90c07259b69081d5531c1f56b10396c8abaf439dd9ac1340beb30e143b0353830c20a076c1312a9e12c6f07503ce5c8c83ce89d426f6e596b55ea31d8674caeaaf9e41ddf89c3890b7f65e211751bb063e4ae7b89029650be46e6ad2b472bb3e98ea536ad172723a2667e1a1655f790d9418a242e8420c95528230fe05123b9d8dc68d6cbda4976379bc535f53ec4b6b8d985b570835ce4d31ad"}, {0xdd, 0x8a, "18500de5f9df4c57113c1b87d2a4a47dcdc739b381018340bf43f68a676b11902ddbb5973b395dc3dbb5739c66ed81ac082018d9a0a2b0edc5666eba13f7597077d629d54cf78acdcc38bb5c7aff1439ab6cfdef51ae1aeafe29102d8c55a77f9966aac987ecbec649b1345519c629d3e3e2c0361c74d7a15103337c6b07f4f554b1edf446fb472e468c"}, {0xdd, 0xd7, "f63a4d4f89f4296aa9e93c2562094e442e2a9458903495808536b192ec412694683a00b95867faa7faaf0b823f31bd45ce4169577db81d8978bacb07152e432fe6e642b7fc81e557efa8a5dbfacd911604162abe31fbbfd496e1f31983c689a4557e2b6d69ad15765d988c01e0c1f55448739c12ce3419c6a569ead6b1a661d1dced6e9901e70fd0ac82d44f08de733330fa5402adec1d9ab3d9cdec15aa36d3ed09335308717076dc623fb82a84e0e83d6917b3e76c19c05a228e2c7dbc33c1bba9727c4305e2604f41aea01cc9882a86742d31a08ec0"}]}}, @NL80211_ATTR_BEACON_HEAD={0x2a3, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @broadcast, @initial, {0x4, 0x2b}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x2, @default, 0xc884, @val={0x0, 0x5, @random="1c589ff09e"}, @val={0x1, 0x2, [{0x6c, 0x1}, {0xb, 0x1}]}, @void, @void, @val={0x6, 0x2, 0x6d8}, @void, @val={0x25, 0x3, {0x0, 0xaf, 0x30}}, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0xfe, 0x7, 0x1a, 0xe0}}, [{0xdd, 0xa3, "104104c0dc9c1cd981682c66d2f21b6ff09538fee29906d71ca34134479155631f7405741763585d79af6ad8c1a4c2c28a29fec1ada752eabba49c2cce0442f46a530fc278182f76f0c0180a84128b508abd62f80146eb3c2a6003e4cb1ee405c65ba42ad01d0bd16c090123bc56a8646d537289f04a7c91f75b897a4f698d9f5ff05a07dbccf5f7c1b3db36e9271c1115783a068952df3b51aeb8b7c8d418c1488d05"}, {0xdd, 0xc0, "0244c0d5fe55d091d4f7ec147063a85599f41980c3d88c9271748a63724a6f0bd53cdac852c2ab205f75bbe1364f7f5a4ec41ad6cd8d67c3954b5d52c0460760d874f54fde8696dfb7410f3696f7bb4b3da87e24c6fbb3e7485baabdf1c10ae059ef141b454a6a00548cc9d0159aa1d0b59fa00b0c82e5fd60851c060c95976f9ae79912f78aa7e3a32397393baade02390a04db8046c52f3dc4a999f9ab4381f65bc92ed8cc262307efe188eec29b4604452026940613b76593c2fb333e5a41"}, {0xdd, 0xf2, "0b48414ee2d1cb72e01bff4d5f4a888ea0cabdcd2ed2eb694fb4c2cb9eeb995b7f8510ef7d9a2d2e20e632770ec62aa860265d945efb4238d31dbd171009a3d748f92b92ad829ac4d0ad34e1afa05132ec38e4855fd4531d7e79ed130191980395bbf4bbbff5727de32454413ebc5b8bba0af945578b0e27d5abc2e50977a7630b75cec2464bec3485bfc1f747ed3107432c7a06dcdfd86b7797bd49232a857c61760b1d9e7d83644c43c072e4b0d3fda89cd1514f879f419218be5779a965d9c538ce5dd8f3b89e685d60ebcc332d8050666dea6c3bbc30163abae070521ba119a825d72559155e7cfb332938c7808a0f83"}]}}, @NL80211_ATTR_BEACON_HEAD={0x48c, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x4f8}, @broadcast, @device_a, @random="a6bcc437f878", {0x3, 0x5}}, 0x3ff, @random=0x5, 0x2000, @val={0x0, 0x1d, @random="c16aaa6f1fae86ff9bcb1f04024c3403db2dc44977b249f569fb7d52ec"}, @val={0x1, 0x2, [{0xb, 0x1}, {0xb, 0x1}]}, @void, @val={0x4, 0x6, {0x0, 0x3, 0x6, 0x401}}, @val={0x6, 0x2, 0x1000}, @val={0x5, 0xe6, {0xc, 0x61, 0x40, "12e2174405403a029d8f1208e7d697b3cc48218a9c4f6b48f1b1c4428077e29819a63dc33ba752a091f324510b5eae64c0c441297c5ed7fd4da2ad4bf2c60ef6051d19d04067155b0d1f8004d2503d06138228db9bd059edadb60dbae74680ea9b1357c092b9cf726459b4435d358f91857348b22db18ce77476c6dd2b7b2233359bb1c19fb83e3ebb9f549bf60d1455e2607852d516c3d2771b21538c70ff7da54eeca6dd7fc77e61d5b2718232d9266003190d3f4c1c7ba71b432429106848dd9d750ead25f0dd230d182d915b51d308232aee08799cff88f7768d75480a620de761"}}, @val={0x25, 0x3, {0x1, 0x34, 0xd}}, @void, @void, @val={0x2d, 0x1a, {0x800, 0x2, 0x0, 0x0, {0xfffffffffffffffd, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x7, 0x8}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x3, 0x28}}, @void, [{0xdd, 0x94, "882d4a581252abbb967b5db8a0c803941f7653af32f7f4653502a487b752da47de166314b4b217f2413d8daae0036258c4255368335139d53a5e35c6d499f36ae5c1ad882cdc6b7c48b2877a1fd20f7edcef1fed0c839c7e43caef9a61ad0726b1526d156a2d96a2bdbbf192ca68e5b4cdb031fbfcf8cb57a75409939e4ca048df34a401a3a33d40c322f590526bf73e1390cc9c"}, {0xdd, 0xd2, "60a4c1f03313a6f2ab33254b2023d58153cf0180d42d6ea6e9cd923e22e76467d60b4c102706b314379a6912091d484df3614e8be558a4bd91ed18f0ef725992f8ce85a0395cfc4e04a6e5b9adf866f49ec9963a3175a8d66cb910c30c938abce8c9ddf80d4ff276ef81935c0177d6c52f991e7ea108b4d8d86b1a216ea91db15a1f573f9ee11c27da916c1901fa24be025c3b20bd57f8baf0a3ec35e418860255f955c0b6867bd3bb4671db60221b98b9bfd6728d876653c3dc4a1a62cb8912fb0dce25cf2c4d849b665065e6ca37ffbeb2"}, {0xdd, 0xb0, "5b006645646df1c2b0613baaf7a01b6ae59f7fa98745cc524e8968cad54da3f6397ccb68c64109577225d5176624260e9d91b714babbab0fc1987b9ea8825e6641c1cce3885733644db431d227d825aac235e743e95689b4af5cad723819347205e4e9d9bced86b6ab92ec6be6a56cf3016af304e6d83d65bcd68001fb808becf8f73b382203c6e89f42ccbd8d0a3ab54c4e6a0b617ca3c59c7f95e7c1ba659cba9599bf9f21111cec8f02fff73aaecc"}, {0xdd, 0x45, "4eed53f800c77fe8d200cc0534e64ec500b86b99941abdae4259756cc35389af2d249c77d8c9699c1305e41916dd0ab4756683a631af6f1b9d91221aebbe0d31dcf127a22d"}, {0xdd, 0xb6, "a8766a87c5982fe1a312b90098ddbe9d35c156001df33548455bc782a574c8537ce8854afc6d47f843cedaaeffa4875ea3290a1378902de6b12974ca3533dea11ec9ed9e45e1ad109403daa8b8935e17bf69981cbf1349e77d35f66c9e91e456ee8e186aef13a8eab5f41a5186ac7ab355c742acd3bea52cc90d60ee2959e8d2b08edc36bf5ef9a90795b375accff23625c2ecb39e92eba26f5e6d23eabd20969cbf0ede6723f338379d9f9e8b290456a033d2e16c4f"}]}}]]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x206}]]}, 0x4818}, 0x1, 0x0, 0x0, 0x1}, 0x40800) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0xc7, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff, 0x7, 0x0, 0x8]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x300, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c3d}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e23}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x80) 1.879041622s ago: executing program 5 (id=2751): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffef7, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000100002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) 1.823165828s ago: executing program 5 (id=2753): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) fsopen(&(0x7f0000000040)='hfs\x00', 0x1) r1 = signalfd(r0, &(0x7f00000000c0)={[0x2]}, 0x8) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='\x17\x1a<\x11\xe1%\x9c\xd7v', &(0x7f0000000100)='io#harset', 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000080)) 1.822665917s ago: executing program 6 (id=2754): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20846, 0x12) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)='&', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000440), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000540), 0x0, 0x2) read$usbfs(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000580)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x10000001, 0x12, 0x0, 0x0, @ib={0x1b, 0x8, 0x0, {"7262f6fc4df350f283c0f3924ad33c4d"}, 0x2f, 0x7, 0x7}, @ib={0x1b, 0xffff, 0x551214fa, {"19ee1491c10b0efc45a5c6af830fe8c2"}, 0x96, 0xb984, 0x9}}}, 0x118) ioctl$KVM_RUN(r0, 0xae80, 0x0) write$P9_RLERRORu(r0, &(0x7f0000000540)=ANY=[], 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000001140)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r6 = syz_open_dev$video(&(0x7f0000000040), 0x101, 0xab02) ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f0000000080)) close_range(r5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000011c0)='./proc\x00', &(0x7f0000001200)='proc\x00', 0x4000, 0x0) r7 = openat(r5, &(0x7f0000000000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r7, &(0x7f0000001280)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f00000012c0)='fd/4\x00') 1.82238485s ago: executing program 5 (id=2755): r0 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) socket$netlink(0x10, 0x3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./cifs\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000000780)='GPL\x00', 0x2, 0xfd90, &(0x7f00000007c0)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) r1 = syz_open_dev$radio(&(0x7f00000008c0), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000900)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x9b0905, 0x1000, '\x00', @string=&(0x7f0000000980)=0xbb}}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_TUPLE={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8010) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xd83c}]}, 0x2c}}, 0x24040084) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r5, 0x5421, &(0x7f0000000340)=0xa96) write(r0, &(0x7f0000001300)="02a87428aa089bf9370d163d47f7da4020c4f2ee1b0c054ac418c83b6230fa7e721dca7f7695e3eefe7f751d84a5b303ca5624e88c6de8bbc89c855a2baac270dbd7b9c293a66752802163ed0641c50a2d6ed32992babfb4d56f96d84c344c0b0243c76d5ab21e51a66eca2d1be6787d60a7caf7c0c8529de315f509388660b8f377ceb2a275bbae055b668971236f514b478394e549ec5d885426253c59e8d0aabd3cd2d11594d746ef2a80ff7423dbead1bf70d6a316cb56872a4e3f67d2e2b9d71dbde6826fdfe714573a11c0bb7a5a1bfbed7a93c86516e21dfaf62b4a23f060590cf55b83fd67ae271757a578fb2ca265fc084f32cb9e5a3fea0648f661fa6c6531cabf099d7b44c1da2ae589d9a00a9604057459f93fdadc70be66705efe33ed3b45262c4df04971a6e835c8e8195821150f3cbe4342e833bc45aef3a14d991e98ddafa255ef2ec65f2b28699d61de63bc347a3bc390dbc36884ef20cffc57c2487088934d476f16deab3d8a6f9b7a34b8e99acbb8dc3cb9d46692a7d4572db746d944d42ecd2879d509910895473ee7dde54e5a0ad6f6c64e80e3355f8fa700446d333b1413de2dc064b860a22c27ecaefe53fd32a7c0663df3c3ac0fa9b83eeaef55320d3c6961389c65e7dbd27ee4e4cf2f8b4c152a62de932461116b62994c8e6cac05728ec4c6388d345591190cc4e801396b5b1e37b51c7f20952bd1caf5d202526953665beee6d969ee7b91fdf5c945245b7eb50b96aa1c0a0b3add51f41985ec7526f2f0e0f148ac4bbb92d94d5755af677297c1af79a5ab0364359dd18501691467de3727c6b7ab5a9ed83e9725ce8f9c14c360439350656b46d5060dc5d07473d0a6180b5f5f304194ee45dd5475d3586510aa780ea5bbfc8c65f9ab4dcc88c93752593d791a96722a7b1543b3c1ff9dca5383a47fcb01e36c01017b844da1da2b39e4cc9045ee63ce62d193fe2de81084a9b679f5b0c463e6f49446601da5a3a172ed81236b400db674b0ffb241f21623327299befd1edb53a03186598add90a77cb3d4020376ad59eff77f957aca355a99b30020215ede12cdecddd97dd8805a869e372a3f5a0b66ea41a198e9cea8f17eb49b56b9bb22c6984fe47839240b70d5ef1d566597642735cbcb88e2ea035744ece60b3b6c9cab149ecea8da5317159aae1854f2a0d8a6ca32a621b8cc076fa7c83e70bc18a5c6030a09572f6b0be0d59e8b281c2a0576dcda0c821fc9b34dad17d672cfbe2e75812a8a0481c2c3a2d6b692add78dd455ad7b08e70c10cbb26b0e9fec6cbce30b4913f3f25517eecb91b2afcde86862c1d0bd36f6c01031b5efa169bcb015eabb91aa421c927a307f9a8862b67f205fdd1aac7ee12cd581df5a465414cb40983a6eba89438770c03f9c087c2ac692651a3b7e16d5b495b4876ecb34b738630654593364b3d08fdd13875a18b981c38a06ff7bea31d6af8040c0c392fbd74f04c3a5d530f6cbf70b1252b651003d958da0ab7d1e1303853a35d3b38341b87703c7c082593834e75d921b0b24743f91feb6b8d987cfe246af354d4fca987587cca970bf05a87321206ecb96af17d9ab9336c4f9d44e7b8ae9c0eb6b49a8322865e3c8d0f3916e94f0a53d8d091f1e1a79c04ecf82e0b3e8355a6386303859dbf20af37f000a512177a9ea93d45697c75bbc4ae139c182f12cb22cd546003254ae38c8dd83066a34e0d7cefb01c8edf1aad9006fffb7efeae04029129707727cacc4d7c6fa4b6af60dd33998bf6eaa3d6b1450b16e4b43243a13c24187472ca9ff661bb60363768fc1ed6b3b5b7aa69b326826ec31929ce11387ca014fc87de4a97e9a45dc08d67a51f22e41e6fe3ce4067873a58872e9e11a3d85ec744f1f19e82ed132d7a9f1942db7e9a7b687b865d0f2be4018d4036941f6451b2b46d21ea3cba295b304a862a035d4847a0af380eeb6eb1257ee771c139e2266ec68d3fb722c86a9720e7387fbbfb009c2af3f974f9bae9459d67c72ec35922499458cbbc68e5f1c775d33cafdcf097cdb22d93182bc3c99a0b8d759901e722903916f3d8e5fc75338692d8dd20150b7fd632a38ca8a13d45fa2d01d818deea56ed0871c662c048b73807ab38cb7f7bcc06e9547d25a40dfae065b36a978e2d9842c2a8d49b42843a3c36331f0ccc6720e70b08f6bcf2451acc374a745b08fd4f80b8f9057c4136808c40dcc60ae0f2cb8cfe8dcc2c42a182708de585aab388256b13ed51f7432fde90fe2a920b64601173be2843323ace8078c3ea51b9b821d5feeebbeba2a2523f3e863e07dc9515dd4ac095d24a2478dc78ab428a361f86780515af743948c1c0823e5822f665574672afd619b1daaa4bc7694aebcce73344a7a26435f101d07cd8ebdda040740b699d8d68a727e67e7ec5aa3e3004a1fd41450aaa5dbf37b414214daf7c75bb42141dc3d037352589ca2b4f3174ebe6d9a60308b901b935b0766ce36c1c3bf1bf8c58deb00dcb5fb876c2769af0def3d27f4194a8752c5d941eaff28d3df940cb62f1cf3864a9495620525b58fe41ca10c7241c45ec833ada75817f8547f13ac909de5fd3a6a57331320f8aeed0d8ac0a7342b4b95a1998a256391feeb2c9343f7f000efa9e96f25a1482c331dbde3f7cd4944e5e1eb4edaaf4c7e1bff9287d6dd9705891d26e01757b690c9776747cba0265291b3dbbfe823959e04051ad1a3df65bc36606fb739148ff204ffc0b452c9c38643e68f6c50814dad0ac165a67529bb03dff7351e5035dbd0f8ffd14a236bfc6bf7795614141beb94bd4418d5cf99de07d0985cc605d330b930ee96eac2a18915d7af2ff9fbcbaa153befd6fec72f49a0c7da2bc927b5dde34122f655e3b43d5148b18e3cd172e49ff2667f176c194ace4acc448e5f7afac158b9f252bd0f489f5981e511e7cecb32b3889135d49e709d798fe9db080d4a283579e26eb81b60240164666ee3a7949aab3ba404468016c9721defe179382bbfc7a7640e6cc8241b8d395e12b3c964ab5e24ea8355063ef9d450b10fa08773c02560b0215bcfe92796e1e13a491f1bc35c2a257774836f0f2e547706d70f2c73f75eb05253f991a49256d5a2b42323729c25b606b66a05a50b760a3b55580d8b53265de8c3d517a6c199215a41441e3fb075c822a8f81806c91b1c9da2dba59fbd60a5113c50eb39fe142de8e30ef6163c5f54eb5e2acb877672cdd99eb8413fc3f7bd4a3212a96fe327eb49d1f4439bbd452a370c7c8d13dbba30f623bdcd8883f3b19feb806af47326bfbfd0a18ed4b81f15a673ffeb85a2cdd43ead8982bf4a0146fecf34cffb2d952245e26edb81e9f838fd667da84c24de1961f64fcefd4ab92ae22c3b9a6050c4e3c92264385492a73b70c59ce417a1d7cdf474b9ef1a3a42408b90c84703589c845fb7f89e6b14a4745cb2f8b4e7610138154d6a18c9b06ab4e61ea8afbba5cfee022b3ba12a5f23f2f44a44f9804e7bc6fa43fd4f57905908aed400aeea87f6c5e5eba1d6298ae6ad34c65bdba1c4e87a38b1f8d4e8b618bd94c2cf4aa9b9a4da05c1377aa9a5d73249f1a20c219a6ecc67fc7200fb16fc14a7b522b00e6e05df1e5beb664c00299d3274ee15896718453b7eacc43b9a8e904ea309e8848d32cf44110f528acd9bc88038ca883b8dcfedc593015bbfc24f0ad748fd14c235d2c7d009589fbeae21ff0d2d18d497d6595f4afac0521da3e04e1bb2a3cff1fdb31aebd4daefc063cad097fc760ae52d945342441c25910d84f9f97f0e3c3e9987e9b4c33feca2a2cb77152a0065c09341788c6c0121d3e4f7122d77121db54bc7701cbce205c304556ffb66347121d994b1673b57fb69d2c4325fbd6f6087b9ad8e79c4a8a8ad7b7add5eb412f9823b3906656c5e61fc8a3b080903b0837282a622c458ccbb3112dc90321732de79fd31abb215edab7107552a854282469f776f11808a20e49c20cc02cb11bac7bc85784135766977b9735e1261088b94d623897287809deb75b163b03846bb10b19fa9cf7120b6ae0fea72ad04d12303874fbab8d0d38917971f163a680113858a3503ac65894a9762b66b6b3220d788b7bec1a2303e3e5b0f62ce175b983fb6abac2eaa3ea8a16372b31569bb18666b7d0bec5424e4d3f1deb1222b6df86b94de0b6ec5973e46ff36a3e9ca4649fafc9356b6875bfb48820acc1df579aa205e42946529666b8adf507d2f389b370095c2e6bc5ed3cb74ac8d100e35f8fca187025f86a10332b3c2e3f0bc066e26fb16521fbf98bd5e0bca76a1fe97ba02b897e573bbbc702e70956c9bc7c2afdac7ed8348ec34d7eeb6170a95f94a75ca3c03951b3d6a547dd97774f6297bd7cbc0a54eb24b5d2dd64d93029f2193d8bde32d59be9dc2237f5585a28e6ef773079165ca567aaf90a99b6053e71dbc9ea6de459df51b22b442d4852e9434bef08ab222f39015210851ef97988c549edf203561efcf03fd21dd0379f59ef31cbb6581c343dd7b73bc4dfb2b300e7c96a285a0a1f84df8b1e7254092b42dbbfa736b0d2ec9b0d33fceefdd04ad57a3f7f85f1e91d2ecb500821b4d6526eb1b39a71c79115cf6af50fd415b4b431a4dc6341241e6c2573affa2f0f105b9110a08b50638e02089483b64421f5665ae67d1316e8cbca994974c04be7fdfaf6eb42b0fcd206de3ade3d7785233349ac10ac329e44ce8c718f9536f2ee91feacfc75907e42ac3bd42a9b72efc2687f3efd3882feac543e088b9b1ca8b38491d3da82a96884055af00e1611af03a87987e1ea00ea5e60a63fc012dc47d540c68a911a3ff20ed7dbc0c069cacd42770a5fa97ffcfaa526fa76cd24a9871c8a90af79eb5a66bb50c8478428a7ebec9782a584e2b6376753363edaced9473fc0a16a3bb8067c58927f0b305c885713dd8b2cb6823fc86f09763cd5d38c8198740ba18c2d517cfe7d54f948fe53ec0765dc8f50377d1e6d224bd8aa0edf99fa4ceff588409de9a7ebff1afac5ee475e2cfb6dc3d7701209a17ec8f4edf7aaa4155f94e78ae1b2b6a20135f1bf2474d418aabcc632dd6302b620248d64a43033283b2c9f9a6fa29790fcf8377cd1fe4db7730f804bf55a96b2c2344e4aceae2bf0977aff541ae2b001762a020760fd556aeeb1bd5622d4e2025c86bbc52908b85a6236041cd7bd6936a534f30d91b7b955fa262f4876d3b238298fa765b1a864c9b66cf766eca9050a022f2c9ff21e504cb492b8a777389980ecb223a6609d3446b06994fc233f5dc4089de9c3d962fd34ff1335f5927450a261d0cd6ba0b59f66b6ce68958aeaea8e42879ee658ab7b120cd0eb7a2f54d30d7a55291b0c241396cfbbb12bedc53aa160239fd5d3bf4cbd4dc7bee268f7f3b770ce9619384240896fc71d6b0e30e4e64c8bfce1dcf57afefac9d45710d39bc3d0cc85f9d0e95b36775c7050a4950418858b199d48b9e4e759dff902db93c103c660a8319be11e994893a01bac68d898cb66b7f48ef093825b8df8026b03be8aaabfaec25358eb4051c9f47e52f4dbc03d2ac4235a4c3c020682d236ab1c8bf5a824ca3a008059a7f2f69bbfb6b98ffe1c541b2a558410d3f8b3a57a65890d33128dba3948b592f2209f15621ffb4de480fac835556445addea253a5e671900403c8b0b61baeb3c3bf903d75e7915c2c73324a9828f32c99c6603e65903001e5050fac487d65361bb176bc45d0daa59b550e7dd0f6f8cba64c44ae7753552860d03ae2692d037ffe17797fc56ec18a72c2a12b2e6", 0x1000) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x4000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000580)='100', 0x3) unshare(0x40000000) recvfrom(r5, 0x0, 0x0, 0x40000040, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000380)={0x0, 0x0, 0xffffffffffff96c1, 0x9}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040819}, 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='ocfs2\x00', 0x822, &(0x7f0000000300)='syzkaller0\x00') 1.751191554s ago: executing program 1 (id=2756): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x13328b0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@userxattr}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}], [{@pcr={'pcr', 0x3d, 0x20}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x7, 0x31, 0x31, 0x33, 0x33, 0x61, 0x31], 0x2d, [0x37, 0x65, 0x61, 0x33], 0x2d, [0x36, 0x30, 0x39, 0x37], 0x2d, [0x1d070a3351f7b68c, 0x38, 0x35, 0x63], 0x2d, [0x34, 0x35, 0x33, 0x63, 0x65, 0x30, 0x36, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'userxattr'}}], 0x2c}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x13328b0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@userxattr}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}], [{@pcr={'pcr', 0x3d, 0x20}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x7, 0x31, 0x31, 0x33, 0x33, 0x61, 0x31], 0x2d, [0x37, 0x65, 0x61, 0x33], 0x2d, [0x36, 0x30, 0x39, 0x37], 0x2d, [0x1d070a3351f7b68c, 0x38, 0x35, 0x63], 0x2d, [0x34, 0x35, 0x33, 0x63, 0x65, 0x30, 0x36, 0x30]}}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'userxattr'}}], 0x2c}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async) lseek(r0, 0x10001, 0x0) (async) 1.701234209s ago: executing program 1 (id=2757): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) syz_clone(0x18000000, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/fs/file-max\x00', 0x10401, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$cgroup_pid(r0, &(0x7f00000002c0)=0xffffffffffffffff, 