last executing test programs: 9.167025882s ago: executing program 3 (id=754): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000040)={0x1}) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f00000001c0)="4466b9c309000066b8c19f000066ba000000000f3066350e000000440f22c0e081ba4200b80900ef0f01ca650f01c966b8000000000f23c00f21f86635020004000f01c866b9d40200000f3266b8e889f3d90f23c80f21f866350c0000000f23f80f3066b8020000000f23c00f21f8663502000d000f23f8", 0x78}], 0x1, 0x0, 0x0, 0x33) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000140)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xab}, {0x0, 0x0, 0x0, 0x0, 0xed}, {0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a000f0100000000000000000a00"/28], 0x24}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610040000109022d0101100000000904000003fe03010009cd8d1f0039830000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) openat$ptmx(0xffffff9c, &(0x7f00000004c0), 0x103200, 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000080)={0xc, &(0x7f0000000200)={0x20, 0x7, 0xc4, {0xc4, 0x21, "5634d09481663d1f238dad145e26c817b150b90810e56fb4252e47a0ec1c12d15f8a83b37338de62318c1a68d20fcd5e1344cca611fe1555422e85d8d9833397e8b87a1b27b23ec2cb79d5dc44f5ff2ef58981c0c9cc03f24adc527c07e6c2d2dc102fb7e06f8b1f293ac1244c7bf861454d4d14a8ef6d10b9fa16f82efff441dafb9a4d2faf7191df19bd9ff2fb131226389718011211bfdf4a1e83f7fc26a9bdcc8c65b5a6c6e5daed76dd3cdb3c4e7600cea30865eb4f91701e871c8d62e470c5"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x10, &(0x7f0000000400)={0x40, 0x8, 0xa8, "b751ae7c69e2622a3525f09ae4592297391b5631a3d71b8f733fbeaa565e840a559a2941d66a17cd0e96de3d2e7fee8404cf39a5b31691258706a65f622cd2707f3c363d50c3fbbb73267e3b41a1c846af2a75ca89f2fccdabf94e316250aa9f7571cc408fdf27b287745723c5cfa44468dc12f0ab54c72e6e2499b529cadcab851e10afa0b007073bdddc00e615472f24cc7133189c8dededad8b8a42edcc80e02a8397a56e4df0"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000180)={0x0, 0x8, 0x1}}) 6.311367841s ago: executing program 1 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="23b5c0c93b86ca050f4f00010afdf5"], 0x1, [{0x0, 0x0}]}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = gettid() sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x8) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0xc, 0x400) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.012344596s ago: executing program 3 (id=767): syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x99) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) 4.628235216s ago: executing program 1 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x105c42, 0x0) write$binfmt_script(r2, 0x0, 0xffffff3c) write$binfmt_script(r1, &(0x7f0000000500), 0x4) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 4.396092415s ago: executing program 1 (id=775): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000e000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04f800000000000000002e00390008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200000a0006000802110000000000080026006c090000"], 0x3c}, 0x1, 0x0, 0x0, 0x884}, 0x0) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) socketpair(0x11, 0x2, 0x0, &(0x7f0000000a40)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200000000000000000206097956f504f283882848b960c121824"], 0x28) r3 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r3, &(0x7f0000000300)="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", 0xffffff6d, 0x4048041, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x2}, &(0x7f0000000140)=0x28) r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x38, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002080)={0x0}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x1a8082, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xb9ff}) fgetxattr(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="25f3ac8927587428fcf5ecd93572a938636c08b4775548e576519bf78faf7404e1e4543d0d957124f93430ba40c02cf7cd7a1fe26ced06b773ac174a09"], 0x0, 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0xff2e) syz_clone(0x21104000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 4.068486149s ago: executing program 0 (id=777): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x6, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000150001c0"]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = socket(0x200000100000011, 0x3, 0x0) setsockopt$packet_int(r6, 0x107, 0x11, 0x0, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/718], &(0x7f0000000140)='GPL\x00'}, 0x48) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000}) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000001000)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000), 0x4) dup2(r0, r9) close_range(r0, 0xffffffffffffffff, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050000000000000000002e0000000800030027f5ae31056e78baae4637f445a1e9505b320a7a31fa3b9961138f94b566a483f0f3d27d99a04751d83d2a108e25b97a786d94208b2ac55b36e3e009e07435e3af8be7e7ef10225c72b97a83413ef675b004ab681a537c7373837e43a965a5dc40cb6a7e1d3312853c5f978e1e1d921b6ebf9faeb46ff8c9a76651f25d7ab697997c5748106ce80d61284524694d409809a26c87ec798dd8e19cfed34062892bf4cde00656bce19b505f0987bc5299756871994e134bf60b6f05118a429cebac7b3d7ce515943c263bf92bf44e", @ANYRES32=r14, @ANYBLOB="050034001b0006000a00c8006250e9d30cee0000"], 0x30}}, 0x4008002) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.733110635s ago: executing program 0 (id=778): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="fba7000000002bd4000004"], 0x14}}, 0x0) (fail_nth: 7) 3.651427849s ago: executing program 0 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) write$binfmt_script(0xffffffffffffffff, 0x0, 0xffffff3c) write$binfmt_script(r1, &(0x7f0000000500), 0x4) copy_file_range(r1, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 3.551208598s ago: executing program 0 (id=780): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f68, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='H', 0x1}], 0x1, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) pipe(&(0x7f0000000040)) (async) splice(r1, 0x0, r2, 0x0, 0x8000f68, 0x0) (async) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) (async) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='H', 0x1}], 0x1, 0x0) (async) write(r0, 0x0, 0x0) (async) 3.361737889s ago: executing program 0 (id=781): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x11, 0x5}, 0x20}}, 0x0) (fail_nth: 7) 3.291901801s ago: executing program 0 (id=782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0xb1, 0xfe, 0x92, 0x8, 