0x12) mkdir(&(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x70bd2a, 0x21dfdbfc, {0x2, 0x18, 0x49, 0xff, r2}, [@IFA_FLAGS={0x8, 0x8, 0x6c0}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x32}}]}, 0x28}}, 0x24008044) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x121002, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) timer_create(0x2, 0x0, &(0x7f0000000580)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) capset(&(0x7f00000005c0)={0x20080522}, &(0x7f0000000600)={0x200000, 0x200010}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x344f, &(0x7f0000000640)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/4095, 0x440000}], 0x100000000000011a) 1.571194013s ago: executing program 1 (id=2759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e40)=ANY=[@ANYBLOB="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"], 0x1d8}}, 0x0) 1.570232863s ago: executing program 1 (id=2761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) 1.539269693s ago: executing program 6 (id=2762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x178}}, 0x0) 1.493219263s ago: executing program 1 (id=2763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000070000000900010073797a300007000040000000030a01040000000000000000070000000900010073797a30000000000900030073797a300000000014000480080001400000000408000240ffffff3865000000060a01040000000000000000070000000900010073797a30000000000900020073797a30000000002800048024000180090001006d65746100000000140002800800014000000001080002"], 0xdc}}, 0x0) 1.411786797s ago: executing program 5 (id=2764): r0 = syz_ublk_setup_io_uring(0x19, &(0x7f00000010c0)={0x0, 0x30b8, 0x1, 0x2, 0x2158}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000440)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000480)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000540)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000580)={0x0, 0x3372, 0x10, 0x1, 0x255}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd33, 0x200, 0x2, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x7, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb41f, 0x2000, 0x3, 0x1e9}}], 0x1, &(0x7f0000000880)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r4, '\x00', {0x204, 0x8004, 0x0, 0x0}}, 0x0) msgsnd(0x0, &(0x7f0000000f80)=ANY=[], 0x8, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f0000000f40)='1\x00', 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000100)="f2f0450fbb3364410f01c9363e0f955c8600400f01c53e4c0fc75e0a66ba2100ed660f3a161f3366baf80cb81218428aef66bafc0cb000eec4e3c96bc90ec744240017010000c74424027cbeb742ff2c24", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043eec0d061500000000000000000905810f020600040000000000003ace855b6766a34cd4ac66bf523c9e92b95ea04f4b2193855ac870a77bc5959d1865bf2ebacfb3cba7d9d822ea4b3ad378a62b207e464c322964d9129cc6e840293c8336398718c809eeba98f4df3c11b60f7c"], 0x3ef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgrcv(0x0, &(0x7f0000000080)={0x0, ""/37}, 0x2d, 0x1, 0x2800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) landlock_restrict_self(0xffffffffffffffff, 0x8) 1.411477664s ago: executing program 6 (id=2765): socket(0x400000000010, 0x3, 0x2) r0 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000080)={0x8, 0x0, 0xfffffffd, 0xc, 0x0, 0x1000, &(0x7f0000002240)=""/4096, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0xc, 0x1, 0x0, 0x9, 0x1, 0x0, 0x80000001, 0xc}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000680)=0xcde, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40442, 0x8) socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$cec(&(0x7f00000006c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000700)={"1b00", 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6000000006906528640", "000000ff0000000000000020", "0000000000000000000100"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000780)={0xd, 0xfffffffffffffffa, 0x1, 0x0, 0x0, 0x6, "c196ff85ff00cbd49602008f00", 0x0, 0x8, 0xfc, 0xc4, 0x0, 0x0, 0xfd}) 1.410252831s ago: executing program 1 (id=2766): socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x383a, &(0x7f00000000c0)={0x0, 0x4178, 0x40, 0x3, 0x3d6}) r1 = syz_usb_connect(0x2, 0x58, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="00030200000002031c44369725b30d43b0ba22f5fd706da6a8f4c4b6b2430b02bac9de06509a0c83459db0db6bf1cd56463a7a217d79df4d166e07775ff09d5a8049e3bebbd0277e0425329033736f322bdf5bcbf789f8ab351a20e5ece0bf60bc35d507fb2d241dfcbbebf8247587c18dcc130753390379d2172b1edc7d891edf0601360b2d8dfa54f4a822a3ec2ba126d8a439837d11ea842ce4cd7fb8ccb7f65bec5f9c1b61c799d9c9c60070422c610c1e614b62068efd9820b2db0de6e11572469ec5c93e811dd3609af96b1dc974662672cb8a6ea4ac1031b286634beee1463fdeb93a9416803880"], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000740)={0x24, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000007c0)={0x18, &(0x7f0000000800)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000900)={0x20, 0xd, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 592.922707ms ago: executing program 7 (id=2767): r0 = io_uring_setup(0x344f, &(0x7f0000000640)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 482.980715ms ago: executing program 7 (id=2768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x6c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="080008000201060003002f004000496d008900650000ec06"], 0x97) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x18, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2000c0c5}, 0x4) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000580), 0x82000, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r10, 0x80045017, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x0, r11, 0x1, 0x70bd28}, 0x24}}, 0x0) 353.446342ms ago: executing program 7 (id=2769): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffef7, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000200002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) 290.255281ms ago: executing program 7 (id=2770): r0 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040819}, 0x0) (fail_nth: 4) 213.168217ms ago: executing program 7 (id=2771): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) 212.091288ms ago: executing program 7 (id=2772): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x130}}, 0x4004095) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="120110030a4308083767010080910102030109022400018e0510070904fb0b0280d2d20009059f0240000700070905010240"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x18, &(0x7f0000000480)={0x0, 0xe, 0x5, "0c9917e701"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/ttyUSB0\x00', 0x2, 0x0) write$ublk_bdev(r1, &(0x7f0000000500)="6464cb6ba7", 0x5) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) file_getattr(r2, 0x0, 0x0, 0x0, 0x1000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xd) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r4, &(0x7f0000000180)='2', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xb, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x3, 0xa, 0x5, 0x80, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0x12, 0x8, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x37, 0xa, 0xb, 0x76, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000880), 0x8, r5}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=2773): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000480)="0f20c06635000000400f22c0f10fc774f82e3e0f1884b3f2670f01dd0f2e1df30f09640f01c866b93406000066b80000000066ba000000800f30baf80c66b8e4e60b8766efbafc0cb80100ef", 0x4c}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000500)={0x74, 0x0, 0x44}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000006c0)='usbip-vudc.0', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r5 = fsopen(&(0x7f0000000700)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000740)='iocharset', &(0x7f0000000780)='io#harset', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000007c0)='iocharset', &(0x7f0000000800)='io#harset', 0x0) write(r4, &(0x7f0000000100)='27', 0x2) r6 = openat$dir(0xffffffffffffff9c, 0x0, 0x20400, 0x58) ppoll(&(0x7f0000000140)=[{r4, 0x844cc0bec3c32b2f}, {r6, 0x220}, {r4, 0x1}, {r4, 0x8}, {r6, 0x84}, {r6, 0x20}], 0x6, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)={[0x2]}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1b}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x96}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x8}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) unshare(0x28000600) kernel console output (not intermixed with test programs): ci0: command 0x0c1a tx timeout [ 236.175726][T12779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.187105][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.188923][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.203777][ T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 236.204778][ T9] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 236.204799][ T9] usb 5-1: config 1 has no interface number 0 [ 236.205220][T12779] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.208582][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.208602][ T9] usb 5-1: Product: syz [ 236.208615][ T9] usb 5-1: Manufacturer: syz [ 236.208628][ T9] usb 5-1: SerialNumber: syz [ 236.209697][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.209743][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.215674][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.215718][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.257596][ T9] usb 5-1: 3:0 : does not exist [ 236.257618][ T9] usb 5-1: 3:0 : does not exist [ 236.509818][T12779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.510313][ T7723] usb 5-1: USB disconnect, device number 47 [ 236.693501][T12779] veth0_vlan: entered promiscuous mode [ 236.698679][T12779] veth1_vlan: entered promiscuous mode [ 236.723634][T12779] veth0_macvtap: entered promiscuous mode [ 236.727420][T12779] veth1_macvtap: entered promiscuous mode [ 236.738558][T12779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.744316][T12779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.802543][ T5599] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.802859][ T5599] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.802890][ T5599] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.802919][ T5599] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.850740][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.850761][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.869837][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.869855][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.888064][T12856] sctp: [Deprecated]: syz.1.2346 (pid 12856) Use of int in max_burst socket option deprecated. [ 236.888064][T12856] Use struct sctp_assoc_value instead [ 236.908616][T12856] ptrace attach of "/syz-executor exec"[10905] was attempted by "/syz-executor exec"[12856] [ 236.990515][T12865] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 237.073108][ T44] kauditd_printk_skb: 14 callbacks suppressed [ 237.073120][ T44] audit: type=1400 audit(1791996233.461:817): avc: denied { write } for pid=12871 comm="syz.6.2355" name="/" dev="9p" ino=71827723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.097783][ T44] audit: type=1400 audit(1791996233.481:818): avc: denied { read } for pid=12871 comm="syz.6.2355" name="file0" dev="9p" ino=71827737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 237.112827][ T44] audit: type=1400 audit(1791996233.501:819): avc: denied { setopt } for pid=12877 comm="syz.0.2356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.161869][T12886] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 237.272990][ T5736] Bluetooth: hci1: command tx timeout [ 237.337702][ T44] audit: type=1400 audit(1791996233.721:820): avc: denied { ioctl } for pid=12897 comm="syz.6.2359" path="socket:[48909]" dev="sockfs" ino=48909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 237.340429][T12898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.355554][T12898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.388175][T12900] netlink: 'syz.1.2363': attribute type 21 has an invalid length. [ 237.552784][ T852] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 237.656505][ T44] audit: type=1400 audit(1791996234.041:821): avc: denied { create } for pid=12907 comm="syz.1.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 237.713829][ T852] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 237.715265][ T852] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 237.715284][ T852] usb 5-1: config 1 has no interface number 0 [ 237.718324][ T852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.718342][ T852] usb 5-1: Product: syz [ 237.718356][ T852] usb 5-1: Manufacturer: syz [ 237.718369][ T852] usb 5-1: SerialNumber: syz [ 237.724250][ T852] usb 5-1: 3:0 : does not exist [ 237.724269][ T852] usb 5-1: 3:0 : does not exist [ 237.902193][ T25] usb 10-1: USB disconnect, device number 7 [ 237.906740][ T25] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 237.907272][ T25] cypress_m8 10-1:142.251: device disconnected [ 237.974827][T12927] netlink: 'syz.5.2371': attribute type 1 has an invalid length. [ 237.977077][ T71] usb 5-1: USB disconnect, device number 48 [ 238.233875][ T44] audit: type=1400 audit(1791996234.621:822): avc: denied { append } for pid=12939 comm="syz.5.2377" name="001" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 238.631170][T12960] loop0: detected capacity change from 0 to 4096 [ 238.672945][T12960] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 238.672962][T12960] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 238.672970][T12960] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 238.672995][T12960] loop0: [ 238.674967][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 238.674987][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 238.674998][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 238.675041][ T5142] loop0: [ 238.755256][T12965] __nla_validate_parse: 17 callbacks suppressed [ 238.755275][T12965] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2383'. [ 238.847701][ T44] audit: type=1400 audit(1791996235.231:823): avc: denied { append } for pid=12968 comm="syz.6.2385" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 238.848971][T12969] loop5: detected capacity change from 0 to 7 [ 238.858397][T12969] Dev loop5: unable to read RDB block 7 [ 238.858427][T12969] loop5: unable to read partition table [ 238.858583][T12969] loop5: partition table beyond EOD, truncated [ 238.858599][T12969] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 238.868179][T12969] bridge1: entered allmulticast mode [ 238.962386][ T35] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 239.109109][T12982] loop0: detected capacity change from 0 to 4096 [ 239.113720][ T35] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 239.114913][ T35] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 239.114940][ T35] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid maxpacket 169, setting to 64 [ 239.114961][ T35] usb 5-1: config 0 interface 0 has no altsetting 0 [ 239.117368][ T35] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 239.117387][ T35] usb 5-1: Product: syz [ 239.117399][ T35] usb 5-1: Manufacturer: syz [ 239.117412][ T35] usb 5-1: SerialNumber: syz [ 239.129270][ T35] usb 5-1: config 0 descriptor?? [ 239.129979][T12962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 239.133739][ T35] usb 5-1: selecting invalid altsetting 0 [ 239.153800][T12982] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 239.153823][T12982] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 239.153834][T12982] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 239.153879][T12982] loop0: [ 239.160297][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 239.160312][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 239.160318][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 239.160359][ T5142] loop0: [ 239.219908][T12984] device-mapper: thin metadata: sb_check failed: magic 0: wanted 27022010 [ 239.220014][T12984] device-mapper: block manager: superblock validator check failed for block 0 [ 239.220028][T12984] device-mapper: thin metadata: couldn't read superblock [ 239.282876][ T5825] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 239.334990][T12962] netlink: 'syz.0.2382': attribute type 1 has an invalid length. [ 239.345587][ T71] usb 5-1: USB disconnect, device number 49 [ 239.353315][ T5736] Bluetooth: hci1: command tx timeout [ 239.380154][T12984] device-mapper: table: 248:2: thin-pool: Error creating metadata object (-EILSEQ) [ 239.380178][T12984] device-mapper: ioctl: error adding target to table [ 239.413579][T12999] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.413598][T12999] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 239.413613][T12999] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.432865][ T5825] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 239.433787][ T5825] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 239.433808][ T5825] usb 6-1: config 1 has no interface number 0 [ 239.437158][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.437176][ T5825] usb 6-1: Product: syz [ 239.437190][ T5825] usb 6-1: Manufacturer: syz [ 239.437203][ T5825] usb 6-1: SerialNumber: syz [ 239.448298][ T5825] usb 6-1: 3:0 : does not exist [ 239.448315][ T5825] usb 6-1: 3:0 : does not exist [ 239.539798][T13009] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2401'. [ 239.550491][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 239.550506][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 239.550513][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 239.550539][ T5142] loop0: [ 239.578836][T13012] bridge0: port 3(syz_tun) entered blocking state [ 239.580721][T13012] bridge0: port 3(syz_tun) entered disabled state [ 239.580817][T13012] syz_tun: entered allmulticast mode [ 239.581640][T13012] syz_tun: entered promiscuous mode [ 239.583066][T13012] bridge0: port 3(syz_tun) entered blocking state [ 239.583180][T13012] bridge0: port 3(syz_tun) entered forwarding state [ 239.594289][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13012 comm=syz.5.2402 [ 239.594305][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13012 comm=syz.5.2402 [ 239.594316][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=13012 comm=syz.5.2402 [ 239.594326][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=13012 comm=syz.5.2402 [ 239.709120][ T852] usb 6-1: USB disconnect, device number 11 [ 239.889557][T13027] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2407'. [ 240.004829][T13035] loop0: detected capacity change from 0 to 4096 [ 240.096562][T13035] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 240.096586][T13035] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 240.096598][T13035] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 240.096641][T13035] loop0: [ 240.151415][T13039] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2412'. [ 240.220412][T13043] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 240.220445][T13043] [U] J"—e:ÀÆ" [ 240.333253][T13050] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2417'. [ 240.345836][T13053] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2418'. [ 240.349707][T13050] syzkaller1: entered promiscuous mode [ 240.349723][T13050] syzkaller1: entered allmulticast mode [ 240.404246][ T44] audit: type=1400 audit(1791996236.791:824): avc: denied { listen } for pid=13054 comm="syz.0.2419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 240.411915][T13061] netlink: 6024 bytes leftover after parsing attributes in process `syz.5.2420'. [ 240.415337][T13062] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2420'. [ 240.423582][T13060] overlayfs: missing 'lowerdir' [ 240.468951][T13056] jffs2: notice: (13056) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 240.472561][T13065] loop0: detected capacity change from 0 to 4096 [ 240.495864][T13065] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 240.495879][T13065] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 240.495888][T13065] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 240.495912][T13065] loop0: [ 240.502301][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 240.502316][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 240.502323][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 240.502350][ T5142] loop0: [ 240.534931][ T44] audit: type=1326 audit(1791996236.921:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13069 comm="syz.1.2424" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcdd99e559 code=0x7ffc0000 [ 240.535284][ T44] audit: type=1326 audit(1791996236.921:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13069 comm="syz.1.2424" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbcdd99e559 code=0x7ffc0000 [ 240.618551][T13081] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2428'. [ 240.760870][T13096] loop0: detected capacity change from 0 to 4096 [ 240.792518][ T5810] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 240.793245][T13098] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2431'. [ 240.806001][T13096] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 240.806049][T13096] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 240.806060][T13096] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 240.806103][T13096] loop0: [ 240.812355][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 240.812374][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 240.812380][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 240.812405][ T5142] loop0: [ 240.824832][ T5881] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 240.962848][ T5810] usb 11-1: Using ep0 maxpacket: 16 [ 240.963421][ T5810] usb 11-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 240.964346][ T5810] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.964371][ T5810] usb 11-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.964389][ T5810] usb 11-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.964412][ T5810] usb 11-1: config 0 interface 0 has no altsetting 0 [ 240.964439][ T5810] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.967761][ T5810] usb 11-1: config 0 descriptor?? [ 240.989081][ T5881] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 240.992280][ T5881] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 240.992299][ T5881] usb 5-1: config 1 has no interface number 0 [ 240.996162][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.996180][ T5881] usb 5-1: Product: syz [ 240.996192][ T5881] usb 5-1: Manufacturer: syz [ 240.996205][ T5881] usb 5-1: SerialNumber: syz [ 241.005119][ T5881] usb 5-1: 3:0 : does not exist [ 241.005137][ T5881] usb 5-1: 3:0 : does not exist [ 241.022558][T13106] tmpfs: Using encoding : utf8-12.1.0 [ 241.026505][T13106] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 241.033638][T13106] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 5 (only 8 groups) [ 241.268725][ T71] usb 5-1: USB disconnect, device number 50 [ 241.375137][ T5810] input: HID 046d:c215 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:046D:C215.0008/input/input13 [ 241.432465][ T5736] Bluetooth: hci1: command tx timeout [ 241.440654][ T5810] logitech 0003:046D:C215.0008: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 046d:c215] on usb-dummy_hcd.6-1/input0 [ 241.575396][ T5810] usb 11-1: USB disconnect, device number 2 [ 241.830308][T13127] loop0: detected capacity change from 0 to 4096 [ 241.872964][T13127] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 241.872981][T13127] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 241.872988][T13127] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 241.873013][T13127] loop0: [ 241.875275][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 241.875293][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 241.875302][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 241.875344][ T5142] loop0: [ 241.918599][T13129] kvm [13128]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 241.919164][T13129] kvm [13128]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 242.104903][T13142] netlink: 'syz.6.2449': attribute type 1 has an invalid length. [ 242.392780][ T5881] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 242.485113][T13121] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.551591][T13162] loop0: detected capacity change from 0 to 4096 [ 242.557038][ T5881] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 242.558945][ T5881] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 242.558965][ T5881] usb 11-1: config 1 has no interface number 0 [ 242.560760][ T5881] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.560777][ T5881] usb 11-1: Product: syz [ 242.560791][ T5881] usb 11-1: Manufacturer: syz [ 242.560802][ T5881] usb 11-1: SerialNumber: syz [ 242.566267][ T5881] usb 11-1: 3:0 : does not exist [ 242.566284][ T5881] usb 11-1: 3:0 : does not exist [ 242.614516][T13162] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 242.614533][T13162] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 242.614541][T13162] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 242.614567][T13162] loop0: [ 242.619463][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 242.619484][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 242.619496][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 242.619573][ T5142] loop0: [ 242.715389][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 242.826149][ T5881] usb 11-1: USB disconnect, device number 3 [ 242.939193][T13183] netlink: 'syz.0.2463': attribute type 10 has an invalid length. [ 243.074614][T13188] loop0: detected capacity change from 0 to 4096 [ 243.123016][T13188] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 243.123042][T13188] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 243.123053][T13188] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 243.123082][T13188] loop0: [ 243.127703][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 243.127725][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 243.127736][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 243.127782][ T5142] loop0: [ 243.354390][ T5732] Bluetooth: hci4: command 0x0c1a tx timeout [ 243.426675][ T44] kauditd_printk_skb: 99 callbacks suppressed [ 243.426688][ T44] audit: type=1400 audit(1791996239.811:926): avc: denied { read } for pid=13197 comm="syz.5.2468" name="dbroot" dev="configfs" ino=51735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 243.444665][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.460195][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.464741][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.472228][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.487639][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.498810][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.499508][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.508790][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.512246][ T5736] Bluetooth: hci1: command tx timeout [ 243.513585][T13200] netlink: 'syz.5.2468': attribute type 10 has an invalid length. [ 243.591354][T13211] loop0: detected capacity change from 0 to 4096 [ 243.632985][T13211] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 243.633006][T13211] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 243.633013][T13211] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 243.633040][T13211] loop0: [ 243.636511][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 243.636525][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 243.636532][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 243.636558][ T5142] loop0: [ 243.752316][ T5736] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.767939][T13220] block nbd5: shutting down sockets [ 243.796471][T13225] __nla_validate_parse: 3 callbacks suppressed [ 243.796490][T13225] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2478'. [ 243.907695][ T44] audit: type=1400 audit(1791996240.291:927): avc: denied { read } for pid=13230 comm="syz.6.2481" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 243.907728][ T44] audit: type=1400 audit(1791996240.291:928): avc: denied { open } for pid=13230 comm="syz.6.2481" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 244.006826][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 244.006850][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 244.006860][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 244.006892][ T5142] loop0: [ 244.034726][T13238] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2483'. [ 244.277829][ T5736] Bluetooth: hci0: unexpected event 0x01 length: 4 > 1 [ 244.299864][T13259] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 244.546229][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 244.546246][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 244.546253][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 244.546278][ T5142] loop0: [ 245.016314][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2498'. [ 245.024027][T13287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2498'. [ 245.031499][T12243] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.031528][T12243] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.031546][T12243] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.031564][T12243] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.122102][ T71] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 245.211867][T13295] bridge0: port 3(team0) entered blocking state [ 245.212538][T13295] bridge0: port 3(team0) entered disabled state [ 245.212708][T13295] team0: entered allmulticast mode [ 245.212729][T13295] team_slave_0: entered allmulticast mode [ 245.212776][T13295] team_slave_1: entered allmulticast mode [ 245.226387][T13295] team0: entered promiscuous mode [ 245.226406][T13295] team_slave_0: entered promiscuous mode [ 245.226576][T13295] team_slave_1: entered promiscuous mode [ 245.236963][T13295] bridge0: port 3(team0) entered blocking state [ 245.237042][T13295] bridge0: port 3(team0) entered forwarding state [ 245.252492][ T71] usb 6-1: device descriptor read/64, error -71 [ 245.277387][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 245.277403][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 245.277410][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 245.277471][ T5142] loop0: [ 245.279075][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2502'. [ 245.279102][T13295] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2502'. [ 245.326307][T13300] FAULT_INJECTION: forcing a failure. [ 245.326307][T13300] name fail_futex, interval 1, probability 0, space 0, times 0 [ 245.326329][T13300] CPU: 1 UID: 0 PID: 13300 Comm: syz.5.2504 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.326344][T13300] Tainted: [L]=SOFTLOCKUP [ 245.326349][T13300] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 245.326355][T13300] Call Trace: [ 245.326359][T13300] [ 245.326364][T13300] dump_stack_lvl+0x100/0x190 [ 245.326385][T13300] should_fail_ex.cold+0x5/0xa [ 245.326402][T13300] get_futex_key+0x1d0/0x14f0 [ 245.326420][T13300] ? __pfx_get_futex_key+0x10/0x10 [ 245.326441][T13300] futex_wait_setup+0x91/0x540 [ 245.326460][T13300] __futex_wait+0x19f/0x300 [ 245.326475][T13300] ? __pfx___futex_wait+0x10/0x10 [ 245.326486][T13300] ? __pfx_try_to_wake_up+0x10/0x10 [ 245.326499][T13300] ? futex_hash+0x311/0x400 [ 245.326514][T13300] ? __pfx_futex_wake_mark+0x10/0x10 [ 245.326528][T13300] ? find_held_lock+0x2b/0x80 [ 245.326544][T13300] ? futex_wake+0x4ea/0x5e0 [ 245.326559][T13300] futex_wait+0xe6/0x370 [ 245.326570][T13300] ? __pfx_futex_wait+0x10/0x10 [ 245.326585][T13300] ? rcu_read_lock_any_held+0x6a/0x90 [ 245.326602][T13300] ? find_held_lock+0x2b/0x80 [ 245.326620][T13300] ? ksys_write+0x190/0x250 [ 245.326633][T13300] ? ksys_write+0x190/0x250 [ 245.326648][T13300] do_futex+0x265/0x440 [ 245.326664][T13300] ? __pfx_do_futex+0x10/0x10 [ 245.326680][T13300] ? __seccomp_filter+0x896/0x1130 [ 245.326700][T13300] __x64_sys_futex+0x34f/0x4d0 [ 245.326718][T13300] ? __pfx___x64_sys_futex+0x10/0x10 [ 245.326733][T13300] ? ksys_write+0x1ac/0x250 [ 245.326746][T13300] ? __pfx_ksys_write+0x10/0x10 [ 245.326763][T13300] do_syscall_64+0x123/0x790 [ 245.326780][T13300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.326792][T13300] RIP: 0033:0x7f00ccf9e559 [ 245.326802][T13300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.326812][T13300] RSP: 002b:00007f00cde9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 245.326826][T13300] RAX: ffffffffffffffda RBX: 00007f00cd225fa8 RCX: 00007f00ccf9e559 [ 245.326836][T13300] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f00cd225fa8 [ 245.326846][T13300] RBP: 00007f00cd225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 245.326856][T13300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.326866][T13300] R13: 00007f00cd226038 R14: 00007ffffbc3b600 R15: 00007ffffbc3b6e8 [ 245.326887][T13300] [ 245.435010][ T5736] Bluetooth: hci4: command 0x0c1a tx timeout [ 245.479021][T13304] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2506'. [ 245.492076][ T71] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 245.573929][T13308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2508'. [ 245.576042][T13310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2508'. [ 245.623607][ T71] usb 6-1: device descriptor read/64, error -71 [ 245.732220][ T71] usb usb6-port1: attempt power cycle [ 245.759829][T13318] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 245.761371][T13318] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 245.763534][T13318] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 246.072008][ T71] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 246.095636][ T71] usb 6-1: device descriptor read/8, error -71 [ 246.190136][T13323] FAULT_INJECTION: forcing a failure. [ 246.190136][T13323] name fail_futex, interval 1, probability 0, space 0, times 0 [ 246.190170][T13323] CPU: 3 UID: 0 PID: 13323 Comm: syz.6.2513 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.190198][T13323] Tainted: [L]=SOFTLOCKUP [ 246.190205][T13323] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.190216][T13323] Call Trace: [ 246.190224][T13323] [ 246.190232][T13323] dump_stack_lvl+0x100/0x190 [ 246.190268][T13323] should_fail_ex.cold+0x5/0xa [ 246.190295][T13323] get_futex_key+0x1d0/0x14f0 [ 246.190347][T13323] ? __pfx_get_futex_key+0x10/0x10 [ 246.190386][T13323] futex_wait_setup+0x91/0x540 [ 246.190416][T13323] __futex_wait+0x19f/0x300 [ 246.190440][T13323] ? __pfx___futex_wait+0x10/0x10 [ 246.190461][T13323] ? __pfx_try_to_wake_up+0x10/0x10 [ 246.190484][T13323] ? futex_hash+0x311/0x400 [ 246.190512][T13323] ? __pfx_futex_wake_mark+0x10/0x10 [ 246.190543][T13323] ? find_held_lock+0x2b/0x80 [ 246.190571][T13323] ? futex_wake+0x4ea/0x5e0 [ 246.190598][T13323] futex_wait+0xe6/0x370 [ 246.190621][T13323] ? __pfx_futex_wait+0x10/0x10 [ 246.190649][T13323] ? rcu_read_lock_any_held+0x6a/0x90 [ 246.190682][T13323] ? find_held_lock+0x2b/0x80 [ 246.190710][T13323] ? ksys_write+0x190/0x250 [ 246.190733][T13323] ? ksys_write+0x190/0x250 [ 246.190759][T13323] do_futex+0x265/0x440 [ 246.190792][T13323] ? __pfx_do_futex+0x10/0x10 [ 246.190820][T13323] ? __seccomp_filter+0x896/0x1130 [ 246.190856][T13323] __x64_sys_futex+0x34f/0x4d0 [ 246.190888][T13323] ? __pfx___x64_sys_futex+0x10/0x10 [ 246.190915][T13323] ? ksys_write+0x1ac/0x250 [ 246.190939][T13323] ? __pfx_ksys_write+0x10/0x10 [ 246.190969][T13323] do_syscall_64+0x123/0x790 [ 246.190998][T13323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.191017][T13323] RIP: 0033:0x7f654bb9e559 [ 246.191033][T13323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.191052][T13323] RSP: 002b:00007f654ca890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 246.191070][T13323] RAX: ffffffffffffffda RBX: 00007f654be25fa8 RCX: 00007f654bb9e559 [ 246.191083][T13323] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f654be25fa8 [ 246.191095][T13323] RBP: 00007f654be25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 246.191106][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.191118][T13323] R13: 00007f654be26038 R14: 00007ffeea819f50 R15: 00007ffeea81a038 [ 246.191145][T13323] [ 246.274877][T13325] loop0: detected capacity change from 0 to 4096 [ 246.288597][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2515'. [ 246.333249][ T71] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 246.334227][T13325] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 246.334241][T13325] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 246.334248][T13325] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 246.334350][T13325] loop0: [ 246.342635][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 246.342655][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 246.342666][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 246.342711][ T5142] loop0: [ 246.352497][ T71] usb 6-1: device descriptor read/8, error -71 [ 246.467495][ T71] usb usb6-port1: unable to enumerate USB device [ 246.496670][T13341] FAULT_INJECTION: forcing a failure. [ 246.496670][T13341] name failslab, interval 1, probability 0, space 0, times 0 [ 246.496691][T13341] CPU: 2 UID: 0 PID: 13341 Comm: syz.6.2522 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.496707][T13341] Tainted: [L]=SOFTLOCKUP [ 246.496711][T13341] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 246.496717][T13341] Call Trace: [ 246.496722][T13341] [ 246.496727][T13341] dump_stack_lvl+0x100/0x190 [ 246.496747][T13341] should_fail_ex.cold+0x5/0xa [ 246.496763][T13341] should_failslab+0xc2/0x120 [ 246.496780][T13341] kmem_cache_alloc_noprof+0x92/0x6a0 [ 246.496795][T13341] ? security_file_alloc+0x34/0x2c0 [ 246.496814][T13341] security_file_alloc+0x34/0x2c0 [ 246.496831][T13341] init_file+0x95/0x480 [ 246.496848][T13341] alloc_empty_file+0x79/0x1c0 [ 246.496858][T13341] path_openat+0xdb/0x2440 [ 246.496876][T13341] ? __pfx_path_openat+0x10/0x10 [ 246.496895][T13341] do_file_open+0x20e/0x430 [ 246.496912][T13341] ? __pfx_do_file_open+0x10/0x10 [ 246.496937][T13341] ? _raw_spin_unlock+0x28/0x50 [ 246.496951][T13341] ? alloc_fd+0x471/0x7a0 [ 246.496970][T13341] do_sys_openat2+0x10f/0x1e0 [ 246.496981][T13341] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.496996][T13341] __x64_sys_openat+0x12d/0x210 [ 246.497007][T13341] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.497022][T13341] do_syscall_64+0x123/0x790 [ 246.497039][T13341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.497050][T13341] RIP: 0033:0x7f654bb5ed8e [ 246.497059][T13341] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 246.497069][T13341] RSP: 002b:00007f654ca88ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.497081][T13341] RAX: ffffffffffffffda RBX: 00007f654ca896c0 RCX: 00007f654bb5ed8e [ 246.497089][T13341] RDX: 0000000000000000 RSI: 00007f654ca88f90 RDI: ffffffffffffff9c [ 246.497120][T13341] RBP: 00007f654bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 246.497128][T13341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.497135][T13341] R13: 00007f654be26038 R14: 00007f654be25fa0 R15: 00007ffeea81a038 [ 246.497151][T13341] [ 246.609697][T13345] loop0: detected capacity change from 0 to 4096 [ 246.617238][ T5732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 246.623322][ T5732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.624677][ T5732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.628750][ T5732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.629201][ T5732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.655932][T13345] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 246.655955][T13345] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 246.655966][T13345] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 246.656009][T13345] loop0: [ 246.657807][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 246.657826][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 246.657836][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 246.657871][ T5142] loop0: [ 246.831974][ T5825] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 246.847098][T13352] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.869372][T13346] rxe_eth0 speed is unknown, defaulting to 1000 [ 246.949169][ T7718] tipc: Disabling bearer [ 246.995325][ T5825] usb 11-1: unable to get BOS descriptor or descriptor too short [ 246.995824][T13346] virt_wifi0 speed is unknown, defaulting to 1000 [ 246.996030][ T5825] usb 11-1: not running at top speed; connect to a high speed hub [ 246.996056][ T5825] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 246.998289][ T5825] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 246.998310][ T5825] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 246.998327][ T5825] usb 11-1: config 14 has no interface number 0 [ 246.998341][ T5825] usb 11-1: config 14 has no interface number 1 [ 246.998388][ T5825] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 246.998408][ T5825] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 246.998430][ T5825] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 246.998453][ T5825] usb 11-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.998476][ T5825] usb 11-1: config 14 interface 57 has no altsetting 0 [ 246.998491][ T5825] usb 11-1: config 14 interface 228 has no altsetting 0 [ 247.006328][ T5825] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.006348][ T5825] usb 11-1: Product: syz [ 247.006361][ T5825] usb 11-1: Manufacturer: syz [ 247.006373][ T5825] usb 11-1: SerialNumber: syz [ 247.187201][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.241433][T13346] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.241514][T13346] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.241573][T13346] bridge_slave_0: entered allmulticast mode [ 247.243180][T13346] bridge_slave_0: entered promiscuous mode [ 247.245755][T13346] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.245797][T13346] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.245852][T13346] bridge_slave_1: entered allmulticast mode [ 247.246610][T13346] bridge_slave_1: entered promiscuous mode [ 247.262032][T13346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.263318][T13346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.284974][T13346] team0: Port device team_slave_0 added [ 247.287342][T13346] team0: Port device team_slave_1 added [ 247.309598][T13346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.309615][T13346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.309636][T13346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.310868][T13346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.310881][T13346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.310903][T13346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.349870][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.373467][T13346] hsr_slave_0: entered promiscuous mode [ 247.373933][T13346] hsr_slave_1: entered promiscuous mode [ 247.374347][T13346] debugfs: 'hsr0' already exists in 'hsr' [ 247.374359][T13346] Cannot create hsr debugfs directory [ 247.420998][ T5825] legousbtower 11-1:14.57: interrupt endpoints not found [ 247.459429][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.531364][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.609403][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.629349][T13343] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 247.641275][ T5825] legousbtower 11-1:14.228: get version request failed: -71 [ 247.641404][ T5825] legousbtower 11-1:14.228: probe with driver legousbtower failed with error -71 [ 247.645429][ T5825] usb 11-1: USB disconnect, device number 4 [ 247.658984][T13370] devpts: Bad value for 'max' [ 247.676376][T13370] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 247.787143][ T12] bond6 (unregistering): (slave xfrm1): Releasing backup interface [ 247.787169][ T12] xfrm1 (unregistering): left promiscuous mode [ 247.864107][T13377] FAULT_INJECTION: forcing a failure. [ 247.864107][T13377] name failslab, interval 1, probability 0, space 0, times 0 [ 247.864139][T13377] CPU: 3 UID: 0 PID: 13377 Comm: syz.5.2530 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.864165][T13377] Tainted: [L]=SOFTLOCKUP [ 247.864173][T13377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.864185][T13377] Call Trace: [ 247.864191][T13377] [ 247.864200][T13377] dump_stack_lvl+0x100/0x190 [ 247.864233][T13377] should_fail_ex.cold+0x5/0xa [ 247.864260][T13377] should_failslab+0xc2/0x120 [ 247.864289][T13377] kmem_cache_alloc_noprof+0x92/0x6a0 [ 247.864314][T13377] ? security_file_alloc+0x34/0x2c0 [ 247.864348][T13377] security_file_alloc+0x34/0x2c0 [ 247.864378][T13377] init_file+0x95/0x480 [ 247.864406][T13377] alloc_empty_file+0x79/0x1c0 [ 247.864426][T13377] path_openat+0xdb/0x2440 [ 247.864457][T13377] ? __pfx_path_openat+0x10/0x10 [ 247.864493][T13377] do_file_open+0x20e/0x430 [ 247.864523][T13377] ? __pfx_do_file_open+0x10/0x10 [ 247.864568][T13377] ? _raw_spin_unlock+0x28/0x50 [ 247.864593][T13377] ? alloc_fd+0x471/0x7a0 [ 247.864637][T13377] do_sys_openat2+0x10f/0x1e0 [ 247.864656][T13377] ? __pfx_do_sys_openat2+0x10/0x10 [ 247.864684][T13377] __x64_sys_openat+0x12d/0x210 [ 247.864704][T13377] ? __pfx___x64_sys_openat+0x10/0x10 [ 247.864733][T13377] do_syscall_64+0x123/0x790 [ 247.864763][T13377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.864783][T13377] RIP: 0033:0x7f00ccf5ed8e [ 247.864800][T13377] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 247.864818][T13377] RSP: 002b:00007f00cde9aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.864838][T13377] RAX: ffffffffffffffda RBX: 00007f00cde9b6c0 RCX: 00007f00ccf5ed8e [ 247.864850][T13377] RDX: 0000000000000000 RSI: 00007f00cde9af90 RDI: ffffffffffffff9c [ 247.864863][T13377] RBP: 00007f00cd0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 247.864874][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.864886][T13377] R13: 00007f00cd226038 R14: 00007f00cd225fa0 R15: 00007ffffbc3b6e8 [ 247.864912][T13377] [ 247.868774][ T12] bond1 (unregistering): (slave bridge4): Releasing backup interface [ 247.868791][ T12] bridge4 (unregistering): left promiscuous mode [ 247.989637][ T44] audit: type=1400 audit(1791996244.362:929): avc: denied { mounton } for pid=13380 comm="syz.1.2532" path="/203/loop0" dev="tmpfs" ino=1098 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.010872][T13381] XFS (loop0): Invalid device [./loop0], error=-16 [ 248.088731][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.091039][ T12] bond0 (unregistering): Released all slaves [ 248.097302][ T12] bond1 (unregistering): Released all slaves [ 248.105876][ T12] bond2 (unregistering): Released all slaves [ 248.111336][ T12] bond3 (unregistering): Released all slaves [ 248.121043][ T12] bond4 (unregistering): Released all slaves [ 248.133065][ T12] bond5 (unregistering): Released all slaves [ 248.138391][ T12] bond6 (unregistering): Released all slaves [ 248.154714][ T12] bond7 (unregistering): Released all slaves [ 248.163037][ T12] bond8 (unregistering): Released all slaves [ 248.419680][ T12] tipc: Left network mode [ 248.521544][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 248.521568][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 248.521580][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 248.521626][ T5142] loop0: [ 248.711899][ T5732] Bluetooth: hci3: command tx timeout [ 248.766629][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.767440][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.769074][ T12] veth0_to_bond: left allmulticast mode [ 248.769092][ T12] veth0_to_bond: left promiscuous mode [ 248.861575][ T12] team0 (unregistering): Port device team_slave_1 removed [ 248.877441][ T12] team0 (unregistering): Port device team_slave_0 removed [ 249.079454][T13346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.085388][T13346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 249.086083][T13346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.089083][T13346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.089463][T13346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.110172][T13346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.110928][T13346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.132834][T13346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.167048][T13409] FAULT_INJECTION: forcing a failure. [ 249.167048][T13409] name failslab, interval 1, probability 0, space 0, times 0 [ 249.167071][T13409] CPU: 0 UID: 0 PID: 13409 Comm: syz.6.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.167102][T13409] Tainted: [L]=SOFTLOCKUP [ 249.167108][T13409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.167115][T13409] Call Trace: [ 249.167120][T13409] [ 249.167124][T13409] dump_stack_lvl+0x100/0x190 [ 249.167155][T13409] should_fail_ex.cold+0x5/0xa [ 249.167172][T13409] should_failslab+0xc2/0x120 [ 249.167192][T13409] kmem_cache_alloc_noprof+0x92/0x6a0 [ 249.167207][T13409] ? security_file_alloc+0x34/0x2c0 [ 249.167227][T13409] security_file_alloc+0x34/0x2c0 [ 249.167243][T13409] init_file+0x95/0x480 [ 249.167260][T13409] alloc_empty_file+0x79/0x1c0 [ 249.167271][T13409] path_openat+0xdb/0x2440 [ 249.167290][T13409] ? __pfx_path_openat+0x10/0x10 [ 249.167309][T13409] do_file_open+0x20e/0x430 [ 249.167326][T13409] ? __pfx_do_file_open+0x10/0x10 [ 249.167353][T13409] ? _raw_spin_unlock+0x28/0x50 [ 249.167370][T13409] ? alloc_fd+0x471/0x7a0 [ 249.167391][T13409] do_sys_openat2+0x10f/0x1e0 [ 249.167401][T13409] ? __pfx_do_sys_openat2+0x10/0x10 [ 249.167417][T13409] __x64_sys_openat+0x12d/0x210 [ 249.167428][T13409] ? __pfx___x64_sys_openat+0x10/0x10 [ 249.167444][T13409] do_syscall_64+0x123/0x790 [ 249.167461][T13409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.167473][T13409] RIP: 0033:0x7f654bb5ed8e [ 249.167483][T13409] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 249.167493][T13409] RSP: 002b:00007f654ca88ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 249.167507][T13409] RAX: ffffffffffffffda RBX: 00007f654ca896c0 RCX: 00007f654bb5ed8e [ 249.167515][T13409] RDX: 0000000000000000 RSI: 00007f654ca88f90 RDI: ffffffffffffff9c [ 249.167521][T13409] RBP: 00007f654bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 249.167528][T13409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.167534][T13409] R13: 00007f654be26038 R14: 00007f654be25fa0 R15: 00007ffeea81a038 [ 249.167549][T13409] [ 249.227454][T13346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.234877][T13346] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.237966][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.238030][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.241206][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.241251][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.253555][ T12] IPVS: stop unused estimator thread 0... [ 249.486503][T13346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.509264][T13346] veth0_vlan: entered promiscuous mode [ 249.513239][T13346] veth1_vlan: entered promiscuous mode [ 249.521915][ T25] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 249.536027][T13346] veth0_macvtap: entered promiscuous mode [ 249.538129][T13346] veth1_macvtap: entered promiscuous mode [ 249.545048][T13346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.552964][T13346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.574040][ T5818] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.574074][ T5818] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.574092][ T5818] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.574109][ T5818] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.601458][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.601470][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.623107][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.623127][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.676798][ T25] usb 11-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 249.679450][ T25] usb 11-1: config 1 has an invalid interface number: 3 but max is 0 [ 249.679465][ T25] usb 11-1: config 1 has no interface number 0 [ 249.683124][ T25] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.683139][ T25] usb 11-1: Product: syz [ 249.683146][ T25] usb 11-1: Manufacturer: syz [ 249.683154][ T25] usb 11-1: SerialNumber: syz [ 249.691326][ T25] usb 11-1: 3:0 : does not exist [ 249.691338][ T25] usb 11-1: 3:0 : does not exist [ 249.727767][T13426] validate_nla: 29 callbacks suppressed [ 249.727784][T13426] netlink: 'syz.0.2520': attribute type 21 has an invalid length. [ 249.727821][T13426] netlink: 'syz.0.2520': attribute type 6 has an invalid length. [ 249.727832][T13426] __nla_validate_parse: 1 callbacks suppressed [ 249.727841][T13426] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2520'. [ 249.732544][T13430] netlink: 'syz.0.2520': attribute type 21 has an invalid length. [ 249.732586][T13430] netlink: 'syz.0.2520': attribute type 6 has an invalid length. [ 249.732598][T13430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2520'. [ 249.781436][T13438] loop0: detected capacity change from 0 to 4096 [ 249.823056][T13438] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 249.823080][T13438] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 249.823091][T13438] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 249.823133][T13438] loop0: [ 249.824852][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 249.824866][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 249.824873][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 249.824898][ T5142] loop0: [ 249.832356][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'. [ 249.863210][ T5732] Bluetooth: hci3: SCO packet for unknown connection handle 173 [ 249.895158][ T5832] usb 11-1: USB disconnect, device number 5 [ 250.242944][ T9] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 250.409454][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 250.409509][ T9] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 250.410611][ T9] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 250.410632][ T9] usb 6-1: config 142 has no interface number 0 [ 250.410662][ T9] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 250.410692][ T9] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 250.410711][ T9] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 250.410729][ T9] usb 6-1: config 142 interface 251 has no altsetting 0 [ 250.413957][ T9] usb 6-1: string descriptor 0 read error: -22 [ 250.414074][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.420451][T13446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.420594][T13446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 250.424176][ T9] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 250.426867][T13448] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2548'. [ 250.432077][ T9] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 250.467130][ T5832] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 250.473459][ T5825] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 250.479442][ T5832] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 250.499152][T13460] FAULT_INJECTION: forcing a failure. [ 250.499152][T13460] name failslab, interval 1, probability 0, space 0, times 0 [ 250.499186][T13460] CPU: 0 UID: 0 PID: 13460 Comm: syz.6.2550 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.499212][T13460] Tainted: [L]=SOFTLOCKUP [ 250.499219][T13460] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 250.499230][T13460] Call Trace: [ 250.499238][T13460] [ 250.499245][T13460] dump_stack_lvl+0x100/0x190 [ 250.499279][T13460] should_fail_ex.cold+0x5/0xa [ 250.499305][T13460] should_failslab+0xc2/0x120 [ 250.499333][T13460] kmem_cache_alloc_noprof+0x92/0x6a0 [ 250.499356][T13460] ? proc_id_map_open+0xb0/0x7d0 [ 250.499384][T13460] ? seq_open+0x55/0x170 [ 250.499411][T13460] seq_open+0x55/0x170 [ 250.499435][T13460] proc_id_map_open+0x316/0x7d0 [ 250.499464][T13460] do_dentry_open+0x6ab/0x14d0 [ 250.499487][T13460] ? __pfx_proc_projid_map_open+0x10/0x10 [ 250.499522][T13460] vfs_open+0x82/0x3f0 [ 250.499553][T13460] path_openat+0x19fa/0x2440 [ 250.499584][T13460] ? __pfx_path_openat+0x10/0x10 [ 250.499617][T13460] do_file_open+0x20e/0x430 [ 250.499646][T13460] ? __pfx_do_file_open+0x10/0x10 [ 250.499683][T13460] ? __pfx_kfree_link+0x10/0x10 [ 250.499715][T13460] ? _raw_spin_unlock+0x28/0x50 [ 250.499738][T13460] ? alloc_fd+0x471/0x7a0 [ 250.499772][T13460] do_sys_openat2+0x10f/0x1e0 [ 250.499791][T13460] ? __pfx_do_sys_openat2+0x10/0x10 [ 250.499842][T13460] __x64_sys_openat+0x12d/0x210 [ 250.499862][T13460] ? __pfx___x64_sys_openat+0x10/0x10 [ 250.499889][T13460] do_syscall_64+0x123/0x790 [ 250.499919][T13460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.499940][T13460] RIP: 0033:0x7f654bb5ed8e [ 250.499964][T13460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 250.499984][T13460] RSP: 002b:00007f654ca88ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 250.500005][T13460] RAX: ffffffffffffffda RBX: 00007f654ca896c0 RCX: 00007f654bb5ed8e [ 250.500018][T13460] RDX: 0000000000000002 RSI: 00007f654ca88f90 RDI: ffffffffffffff9c [ 250.500030][T13460] RBP: 00007f654bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 250.500041][T13460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.500053][T13460] R13: 00007f654be26038 R14: 00007f654be25fa0 R15: 00007ffeea81a038 [ 250.500078][T13460] [ 250.732975][ T5825] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 250.733772][ T25] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 250.802141][ T5732] Bluetooth: hci3: command tx timeout [ 251.120079][ T44] audit: type=1400 audit(1791996247.492:930): avc: denied { append } for pid=13464 comm="syz.6.2552" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 251.227263][ T44] audit: type=1400 audit(1791996247.602:931): avc: denied { write } for pid=13472 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.227937][ T44] audit: type=1400 audit(1791996247.602:932): avc: denied { ioctl } for pid=13472 comm="syz.5.2554" path="socket:[51058]" dev="sockfs" ino=51058 ioctlcmd=0x1500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.228443][ T44] audit: type=1400 audit(1791996247.602:933): avc: denied { accept } for pid=13472 comm="syz.5.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.233270][T13475] loop0: detected capacity change from 0 to 4096 [ 251.252223][ T5825] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 251.253471][ T25] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 251.254999][ T44] audit: type=1400 audit(1791996247.642:934): avc: denied { read } for pid=13472 comm="syz.5.2554" path="socket:[51058]" dev="sockfs" ino=51058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 251.273466][T13475] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 251.273489][T13475] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 251.273501][T13475] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 251.273559][T13475] loop0: [ 251.284753][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 251.284768][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 251.284775][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 251.284814][ T5142] loop0: [ 251.325703][T13479] FAULT_INJECTION: forcing a failure. [ 251.325703][T13479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.325787][T13479] CPU: 3 UID: 0 PID: 13479 Comm: syz.6.2556 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.325813][T13479] Tainted: [L]=SOFTLOCKUP [ 251.325819][T13479] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.325829][T13479] Call Trace: [ 251.325835][T13479] [ 251.325843][T13479] dump_stack_lvl+0x100/0x190 [ 251.325875][T13479] should_fail_ex.cold+0x5/0xa [ 251.325902][T13479] strncpy_from_user+0x3b/0x2d0 [ 251.325931][T13479] do_getname+0x78/0x390 [ 251.325951][T13479] do_sys_openat2+0xc7/0x1e0 [ 251.325992][T13479] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.326018][T13479] __x64_sys_openat+0x12d/0x210 [ 251.326036][T13479] ? __pfx___x64_sys_openat+0x10/0x10 [ 251.326053][T13479] ? ksys_write+0x1ac/0x250 [ 251.326081][T13479] do_syscall_64+0x123/0x790 [ 251.326109][T13479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.326127][T13479] RIP: 0033:0x7f654bb5ed8e [ 251.326144][T13479] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.326161][T13479] RSP: 002b:00007f654ca88ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.326180][T13479] RAX: ffffffffffffffda RBX: 00007f654ca896c0 RCX: 00007f654bb5ed8e [ 251.326189][T13479] RDX: 0000000000000002 RSI: 00007f654ca88f90 RDI: ffffffffffffff9c [ 251.326199][T13479] RBP: 00007f654ca89090 R08: 0000000000000000 R09: 0000000000000000 [ 251.326210][T13479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.326221][T13479] R13: 00007f654be26038 R14: 00007f654be25fa0 R15: 00007ffeea81a038 [ 251.326246][T13479] [ 251.506396][T13484] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2558'. [ 251.617532][ T44] audit: type=1400 audit(1791996247.992:935): avc: denied { accept } for pid=13489 comm="syz.6.2561" path="socket:[54920]" dev="sockfs" ino=54920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 251.665042][ C3] vcan0: j1939_tp_rxtimer: 0xffff888039b91400: rx timeout, send abort [ 251.675940][ T44] audit: type=1400 audit(1791996248.052:936): avc: denied { read } for pid=5124 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 251.675986][ T44] audit: type=1400 audit(1791996248.052:937): avc: denied { search } for pid=5124 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.676024][ T44] audit: type=1400 audit(1791996248.052:938): avc: denied { write search } for pid=5124 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.676151][ T44] audit: type=1400 audit(1791996248.052:939): avc: denied { add_name } for pid=5124 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.728097][T13496] overlayfs: failed lookup in lower (newroot/61, name='file1', err=-40): overlapping layers [ 251.732455][T13496] overlayfs: failed lookup in lower (newroot/61, name='bus', err=-40): overlapping layers [ 251.732554][T13495] overlayfs: failed lookup in lower (newroot/61, name='bus', err=-40): overlapping layers [ 251.739657][T13499] overlayfs: failed lookup in lower (newroot/61, name='bus', err=-40): overlapping layers [ 251.816461][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 251.816484][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 251.816494][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 251.816537][ T5142] loop0: [ 251.860297][T13505] FAULT_INJECTION: forcing a failure. [ 251.860297][T13505] name fail_futex, interval 1, probability 0, space 0, times 0 [ 251.860329][T13505] CPU: 2 UID: 0 PID: 13505 Comm: syz.6.2565 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.860354][T13505] Tainted: [L]=SOFTLOCKUP [ 251.860362][T13505] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.860373][T13505] Call Trace: [ 251.860379][T13505] [ 251.860387][T13505] dump_stack_lvl+0x100/0x190 [ 251.860420][T13505] should_fail_ex.cold+0x5/0xa [ 251.860447][T13505] get_futex_key+0x1d0/0x14f0 [ 251.860477][T13505] ? __pfx_get_futex_key+0x10/0x10 [ 251.860523][T13505] futex_wait_setup+0x91/0x540 [ 251.860554][T13505] __futex_wait+0x19f/0x300 [ 251.860579][T13505] ? __pfx___futex_wait+0x10/0x10 [ 251.860602][T13505] ? __pfx_try_to_wake_up+0x10/0x10 [ 251.860627][T13505] ? futex_hash+0x311/0x400 [ 251.860657][T13505] ? __pfx_futex_wake_mark+0x10/0x10 [ 251.860682][T13505] ? find_held_lock+0x2b/0x80 [ 251.860713][T13505] ? futex_wake+0x4ea/0x5e0 [ 251.860741][T13505] futex_wait+0xe6/0x370 [ 251.860764][T13505] ? __pfx_futex_wait+0x10/0x10 [ 251.860791][T13505] ? putname+0xb1/0x110 [ 251.860809][T13505] ? kmem_cache_free+0x127/0x6c0 [ 251.860837][T13505] do_futex+0x265/0x440 [ 251.860869][T13505] ? __pfx_do_futex+0x10/0x10 [ 251.860897][T13505] ? __seccomp_filter+0x896/0x1130 [ 251.860934][T13505] __x64_sys_futex+0x34f/0x4d0 [ 251.860969][T13505] ? __pfx___x64_sys_futex+0x10/0x10 [ 251.861009][T13505] do_syscall_64+0x123/0x790 [ 251.861040][T13505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.861060][T13505] RIP: 0033:0x7f654bb9e559 [ 251.861080][T13505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.861097][T13505] RSP: 002b:00007f654ca890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 251.861119][T13505] RAX: ffffffffffffffda RBX: 00007f654be25fa8 RCX: 00007f654bb9e559 [ 251.861136][T13505] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f654be25fa8 [ 251.861151][T13505] RBP: 00007f654be25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 251.861164][T13505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.861177][T13505] R13: 00007f654be26038 R14: 00007ffeea819f50 R15: 00007ffeea81a038 [ 251.861203][T13505] [ 251.946650][T13507] FAULT_INJECTION: forcing a failure. [ 251.946650][T13507] name failslab, interval 1, probability 0, space 0, times 0 [ 251.946680][T13507] CPU: 0 UID: 0 PID: 13507 Comm: syz.6.2566 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.946706][T13507] Tainted: [L]=SOFTLOCKUP [ 251.946713][T13507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.946723][T13507] Call Trace: [ 251.946730][T13507] [ 251.946740][T13507] dump_stack_lvl+0x100/0x190 [ 251.946772][T13507] should_fail_ex.cold+0x5/0xa [ 251.946797][T13507] should_failslab+0xc2/0x120 [ 251.946824][T13507] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 251.946850][T13507] ? proc_alloc_inode+0x25/0x200 [ 251.946889][T13507] ? __pfx_proc_alloc_inode+0x10/0x10 [ 251.946911][T13507] proc_alloc_inode+0x25/0x200 [ 251.946930][T13507] alloc_inode+0x68/0x250 [ 251.946952][T13507] new_inode+0x22/0x1c0 [ 251.946977][T13507] proc_pid_make_inode+0x22/0x160 [ 251.947000][T13507] proc_pident_instantiate+0x85/0x310 [ 251.947028][T13507] proc_pident_lookup+0x1e3/0x270 [ 251.947051][T13507] ? __pfx_proc_tid_base_lookup+0x10/0x10 [ 251.947073][T13507] lookup_open+0xa79/0x1990 [ 251.947105][T13507] path_openat+0xa2c/0x2440 [ 251.947135][T13507] ? __pfx_path_openat+0x10/0x10 [ 251.947167][T13507] do_file_open+0x20e/0x430 [ 251.947196][T13507] ? __pfx_do_file_open+0x10/0x10 [ 251.947230][T13507] ? __pfx_kfree_link+0x10/0x10 [ 251.947261][T13507] ? _raw_spin_unlock+0x28/0x50 [ 251.947284][T13507] ? alloc_fd+0x471/0x7a0 [ 251.947316][T13507] do_sys_openat2+0x10f/0x1e0 [ 251.947336][T13507] ? __pfx_do_sys_openat2+0x10/0x10 [ 251.947363][T13507] __x64_sys_openat+0x12d/0x210 [ 251.947382][T13507] ? __pfx___x64_sys_openat+0x10/0x10 [ 251.947411][T13507] do_syscall_64+0x123/0x790 [ 251.947440][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.947460][T13507] RIP: 0033:0x7f654bb5ed8e [ 251.947475][T13507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 251.947492][T13507] RSP: 002b:00007f654ca88f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 251.947509][T13507] RAX: ffffffffffffffda RBX: 00007f654ca896c0 RCX: 00007f654bb5ed8e [ 251.947523][T13507] RDX: 0000000000000002 RSI: 00007f654bc351aa RDI: ffffffffffffff9c [ 251.947534][T13507] RBP: 00007f654bc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 251.947545][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 251.947557][T13507] R13: 00007f654be26038 R14: 00007f654be25fa0 R15: 00007ffeea81a038 [ 251.947583][T13507] [ 252.048427][T13509] jffs2: notice: (13509) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 252.097120][T13514] FAULT_INJECTION: forcing a failure. [ 252.097120][T13514] name failslab, interval 1, probability 0, space 0, times 0 [ 252.097142][T13514] CPU: 0 UID: 0 PID: 13514 Comm: syz.5.2568 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.097158][T13514] Tainted: [L]=SOFTLOCKUP [ 252.097162][T13514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 252.097169][T13514] Call Trace: [ 252.097173][T13514] [ 252.097178][T13514] dump_stack_lvl+0x100/0x190 [ 252.097198][T13514] should_fail_ex.cold+0x5/0xa [ 252.097221][T13514] should_failslab+0xc2/0x120 [ 252.097239][T13514] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 252.097254][T13514] ? __d_alloc+0x35/0xa50 [ 252.097268][T13514] __d_alloc+0x35/0xa50 [ 252.097281][T13514] d_alloc_parallel+0x105/0x14c0 [ 252.097298][T13514] ? lock_acquire+0x1d1/0x380 [ 252.097311][T13514] ? __d_lookup+0x73/0x4a0 [ 252.097325][T13514] ? __pfx_d_alloc_parallel+0x10/0x10 [ 252.097339][T13514] ? __d_lookup+0x25c/0x4a0 [ 252.097355][T13514] ? __d_lookup+0x266/0x4a0 [ 252.097372][T13514] lookup_open+0x6bb/0x1990 [ 252.097390][T13514] path_openat+0xa2c/0x2440 [ 252.097408][T13514] ? __pfx_path_openat+0x10/0x10 [ 252.097429][T13514] do_file_open+0x20e/0x430 [ 252.097446][T13514] ? __pfx_do_file_open+0x10/0x10 [ 252.097467][T13514] ? __pfx_kfree_link+0x10/0x10 [ 252.097486][T13514] ? _raw_spin_unlock+0x28/0x50 [ 252.097500][T13514] ? alloc_fd+0x471/0x7a0 [ 252.097520][T13514] do_sys_openat2+0x10f/0x1e0 [ 252.097531][T13514] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.097547][T13514] __x64_sys_openat+0x12d/0x210 [ 252.097558][T13514] ? __pfx___x64_sys_openat+0x10/0x10 [ 252.097574][T13514] do_syscall_64+0x123/0x790 [ 252.097592][T13514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.097603][T13514] RIP: 0033:0x7f00ccf5ed8e [ 252.097613][T13514] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 252.097625][T13514] RSP: 002b:00007f00cde9aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.097655][T13514] RAX: ffffffffffffffda RBX: 00007f00cde9b6c0 RCX: 00007f00ccf5ed8e [ 252.097663][T13514] RDX: 0000000000000002 RSI: 00007f00cde9af90 RDI: ffffffffffffff9c [ 252.097671][T13514] RBP: 00007f00cd0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 252.097679][T13514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.097686][T13514] R13: 00007f00cd226038 R14: 00007f00cd225fa0 R15: 00007ffffbc3b6e8 [ 252.097702][T13514] [ 252.166977][ C3] vcan0: j1939_tp_rxtimer: 0xffff888039b91400: abort rx timeout. Force session deactivation [ 252.183660][T13448] ceph: No mds server is up or the cluster is laggy [ 252.185386][T13449] ceph: No mds server is up or the cluster is laggy [ 252.240322][T13449] Process accounting resumed [ 252.388716][T13528] netlink: 'syz.6.2575': attribute type 10 has an invalid length. [ 252.390162][T13528] bridge0: port 3(team0) entered disabled state [ 252.391358][T13528] team0 (unregistering): left allmulticast mode [ 252.391370][T13528] team_slave_0: left allmulticast mode [ 252.391379][T13528] team_slave_1: left allmulticast mode [ 252.391389][T13528] team0 (unregistering): left promiscuous mode [ 252.391397][T13528] team_slave_0: left promiscuous mode [ 252.391496][T13528] team_slave_1: left promiscuous mode [ 252.392690][T13528] bridge0: port 3(team0) entered disabled state [ 252.400920][T13528] team0 (unregistering): Port device team_slave_0 removed [ 252.407423][T13528] team0 (unregistering): Port device team_slave_1 removed [ 252.445656][T13530] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2576'. [ 252.558436][T13542] IPVS: set_ctl: invalid protocol: 98 10.1.1.2:20002 [ 253.016108][ T9] usb 6-1: USB disconnect, device number 16 [ 253.023839][ T9] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 253.025618][ T9] cypress_m8 6-1:142.251: device disconnected [ 253.101598][ T30] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 253.252017][ T30] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 253.252794][ T30] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 253.252807][ T30] usb 5-1: config 1 has no interface number 0 [ 253.256293][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.256306][ T30] usb 5-1: Product: syz [ 253.256314][ T30] usb 5-1: Manufacturer: syz [ 253.256321][ T30] usb 5-1: SerialNumber: syz [ 253.263364][ T30] usb 5-1: 3:0 : does not exist [ 253.263377][ T30] usb 5-1: 3:0 : does not exist [ 253.294296][T13567] loop0: detected capacity change from 0 to 4096 [ 253.332491][T13567] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 253.332518][T13567] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 253.332531][T13567] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 253.332578][T13567] loop0: [ 253.340021][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 253.340039][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 253.340049][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 253.340091][ T5142] loop0: [ 253.468461][ T30] usb 5-1: USB disconnect, device number 51 [ 253.493782][T13578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2592'. [ 253.522539][T13579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2591'. [ 253.529244][T13573] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2591'. [ 253.777544][T13600] netlink: 'syz.6.2600': attribute type 1 has an invalid length. [ 253.799503][T13600] bond1: option mode: invalid value (7) [ 253.801266][T13600] bond1 (unregistering): Released all slaves [ 253.801915][ T1355] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 253.905422][T13600] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2600'. [ 253.916675][T13600] netlink: 'syz.6.2600': attribute type 10 has an invalid length. [ 253.918896][T13600] dummy0: entered promiscuous mode [ 253.955525][ T1355] usb 10-1: unable to get BOS descriptor or descriptor too short [ 253.955563][ T1355] usb 10-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 253.956554][ T1355] usb 10-1: config 142 has an invalid interface number: 251 but max is 0 [ 253.956575][ T1355] usb 10-1: config 142 has no interface number 0 [ 253.956613][ T1355] usb 10-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 253.956636][ T1355] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 253.956655][ T1355] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 253.956674][ T1355] usb 10-1: config 142 interface 251 has no altsetting 0 [ 253.959523][ T1355] usb 10-1: string descriptor 0 read error: -22 [ 253.959624][ T1355] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.963598][T13583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.963684][T13583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.965316][ T1355] cypress_m8 10-1:142.251: HID->COM RS232 Adapter converter detected [ 253.972366][ T1355] usb 10-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 254.039699][T13606] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 254.100180][T13609] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 254.100197][T13609] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 254.101129][T13609] vhci_hcd vhci_hcd.0: Device attached [ 254.102698][T13610] vhci_hcd: cannot find a urb of seqnum 2147483648 max seqnum 0 [ 254.102940][ T5818] vhci_hcd vhci_hcd.0: stop threads [ 254.102954][ T5818] vhci_hcd vhci_hcd.0: release socket [ 254.102972][ T5818] vhci_hcd vhci_hcd.0: disconnect device [ 254.311898][ T5732] Bluetooth: hci3: command tx timeout [ 254.976793][ T5818] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.144256][ T5818] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.225667][ T5818] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.326983][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 255.328456][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 255.330686][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 255.344649][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 255.349211][ T5736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 255.377570][ T5818] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.515019][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.515079][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.563178][ T5818] bridge_slave_1: left allmulticast mode [ 255.563204][ T5818] bridge_slave_1: left promiscuous mode [ 255.566743][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.580641][ T5818] bridge_slave_0: left allmulticast mode [ 255.580664][ T5818] bridge_slave_0: left promiscuous mode [ 255.580839][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.744561][ T5818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.747302][ T5818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.749368][ T5818] bond0 (unregistering): Released all slaves [ 255.874492][T13661] FAULT_INJECTION: forcing a failure. [ 255.874492][T13661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.874524][T13661] CPU: 3 UID: 0 PID: 13661 Comm: syz.6.2620 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.874549][T13661] Tainted: [L]=SOFTLOCKUP [ 255.874555][T13661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.874564][T13661] Call Trace: [ 255.874569][T13661] [ 255.874576][T13661] dump_stack_lvl+0x100/0x190 [ 255.874615][T13661] should_fail_ex.cold+0x5/0xa [ 255.874636][T13661] _copy_to_user+0x32/0xd0 [ 255.874664][T13661] simple_read_from_buffer+0xcb/0x170 [ 255.874687][T13661] proc_fail_nth_read+0x1af/0x230 [ 255.874711][T13661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.874733][T13661] ? rw_verify_area+0xce/0x6d0 [ 255.874749][T13661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 255.874770][T13661] vfs_read+0x1e4/0xb40 [ 255.874788][T13661] ? lock_acquire+0x1d1/0x380 [ 255.874805][T13661] ? __fget_files+0x34/0x3d0 [ 255.874826][T13661] ? __pfx_vfs_read+0x10/0x10 [ 255.874842][T13661] ? find_held_lock+0x2b/0x80 [ 255.874864][T13661] ? __fget_files+0x215/0x3d0 [ 255.874889][T13661] ? __fget_files+0x21f/0x3d0 [ 255.874915][T13661] ksys_read+0x12a/0x250 [ 255.874932][T13661] ? __pfx_ksys_read+0x10/0x10 [ 255.874957][T13661] do_syscall_64+0x123/0x790 [ 255.874987][T13661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.875004][T13661] RIP: 0033:0x7f654bb5ed8e [ 255.875018][T13661] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 255.875032][T13661] RSP: 002b:00007f654ca88fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.875048][T13661] RAX: ffffffffffffffda RBX: 00007f654ca896c0 RCX: 00007f654bb5ed8e [ 255.875059][T13661] RDX: 000000000000000f RSI: 00007f654ca890a0 RDI: 0000000000000004 [ 255.875068][T13661] RBP: 00007f654ca89090 R08: 0000000000000000 R09: 0000000000000000 [ 255.875077][T13661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.875087][T13661] R13: 00007f654be26038 R14: 00007f654be25fa0 R15: 00007ffeea81a038 [ 255.875109][T13661] [ 255.941455][T13639] rxe_eth0 speed is unknown, defaulting to 1000 [ 255.963633][T13665] __nla_validate_parse: 1 callbacks suppressed [ 255.963644][T13665] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2622'. [ 256.021426][ T25] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 256.107145][T13639] virt_wifi0 speed is unknown, defaulting to 1000 [ 256.173678][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 256.178736][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 256.178762][ T25] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 256.179563][ T25] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 256.179581][ T25] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 256.179592][ T25] usb 6-1: config 14 has no interface number 0 [ 256.179601][ T25] usb 6-1: config 14 has no interface number 1 [ 256.179627][ T25] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 256.179640][ T25] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 256.179654][ T25] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 256.179668][ T25] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 256.179683][ T25] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 256.179697][ T25] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.179712][ T25] usb 6-1: config 14 interface 57 has no altsetting 0 [ 256.179721][ T25] usb 6-1: config 14 interface 228 has no altsetting 0 [ 256.181379][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.181393][ T25] usb 6-1: Product: syz [ 256.181401][ T25] usb 6-1: Manufacturer: syz [ 256.181409][ T25] usb 6-1: SerialNumber: syz [ 256.273799][ T5818] hsr_slave_0: left promiscuous mode [ 256.280782][ T5818] hsr_slave_1: left promiscuous mode [ 256.286734][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.286747][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.287349][ T5818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.287360][ T5818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.299675][ T5818] veth1_macvtap: left promiscuous mode [ 256.299697][ T5818] veth0_macvtap: left promiscuous mode [ 256.299759][ T5818] veth1_vlan: left promiscuous mode [ 256.299791][ T5818] veth0_vlan: left promiscuous mode [ 256.429199][ T25] legousbtower 6-1:14.57: interrupt endpoints not found [ 256.452064][ T5818] team0 (unregistering): Port device team_slave_1 removed [ 256.456613][ T5818] team0 (unregistering): Port device team_slave_0 removed [ 256.556649][ T30] usb 10-1: USB disconnect, device number 8 [ 256.566295][ T30] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 256.566615][ T30] cypress_m8 10-1:142.251: device disconnected [ 256.605973][T13684] netlink: 'syz.5.2627': attribute type 10 has an invalid length. [ 256.611353][T13684] bridge0: port 3(syz_tun) entered disabled state [ 256.611522][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.624785][T13684] bridge0: port 3(syz_tun) entered blocking state [ 256.624836][T13684] bridge0: port 3(syz_tun) entered forwarding state [ 256.625521][T13684] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.626357][T13684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.628101][T13684] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 256.640055][T13684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2627'. [ 256.640098][T13684] syz_tun: left allmulticast mode [ 256.640109][T13684] syz_tun: left promiscuous mode [ 256.640316][T13684] bridge0: port 3(syz_tun) entered disabled state [ 256.656726][T13684] bridge_slave_1: left allmulticast mode [ 256.656786][T13684] bridge_slave_1: left promiscuous mode [ 256.656886][T13684] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.674969][T13684] bridge_slave_0: left allmulticast mode [ 256.674986][T13684] bridge_slave_0: left promiscuous mode [ 256.675134][T13684] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.686083][T13684] bond0: (slave bridge0): Releasing backup interface [ 256.709329][T13690] Could not find key with description: [syz] [ 256.709339][T13690] process_request_key_err: No key [ 256.709344][T13690] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 256.709350][T13690] One or more global auth toks could not properly register; rc = [-2] [ 256.709366][T13690] Error validating options; rc = [-2] [ 256.763979][T13639] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.764115][T13639] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.764200][T13639] bridge_slave_0: entered allmulticast mode [ 256.765344][T13639] bridge_slave_0: entered promiscuous mode [ 256.772323][T13639] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.772450][T13639] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.772546][T13639] bridge_slave_1: entered allmulticast mode [ 256.773481][T13639] bridge_slave_1: entered promiscuous mode [ 256.789991][T13639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.794363][T13639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.809744][T13639] team0: Port device team_slave_0 added [ 256.811024][T13639] team0: Port device team_slave_1 added [ 256.825699][T13639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.825709][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.825722][T13639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.826373][T13639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.826381][T13639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.826394][T13639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.850249][ T25] legousbtower 6-1:14.228: get version request failed: -121 [ 256.850322][ T25] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -121 [ 256.868302][T13710] tmpfs: Bad value for 'mpol' [ 256.883085][T13639] hsr_slave_0: entered promiscuous mode [ 256.883513][T13639] hsr_slave_1: entered promiscuous mode [ 256.883816][T13639] debugfs: 'hsr0' already exists in 'hsr' [ 256.883828][T13639] Cannot create hsr debugfs directory [ 257.002849][T13639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 257.007346][T13639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 257.008438][T13639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 257.018826][T13639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 257.019347][T13639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 257.024040][T13639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 257.028097][T13639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 257.034529][T13639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 257.098703][T13639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.105408][T13639] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.108055][ T238] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.108148][ T238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.114197][ T238] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.114240][ T238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.324898][T13639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.361528][ T25] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 257.431806][ T5732] Bluetooth: hci2: command tx timeout [ 257.515289][T13639] veth0_vlan: entered promiscuous mode [ 257.517600][ T25] usb 10-1: unable to get BOS descriptor or descriptor too short [ 257.517640][ T25] usb 10-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 257.518608][ T25] usb 10-1: config 142 has an invalid interface number: 251 but max is 0 [ 257.518629][ T25] usb 10-1: config 142 has no interface number 0 [ 257.518658][ T25] usb 10-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 257.518681][ T25] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 257.518700][ T25] usb 10-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 257.518719][ T25] usb 10-1: config 142 interface 251 has no altsetting 0 [ 257.521574][ T25] usb 10-1: string descriptor 0 read error: -22 [ 257.521672][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.527078][T13639] veth1_vlan: entered promiscuous mode [ 257.527216][T13723] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.527359][T13723] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 257.528857][ T25] cypress_m8 10-1:142.251: HID->COM RS232 Adapter converter detected [ 257.536326][ T25] usb 10-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 257.556990][T13639] veth0_macvtap: entered promiscuous mode [ 257.559364][T13639] veth1_macvtap: entered promiscuous mode [ 257.568552][T13639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.572172][T13639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.599536][ T5801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.674146][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.674157][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.710057][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.710070][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.711376][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.711418][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.711465][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.714445][T13741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.719350][T13741] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 257.774504][T13743] loop0: detected capacity change from 0 to 4096 [ 257.777108][T13745] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.778044][T13745] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 257.805499][T13743] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 257.805516][T13743] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 257.805524][T13743] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 257.805550][T13743] loop0: [ 257.808262][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 257.808281][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 257.808293][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 257.808338][ T5142] loop0: [ 257.879201][ T44] kauditd_printk_skb: 22 callbacks suppressed [ 257.879220][ T44] audit: type=1400 audit(1791996254.252:962): avc: denied { write } for pid=13751 comm="syz.7.2638" name="nullb" dev="configfs" ino=4011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 257.908118][ T35] wacom 0003:056A:0042.0009: Unknown device_type for 'syz0'. Assuming pen. [ 257.910153][ T35] wacom 0003:056A:0042.0009: hidraw1: USB HID vffffff.ff Gamepad [syz0] on syz0 [ 257.923754][ T35] input: Wacom Intuos2 6x8 Pen as /devices/virtual/misc/uhid/0003:056A:0042.0009/input/input14 [ 257.928380][T13752] null_blk: my_zoned_dev: using native zone append [ 258.038244][T13752] null_blk: disk my_zoned_dev created [ 258.167685][ T5732] Bluetooth: hci2: unexpected cc 0x1407 length: 11 > 9 [ 258.315827][ T44] audit: type=1400 audit(1791996254.692:963): avc: denied { read } for pid=13763 comm="syz.6.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 258.647590][T13770] netlink: 'syz.6.2644': attribute type 16 has an invalid length. [ 258.647610][T13770] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.2644'. [ 258.784519][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 258.784534][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 258.784541][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 258.784567][ T5142] loop0: [ 258.870918][ T852] usb 6-1: USB disconnect, device number 17 [ 258.881329][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2647'. [ 259.147973][ T44] audit: type=1400 audit(1791996255.522:964): avc: denied { create } for pid=13790 comm="syz.6.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 259.174387][T13794] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2653'. [ 259.234353][T13801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.234467][T13801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.237343][T13801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.237366][T13801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.248758][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 259.248779][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 259.248791][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 259.248837][ T5142] loop0: [ 259.323220][T13816] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2660'. [ 259.564581][T13832] overlayfs: failed lookup in lower (newroot/11, name='file1', err=-40): overlapping layers [ 259.565036][T13832] overlayfs: failed lookup in lower (newroot/11, name='bus', err=-40): overlapping layers [ 259.587930][ T44] audit: type=1800 audit(1791996255.962:965): pid=13832 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.2666" name="cpuset.effective_cpus" dev="overlay" ino=77 res=0 errno=0 [ 259.603417][ T44] audit: type=1326 audit(1791996255.982:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13825 comm="syz.1.2664" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcdd99e559 code=0x0 [ 259.606533][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 259.606555][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 259.606565][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 259.606611][ T5142] loop0: [ 260.135405][ T35] usb 10-1: USB disconnect, device number 9 [ 260.153618][ T35] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 260.154190][ T35] cypress_m8 10-1:142.251: device disconnected [ 260.231277][ T5732] Bluetooth: hci2: command tx timeout [ 260.360420][T13878] /dev/sr0: Can't open blockdev [ 260.372127][T13882] jffs2: notice: (13882) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 260.375273][ T44] audit: type=1400 audit(1791996256.752:967): avc: denied { write } for pid=13880 comm="syz.1.2675" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.393841][ T44] audit: type=1400 audit(1791996256.772:968): avc: denied { write } for pid=13880 comm="syz.1.2675" name="mnt" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 260.393957][ T44] audit: type=1400 audit(1791996256.772:969): avc: denied { setattr } for pid=13880 comm="syz.1.2675" name="mnt" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 260.394113][T13882] jffs2: warning: (13882) jffs2_sum_write_data: Not enough space for summary, padsize = -6 [ 260.426530][ T44] audit: type=1400 audit(1791996256.802:970): avc: denied { write } for pid=13880 comm="syz.1.2675" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.534705][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 260.534721][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 260.534728][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 260.534753][ T5142] loop0: [ 260.756166][T13913] FAULT_INJECTION: forcing a failure. [ 260.756166][T13913] name failslab, interval 1, probability 0, space 0, times 0 [ 260.756188][T13913] CPU: 0 UID: 0 PID: 13913 Comm: syz.7.2683 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.756203][T13913] Tainted: [L]=SOFTLOCKUP [ 260.756208][T13913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.756214][T13913] Call Trace: [ 260.756218][T13913] [ 260.756223][T13913] dump_stack_lvl+0x100/0x190 [ 260.756243][T13913] should_fail_ex.cold+0x5/0xa [ 260.756259][T13913] should_failslab+0xc2/0x120 [ 260.756276][T13913] kmem_cache_alloc_noprof+0x92/0x6a0 [ 260.756290][T13913] ? __pfx_map_id_range_down+0x10/0x10 [ 260.756304][T13913] ? security_inode_alloc+0x3b/0x2c0 [ 260.756321][T13913] security_inode_alloc+0x3b/0x2c0 [ 260.756336][T13913] inode_init_always_gfp+0xc6f/0xfb0 [ 260.756355][T13913] alloc_inode+0x8e/0x250 [ 260.756368][T13913] new_inode+0x22/0x1c0 [ 260.756382][T13913] proc_pid_make_inode+0x22/0x160 [ 260.756394][T13913] proc_pident_instantiate+0x85/0x310 [ 260.756408][T13913] proc_pident_lookup+0x1e3/0x270 [ 260.756422][T13913] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 260.756435][T13913] lookup_open+0xa79/0x1990 [ 260.756454][T13913] path_openat+0xa2c/0x2440 [ 260.756472][T13913] ? __pfx_path_openat+0x10/0x10 [ 260.756492][T13913] do_file_open+0x20e/0x430 [ 260.756509][T13913] ? __pfx_do_file_open+0x10/0x10 [ 260.756530][T13913] ? __pfx_kfree_link+0x10/0x10 [ 260.756548][T13913] ? _raw_spin_unlock+0x28/0x50 [ 260.756562][T13913] ? alloc_fd+0x471/0x7a0 [ 260.756585][T13913] do_sys_openat2+0x10f/0x1e0 [ 260.756604][T13913] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.756621][T13913] __x64_sys_openat+0x12d/0x210 [ 260.756633][T13913] ? __pfx___x64_sys_openat+0x10/0x10 [ 260.756651][T13913] do_syscall_64+0x123/0x790 [ 260.756670][T13913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.756683][T13913] RIP: 0033:0x7f9268d5ed8e [ 260.756694][T13913] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 260.756706][T13913] RSP: 002b:00007f9269c09ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.756717][T13913] RAX: ffffffffffffffda RBX: 00007f9269c0a6c0 RCX: 00007f9268d5ed8e [ 260.756725][T13913] RDX: 0000000000000002 RSI: 00007f9269c09f90 RDI: ffffffffffffff9c [ 260.756732][T13913] RBP: 00007f9268e358b0 R08: 0000000000000000 R09: 0000000000000000 [ 260.756738][T13913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.756745][T13913] R13: 00007f9269026038 R14: 00007f9269025fa0 R15: 00007ffc4e62b428 [ 260.756760][T13913] [ 260.879674][ T5732] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 260.946957][T13935] netlink: 'syz.6.2690': attribute type 11 has an invalid length. [ 260.960327][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 260.960342][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 260.960348][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 260.960374][ T5142] loop0: [ 260.973482][ T7723] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 261.105543][T13942] netlink: 'syz.6.2692': attribute type 2 has an invalid length. [ 261.105598][T13942] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2692'. [ 261.127512][ T7723] usb 6-1: unable to get BOS descriptor or descriptor too short [ 261.127554][ T7723] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 261.128588][ T7723] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 261.128610][ T7723] usb 6-1: config 142 has no interface number 0 [ 261.128989][ T7723] usb 6-1: config 142 interface 251 altsetting 11 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 261.129015][ T7723] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x8F is Bulk; changing to Interrupt [ 261.129042][ T7723] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 261.129063][ T7723] usb 6-1: config 142 interface 251 has no altsetting 0 [ 261.160912][ T7723] usb 6-1: string descriptor 0 read error: -22 [ 261.161127][ T7723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.174430][T13910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 261.174573][T13910] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 261.176058][ T7723] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 261.178782][ T7723] usb 6-1: HID->COM RS232 Adapter converter now attached to ttyUSB0 [ 261.238529][ T44] audit: type=1400 audit(1791996257.612:971): avc: denied { create } for pid=13951 comm="syz.6.2695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 261.252137][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2695'. [ 261.252163][T13952] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2695'. [ 261.414000][T13954] cgroup: fork rejected by pids controller in /syz6 [ 261.536151][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 261.536174][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 261.536184][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 261.536233][ T5142] loop0: [ 261.669481][T13968] sctp: [Deprecated]: syz.5.2701 (pid 13968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.669481][T13968] Use struct sctp_sack_info instead [ 261.827676][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.925677][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.010614][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.016693][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.022467][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.028119][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.029040][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 262.086139][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.162528][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.183259][T13990] batman_adv: batadv0: Adding interface: syzkaller0 [ 262.183274][T13990] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.183299][T13990] batman_adv: batadv0: Interface activated: syzkaller0 [ 262.312597][ T5732] Bluetooth: hci2: command tx timeout [ 262.337044][T13993] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2708'. [ 262.362292][T13977] rxe_eth0 speed is unknown, defaulting to 1000 [ 262.457845][ T12] bridge_slave_1: left allmulticast mode [ 262.457869][ T12] bridge_slave_1: left promiscuous mode [ 262.458080][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.462857][ T12] bridge_slave_0: left allmulticast mode [ 262.462879][ T12] bridge_slave_0: left promiscuous mode [ 262.463039][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.715850][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.717452][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.719707][ T12] bond0 (unregistering): Released all slaves [ 262.729246][T13988] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 262.745679][T13988] batman_adv: batadv0: Removing interface: syzkaller0 [ 262.750815][T13977] virt_wifi0 speed is unknown, defaulting to 1000 [ 262.957333][ T44] kauditd_printk_skb: 6 callbacks suppressed [ 262.957350][ T44] audit: type=1400 audit(1791996259.332:978): avc: denied { cmd } for pid=14006 comm="iou-wrk-14007" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 263.194546][ T12] hsr_slave_0: left promiscuous mode [ 263.195013][ T12] hsr_slave_1: left promiscuous mode [ 263.199169][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.199182][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.220851][ T12] veth1_macvtap: left promiscuous mode [ 263.220885][ T12] veth0_macvtap: left promiscuous mode [ 263.222062][ T12] veth1_vlan: left promiscuous mode [ 263.222119][ T12] veth0_vlan: left promiscuous mode [ 263.445649][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2713'. [ 263.489730][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.489974][T13977] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.490064][T13977] bridge_slave_0: entered allmulticast mode [ 263.491382][T13977] bridge_slave_0: entered promiscuous mode [ 263.494424][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.494470][T13977] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.494526][T13977] bridge_slave_1: entered allmulticast mode [ 263.496553][T13977] bridge_slave_1: entered promiscuous mode [ 263.513574][T13977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.519820][T13977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.544563][T13977] team0: Port device team_slave_0 added [ 263.545693][T13977] team0: Port device team_slave_1 added [ 263.554359][T14024] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2714'. [ 263.563216][T13977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.563226][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.563239][T13977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.563840][T13977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.563848][T13977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.563861][T13977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.613838][T13977] hsr_slave_0: entered promiscuous mode [ 263.614287][T13977] hsr_slave_1: entered promiscuous mode [ 263.614583][T13977] debugfs: 'hsr0' already exists in 'hsr' [ 263.614594][T13977] Cannot create hsr debugfs directory [ 263.734913][ T5142] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 263.734936][ T5142] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 263.734946][ T5142] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 263.734983][ T5142] loop0: [ 263.747456][ T30] usb 6-1: USB disconnect, device number 18 [ 263.749784][ T30] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0 [ 263.750190][ T30] cypress_m8 6-1:142.251: device disconnected [ 263.767233][ T5736] Bluetooth: hci4: unexpected event for opcode 0x203c [ 263.831841][T14031] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2717'. [ 264.071464][ T5736] Bluetooth: hci1: command tx timeout [ 264.103771][T13977] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 264.106070][T13977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 264.106584][T13977] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 264.108310][T13977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 264.108643][T13977] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 264.111548][T13977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 264.112173][T13977] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 264.122412][T13977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 264.144941][T13977] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.145034][T13977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.145287][T13977] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.145380][T13977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.166738][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.167150][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.210031][T13977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.223320][T13977] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.227701][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.227746][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.236532][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.236579][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.461853][T14057] FAULT_INJECTION: forcing a failure. [ 264.461853][T14057] name failslab, interval 1, probability 0, space 0, times 0 [ 264.461876][T14057] CPU: 1 UID: 0 PID: 14057 Comm: syz.5.2723 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.461892][T14057] Tainted: [L]=SOFTLOCKUP [ 264.461917][T14057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.461925][T14057] Call Trace: [ 264.461930][T14057] [ 264.461935][T14057] dump_stack_lvl+0x100/0x190 [ 264.461957][T14057] should_fail_ex.cold+0x5/0xa [ 264.461973][T14057] should_failslab+0xc2/0x120 [ 264.461991][T14057] kmem_cache_alloc_noprof+0x92/0x6a0 [ 264.462005][T14057] ? __pfx_map_id_range_down+0x10/0x10 [ 264.462024][T14057] ? security_inode_alloc+0x3b/0x2c0 [ 264.462042][T14057] security_inode_alloc+0x3b/0x2c0 [ 264.462057][T14057] inode_init_always_gfp+0xc6f/0xfb0 [ 264.462077][T14057] alloc_inode+0x8e/0x250 [ 264.462090][T14057] new_inode+0x22/0x1c0 [ 264.462103][T14057] proc_pid_make_inode+0x22/0x160 [ 264.462116][T14057] proc_pident_instantiate+0x85/0x310 [ 264.462130][T14057] proc_pident_lookup+0x1e3/0x270 [ 264.462143][T14057] ? __pfx_proc_tgid_base_lookup+0x10/0x10 [ 264.462156][T14057] lookup_open+0xa79/0x1990 [ 264.462174][T14057] path_openat+0xa2c/0x2440 [ 264.462192][T14057] ? __pfx_path_openat+0x10/0x10 [ 264.462212][T14057] do_file_open+0x20e/0x430 [ 264.462230][T14057] ? __pfx_do_file_open+0x10/0x10 [ 264.462251][T14057] ? __pfx_kfree_link+0x10/0x10 [ 264.462269][T14057] ? _raw_spin_unlock+0x28/0x50 [ 264.462283][T14057] ? alloc_fd+0x471/0x7a0 [ 264.462303][T14057] do_sys_openat2+0x10f/0x1e0 [ 264.462314][T14057] ? __pfx_do_sys_openat2+0x10/0x10 [ 264.462329][T14057] __x64_sys_openat+0x12d/0x210 [ 264.462340][T14057] ? __pfx___x64_sys_openat+0x10/0x10 [ 264.462356][T14057] do_syscall_64+0x123/0x790 [ 264.462373][T14057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.462385][T14057] RIP: 0033:0x7f00ccf5ed8e [ 264.462395][T14057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 264.462405][T14057] RSP: 002b:00007f00cde9aec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 264.462417][T14057] RAX: ffffffffffffffda RBX: 00007f00cde9b6c0 RCX: 00007f00ccf5ed8e [ 264.462424][T14057] RDX: 0000000000000002 RSI: 00007f00cde9af90 RDI: ffffffffffffff9c [ 264.462431][T14057] RBP: 00007f00cd0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 264.462438][T14057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.462444][T14057] R13: 00007f00cd226038 R14: 00007f00cd225fa0 R15: 00007ffffbc3b6e8 [ 264.462459][T14057] [ 264.590414][T13977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.777483][T13977] veth0_vlan: entered promiscuous mode [ 264.793815][T13977] veth1_vlan: entered promiscuous mode [ 264.826164][T13977] veth0_macvtap: entered promiscuous mode [ 264.830573][T13977] veth1_macvtap: entered promiscuous mode [ 264.843911][T13977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.849953][T13977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.886162][ T5818] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.886202][ T5818] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.886232][ T5818] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.886261][ T5818] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.916214][T14081] FAULT_INJECTION: forcing a failure. [ 264.916214][T14081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.916244][T14081] CPU: 2 UID: 0 PID: 14081 Comm: syz.5.2725 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.916267][T14081] Tainted: [L]=SOFTLOCKUP [ 264.916273][T14081] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.916284][T14081] Call Trace: [ 264.916290][T14081] [ 264.916297][T14081] dump_stack_lvl+0x100/0x190 [ 264.916326][T14081] should_fail_ex.cold+0x5/0xa [ 264.916350][T14081] _copy_from_user+0x2e/0xd0 [ 264.916374][T14081] copy_msghdr_from_user+0x9f/0x4c0 [ 264.916413][T14081] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 264.916441][T14081] ? lock_acquire+0x1d1/0x380 [ 264.916461][T14081] ? get_pid_task+0x2a/0x250 [ 264.916485][T14081] ___sys_sendmsg+0x106/0x1e0 [ 264.916509][T14081] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.916530][T14081] ? get_pid_task+0x106/0x250 [ 264.916561][T14081] ? find_held_lock+0x2b/0x80 [ 264.916603][T14081] __sys_sendmsg+0x160/0x210 [ 264.916621][T14081] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.916651][T14081] do_syscall_64+0x123/0x790 [ 264.916678][T14081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.916696][T14081] RIP: 0033:0x7f00ccf9e559 [ 264.916710][T14081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.916726][T14081] RSP: 002b:00007f00cde7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.916743][T14081] RAX: ffffffffffffffda RBX: 00007f00cd226090 RCX: 00007f00ccf9e559 [ 264.916755][T14081] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 264.916765][T14081] RBP: 00007f00cde7a090 R08: 0000000000000000 R09: 0000000000000000 [ 264.916776][T14081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.916786][T14081] R13: 00007f00cd226128 R14: 00007f00cd226090 R15: 00007ffffbc3b6e8 [ 264.916810][T14081] [ 264.958615][T14083] i2c i2c-0: new_device: Can't parse I2C address [ 265.030114][ T108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.030134][ T108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.048226][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.048244][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.096613][ T44] audit: type=1400 audit(1791996261.473:979): avc: denied { getopt } for pid=14086 comm="syz.1.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 265.111062][ T5736] Bluetooth: hci3: command 0x1003 tx timeout [ 265.112841][ T5732] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 265.139804][ T44] audit: type=1400 audit(1791996261.513:980): avc: denied { write } for pid=14088 comm="syz.6.2703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.217083][T14097] bond0: option ad_select: unable to set because the bond device is up [ 265.223256][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2703'. [ 266.027401][T14126] FAULT_INJECTION: forcing a failure. [ 266.027401][T14126] name failslab, interval 1, probability 0, space 0, times 0 [ 266.027433][T14126] CPU: 3 UID: 0 PID: 14126 Comm: syz.7.2741 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.027457][T14126] Tainted: [L]=SOFTLOCKUP [ 266.027463][T14126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.027473][T14126] Call Trace: [ 266.027480][T14126] [ 266.027488][T14126] dump_stack_lvl+0x100/0x190 [ 266.027527][T14126] should_fail_ex.cold+0x5/0xa [ 266.027551][T14126] should_failslab+0xc2/0x120 [ 266.027576][T14126] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 266.027599][T14126] ? __alloc_skb+0x5b7/0x710 [ 266.027624][T14126] ? __alloc_skb+0x140/0x710 [ 266.027652][T14126] __alloc_skb+0x140/0x710 [ 266.027675][T14126] ? __alloc_skb+0x5b7/0x710 [ 266.027699][T14126] ? __pfx___alloc_skb+0x10/0x10 [ 266.027731][T14126] netlink_alloc_large_skb+0x69/0x150 [ 266.027758][T14126] netlink_sendmsg+0x680/0xda0 [ 266.027787][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.027813][T14126] ? selinux_socket_sendmsg+0x198/0x2f0 [ 266.027842][T14126] ____sys_sendmsg+0xa4d/0xbe0 [ 266.027880][T14126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.027909][T14126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.027936][T14126] ? lock_acquire+0x1d1/0x380 [ 266.027955][T14126] ? get_pid_task+0x2a/0x250 [ 266.027980][T14126] ___sys_sendmsg+0x190/0x1e0 [ 266.028004][T14126] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.028026][T14126] ? get_pid_task+0x106/0x250 [ 266.028057][T14126] ? find_held_lock+0x2b/0x80 [ 266.028097][T14126] __sys_sendmsg+0x160/0x210 [ 266.028115][T14126] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.028145][T14126] do_syscall_64+0x123/0x790 [ 266.028172][T14126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.028190][T14126] RIP: 0033:0x7f9268d9e559 [ 266.028205][T14126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.028221][T14126] RSP: 002b:00007f9269c0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.028239][T14126] RAX: ffffffffffffffda RBX: 00007f9269025fa0 RCX: 00007f9268d9e559 [ 266.028251][T14126] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 266.028262][T14126] RBP: 00007f9269c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 266.028272][T14126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.028282][T14126] R13: 00007f9269026038 R14: 00007f9269025fa0 R15: 00007ffc4e62b428 [ 266.028306][T14126] [ 266.118768][T14132] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2743'. [ 266.160855][ T5732] Bluetooth: hci1: command tx timeout [ 266.334670][T14115] syz.1.2738 (14115): drop_caches: 1 [ 266.512175][ T44] audit: type=1400 audit(1791996262.893:981): avc: denied { ioctl } for pid=14135 comm="syz.1.2744" path="socket:[54235]" dev="sockfs" ino=54235 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 266.820849][T14147] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2749'. [ 266.845312][T14149] snd_dummy snd_dummy.0: control 0:0:0:syz0:16384 is already present [ 266.925188][ T44] audit: type=1400 audit(1791996263.303:982): avc: denied { create } for pid=14160 comm="syz.5.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 267.014457][T14161] rxe_eth0 speed is unknown, defaulting to 1000 [ 267.157809][T14161] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.228047][T14186] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2763'. [ 267.396796][ T5732] Bluetooth: hci4: unexpected event 0x3e length: 1004 > 255 [ 267.396812][ T5732] Bluetooth: hci4: unexpected subevent 0x0d length: 1003 > 260 [ 267.396825][ T5732] Bluetooth: hci4: adv larger than maximum supported [ 267.396832][ T5732] Bluetooth: hci4: adv larger than maximum supported [ 267.560754][ T7723] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 267.722873][ T7723] usb 6-1: unable to get BOS descriptor or descriptor too short [ 267.723447][ T7723] usb 6-1: not running at top speed; connect to a high speed hub [ 267.723470][ T7723] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 267.724676][ T7723] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 267.724696][ T7723] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 267.724714][ T7723] usb 6-1: config 14 has no interface number 0 [ 267.724728][ T7723] usb 6-1: config 14 has no interface number 1 [ 267.724764][ T7723] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 267.724778][ T7723] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 267.724792][ T7723] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 267.724806][ T7723] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.724819][ T7723] usb 6-1: config 14 interface 57 has no altsetting 0 [ 267.724829][ T7723] usb 6-1: config 14 interface 228 has no altsetting 0 [ 267.726820][ T7723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.726840][ T7723] usb 6-1: Product: syz [ 267.726853][ T7723] usb 6-1: Manufacturer: syz [ 267.726867][ T7723] usb 6-1: SerialNumber: syz [ 268.136509][ T7723] legousbtower 6-1:14.57: interrupt endpoints not found [ 268.231973][ T5732] Bluetooth: hci1: command tx timeout [ 268.452447][T14211] FAULT_INJECTION: forcing a failure. [ 268.452447][T14211] name failslab, interval 1, probability 0, space 0, times 0 [ 268.452469][T14211] CPU: 1 UID: 0 PID: 14211 Comm: syz.7.2770 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.452485][T14211] Tainted: [L]=SOFTLOCKUP [ 268.452489][T14211] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.452496][T14211] Call Trace: [ 268.452500][T14211] [ 268.452505][T14211] dump_stack_lvl+0x100/0x190 [ 268.452540][T14211] should_fail_ex.cold+0x5/0xa [ 268.452554][T14211] ? __netlink_lookup+0x652/0x900 [ 268.452572][T14211] should_failslab+0xc2/0x120 [ 268.452595][T14211] kmem_cache_alloc_noprof+0x92/0x6a0 [ 268.452610][T14211] ? skb_clone+0x190/0x400 [ 268.452624][T14211] skb_clone+0x190/0x400 [ 268.452636][T14211] netlink_deliver_tap+0xaed/0xcc0 [ 268.452656][T14211] netlink_unicast+0x62b/0x850 [ 268.452675][T14211] ? __pfx_netlink_unicast+0x10/0x10 [ 268.452696][T14211] netlink_sendmsg+0x8b0/0xda0 [ 268.452716][T14211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.452735][T14211] ? selinux_socket_sendmsg+0x198/0x2f0 [ 268.452753][T14211] ____sys_sendmsg+0xa4d/0xbe0 [ 268.452766][T14211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.452784][T14211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.452802][T14211] ? lock_acquire+0x1d1/0x380 [ 268.452815][T14211] ? get_pid_task+0x2a/0x250 [ 268.452832][T14211] ___sys_sendmsg+0x190/0x1e0 [ 268.452847][T14211] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.452862][T14211] ? get_pid_task+0x106/0x250 [ 268.452883][T14211] ? find_held_lock+0x2b/0x80 [ 268.452908][T14211] __sys_sendmsg+0x160/0x210 [ 268.452920][T14211] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.452939][T14211] do_syscall_64+0x123/0x790 [ 268.452957][T14211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.452970][T14211] RIP: 0033:0x7f9268d9e559 [ 268.452980][T14211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.452990][T14211] RSP: 002b:00007f9269c0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.453002][T14211] RAX: ffffffffffffffda RBX: 00007f9269025fa0 RCX: 00007f9268d9e559 [ 268.453009][T14211] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 268.453016][T14211] RBP: 00007f9269c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 268.453023][T14211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.453029][T14211] R13: 00007f9269026038 R14: 00007f9269025fa0 R15: 00007ffc4e62b428 [ 268.453044][T14211] [ 268.536795][ T7723] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 268.538974][ T7723] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 268.781209][ T5886] usb 12-1: new low-speed USB device number 2 using dummy_hcd [ 268.805939][ T44] audit: type=1400 audit(1791996265.183:983): avc: denied { write } for pid=14218 comm="syz.5.2773" name="functions" dev="configfs" ino=26339 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.815357][T14221] =========================== ** replaying previous printk message ** [ 268.815357][T14221] ================================================================== [ 268.815372][T14221] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 268.815403][T14221] Read of size 128 at addr ffffffff9ccca6e0 by task syz.5.2773/14221 [ 268.815421][T14221] [ 268.815433][T14221] CPU: 1 UID: 0 PID: 14221 Comm: syz.5.2773 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.815460][T14221] Tainted: [L]=SOFTLOCKUP [ 268.815469][T14221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 268.815481][T14221] Call Trace: [ 268.815488][T14221] [ 268.815497][T14221] dump_stack_lvl+0x100/0x190 [ 268.815528][T14221] print_report+0x13d/0x4b0 [ 268.815558][T14221] ? __virt_addr_valid+0x239/0x430 [ 268.815591][T14221] ? usb_copy_descriptors+0x18d/0x320 [ 268.815614][T14221] kasan_report+0xdf/0x1c0 [ 268.815646][T14221] ? usb_copy_descriptors+0x18d/0x320 [ 268.815671][T14221] kasan_check_range+0x10f/0x1e0 [ 268.815715][T14221] __asan_memcpy+0x23/0x60 [ 268.815738][T14221] usb_copy_descriptors+0x18d/0x320 [ 268.815763][T14221] usb_assign_descriptors+0xd2/0x470 [ 268.815788][T14221] f_audio_bind+0x243a/0x3950 [ 268.815817][T14221] ? __pfx_f_audio_bind+0x10/0x10 [ 268.815843][T14221] usb_add_function+0x219/0x890 [ 268.815866][T14221] ? composite_dev_prepare+0x211/0x420 [ 268.815892][T14221] configfs_composite_bind+0xd83/0x1960 [ 268.815917][T14221] ? kernfs_create_link+0x1bd/0x240 [ 268.815947][T14221] gadget_bind_driver+0x28c/0xbf0 [ 268.815976][T14221] ? __pfx_gadget_bind_driver+0x10/0x10 [ 268.816005][T14221] really_probe+0x241/0xa60 [ 268.816036][T14221] __driver_probe_device+0x210/0x460 [ 268.816065][T14221] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 268.816091][T14221] driver_probe_device+0x4a/0x140 [ 268.816122][T14221] __driver_attach+0x21f/0x5b0 [ 268.816153][T14221] ? __pfx___driver_attach+0x10/0x10 [ 268.816183][T14221] bus_for_each_dev+0x13e/0x1d0 [ 268.816208][T14221] ? __pfx_bus_for_each_dev+0x10/0x10 [ 268.816233][T14221] ? bus_add_driver+0x2b5/0x5b0 [ 268.816262][T14221] bus_add_driver+0x305/0x5b0 [ 268.816289][T14221] driver_register+0x1e2/0x360 [ 268.816310][T14221] usb_gadget_register_driver_owner+0x132/0x210 [ 268.816340][T14221] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 268.816362][T14221] configfs_write_iter+0x302/0x4e0 [ 268.816386][T14221] vfs_write+0x6af/0x1050 [ 268.816410][T14221] ? __pfx_configfs_write_iter+0x10/0x10 [ 268.816434][T14221] ? __pfx_vfs_write+0x10/0x10 [ 268.816456][T14221] ? find_held_lock+0x2b/0x80 [ 268.816491][T14221] ksys_write+0x12a/0x250 [ 268.816515][T14221] ? __pfx_ksys_write+0x10/0x10 [ 268.816542][T14221] do_syscall_64+0x123/0x790 [ 268.816569][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.816596][T14221] RIP: 0033:0x7f00ccf9e559 [ 268.816613][T14221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.816633][T14221] RSP: 002b:00007f00cde7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 268.816653][T14221] RAX: ffffffffffffffda RBX: 00007f00cd226090 RCX: 00007f00ccf9e559 [ 268.816667][T14221] RDX: 000000000000000c RSI: 00002000000006c0 RDI: 0000000000000006 [ 268.816680][T14221] RBP: 00007f00cd0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 268.816694][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.816707][T14221] R13: 00007f00cd226128 R14: 00007f00cd226090 R15: 00007ffffbc3b6e8 [ 268.816729][T14221] [ 268.816738][T14221] [ 268.816741][T14221] The buggy address belongs to the variable: [ 268.816747][T14221] ac_header_desc+0x0/0x40 [ 268.816771][T14221] [ 268.816775][T14221] The buggy address belongs to the physical page: [ 268.816783][T14221] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1ccca [ 268.816800][T14221] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 268.816828][T14221] raw: 00fff00000002000 ffffea0000733288 ffffea0000733288 0000000000000000 [ 268.816846][T14221] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 268.816856][T14221] page dumped because: kasan: bad access detected [ 268.816865][T14221] page_owner info is not present (never set?) [ 268.816871][T14221] [ 268.816876][T14221] Memory state around the buggy address: [ 268.816886][T14221] ffffffff9ccca580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 268.816900][T14221] ffffffff9ccca600: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 268.816915][T14221] >ffffffff9ccca680: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 268.816926][T14221] ^ [ 268.816938][T14221] ffffffff9ccca700: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 268.816953][T14221] ffffffff9ccca780: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 268.816964][T14221] ================================================================== [ 268.820817][T14221] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 268.992657][T14221] CPU: 1 UID: 0 PID: 14221 Comm: syz.5.2773 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.997229][T14221] Tainted: [L]=SOFTLOCKUP [ 268.999132][T14221] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.003376][T14221] Call Trace: [ 269.004497][T14221] [ 269.005485][T14221] dump_stack_lvl+0x100/0x190 [ 269.007106][T14221] vpanic+0x553/0x970 [ 269.008500][T14221] ? __pfx_vpanic+0x10/0x10 [ 269.010104][T14221] ? usb_copy_descriptors+0x18d/0x320 [ 269.012294][T14221] panic+0xd1/0xe0 [ 269.013930][T14221] ? __pfx_panic+0x10/0x10 [ 269.015744][T14221] ? usb_copy_descriptors+0x18d/0x320 [ 269.017946][T14221] ? preempt_schedule_common+0x3c/0xb0 [ 269.020015][T14221] check_panic_on_warn.cold+0x19/0x34 [ 269.021794][T14221] end_report.part.0+0x3a/0x90 [ 269.023379][T14221] kasan_report.cold+0xe/0x18 [ 269.024945][T14221] ? usb_copy_descriptors+0x18d/0x320 [ 269.026721][T14221] kasan_check_range+0x10f/0x1e0 [ 269.028426][T14221] __asan_memcpy+0x23/0x60 [ 269.030053][T14221] usb_copy_descriptors+0x18d/0x320 [ 269.031777][T14221] usb_assign_descriptors+0xd2/0x470 [ 269.033521][T14221] f_audio_bind+0x243a/0x3950 [ 269.035071][T14221] ? __pfx_f_audio_bind+0x10/0x10 [ 269.036729][T14221] usb_add_function+0x219/0x890 [ 269.038425][T14221] ? composite_dev_prepare+0x211/0x420 [ 269.040745][T14221] configfs_composite_bind+0xd83/0x1960 [ 269.043041][T14221] ? kernfs_create_link+0x1bd/0x240 [ 269.045066][T14221] gadget_bind_driver+0x28c/0xbf0 [ 269.046789][T14221] ? __pfx_gadget_bind_driver+0x10/0x10 [ 269.048608][T14221] really_probe+0x241/0xa60 [ 269.050153][T14221] __driver_probe_device+0x210/0x460 [ 269.051862][T14221] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 269.053767][T14221] driver_probe_device+0x4a/0x140 [ 269.055450][T14221] __driver_attach+0x21f/0x5b0 [ 269.057080][T14221] ? __pfx___driver_attach+0x10/0x10 [ 269.058846][T14221] bus_for_each_dev+0x13e/0x1d0 [ 269.060446][T14221] ? __pfx_bus_for_each_dev+0x10/0x10 [ 269.062218][T14221] ? bus_add_driver+0x2b5/0x5b0 [ 269.063805][T14221] bus_add_driver+0x305/0x5b0 [ 269.065337][T14221] driver_register+0x1e2/0x360 [ 269.066949][T14221] usb_gadget_register_driver_owner+0x132/0x210 [ 269.069088][T14221] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 269.070985][T14221] configfs_write_iter+0x302/0x4e0 [ 269.072727][T14221] vfs_write+0x6af/0x1050 [ 269.074434][T14221] ? __pfx_configfs_write_iter+0x10/0x10 [ 269.076295][T14221] ? __pfx_vfs_write+0x10/0x10 [ 269.077898][T14221] ? find_held_lock+0x2b/0x80 [ 269.079490][T14221] ksys_write+0x12a/0x250 [ 269.080904][T14221] ? __pfx_ksys_write+0x10/0x10 [ 269.082499][T14221] do_syscall_64+0x123/0x790 [ 269.084048][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.085961][T14221] RIP: 0033:0x7f00ccf9e559 [ 269.087471][T14221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.095246][T14221] RSP: 002b:00007f00cde7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.098777][T14221] RAX: ffffffffffffffda RBX: 00007f00cd226090 RCX: 00007f00ccf9e559 [ 269.101954][T14221] RDX: 000000000000000c RSI: 00002000000006c0 RDI: 0000000000000006 [ 269.105196][T14221] RBP: 00007f00cd0358b0 R08: 0000000000000000 R09: 0000000000000000 [ 269.108330][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.111686][T14221] R13: 00007f00cd226128 R14: 00007f00cd226090 R15: 00007ffffbc3b6e8 [ 269.115050][T14221] [ 269.117086][T14221] Kernel Offset: disabled [ 269.118967][T14221] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:44:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81c8700f RDX=0000000000000001 RSI=0000000000000001 RDI=ffff88801fee0000 RBP=0000000000000001 RSP=ffffc90000137940 R8 =0000000000000004 R9 =0000000000000001 R10=0000000000000000 R11=3d3d3d3d3d3d3d3d R12=ffffffff90bd9f60 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff8bd7b7a0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4946000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f00cd227dac CR3=00000000158f2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 317a79732f74656e 2f70756f7267637a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4d47ebf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4d47ebf6 00007ffd4d47ebfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcdda35eda ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcdda35f14 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcdda36078 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbcdda35f06 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000079 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85b2caa5 RDI=ffffffff9cc7e660 RBP=ffffffff9cc7e620 RSP=ffffc900053fef40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3966666666666552 R12=0000000000000000 R13=0000000000000079 R14=0000000000000002 R15=ffffc900053ff258 RIP=ffffffff85b2cacf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f00cde7a6c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff8880d4a46000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005c90b000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0104007000009120 00000000000000a8 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010c008000009120 0000000000020030 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffbc3bbd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffbc3bbd6 00007ffffbc3bbdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00cd035eda ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00cd035f14 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00cd036078 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00cd035f06 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000022125f RBX=ffff8880202d2580 RCX=ffffffff8bd48235 RDX=0000000000000001 RSI=ffffffff8e3e347e RDI=ffffffff8c625580 RBP=ffffed100405a4b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bd4676f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d4b46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f00cde79ff8 CR3=0000000052044000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000008f000296 d4cb00ff85ff96c1 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd98b179f6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd98b179f6 00007ffd98b179fc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24b3635eda ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24b3635f14 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24b3636078 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24b3635f06 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24b37f5600 00007f24b37f55e0 00007f24b37f55e8 00007f24b37f5618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24b37f55f8 00007f24b37f55c8 00007f24b37f5600 00007f24b37f55e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000046 RBX=ffff88802dc14b00 RCX=ffffffff8214acbf RDX=0000000000000000 RSI=ffffffff8e3bd2c3 RDI=ffffffff8c625580 RBP=0000000000000003 RSP=ffffc90027757ed8 R8 =0000000000000000 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000000 R12=ffff88802dc14b00 R13=0000000000000000 R14=0000000000000000 R15=00000000000000e8 RIP=ffffffff8bd489ca RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f02c0d4a880 ffffffff 00c00000 GS =0000 ffff8880d4c46000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3f1712 CR3=000000003763d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001008 Opmask01=0000000000000000 Opmask02=00000000effffdff Opmask03=0000000022080800 Opmask04=00000000ffffff7f Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fe5f1f9190 000055fe5f1f9190 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fe5ef8d3b0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fe5f1ccf40 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02c07f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffff00000000ff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff0000000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5f425f415f424e01 121d121f031a071f ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 061e73171a051a05 7373268d2d8b866d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6961660064657373 65636f727020756c 6c2520716573006e 6f69746974726170 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30302c443230302c 4332300031302d30 3030303000343731 3d5145534b534944 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d0d11440f0d0d11 430f0d000c0d100d 0d0d0d0d00090a0c 005145534b534944 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61742f3074736f68 2f316174612f322e 66313a30303a3030 30302f30303a3030 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6963702f73656369 7665642f7379732f 0000000000000061 0000000000003161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 516e76633a302e30 312d3533712d6370 7276703a29393030 322c394843492b35 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3351284350647261 646e6174536e703a 554d45516e76733a 302e3072623a3431 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30322f31302f3430 64623a322d332e36 312e312d6e616962 65642d332e36312e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000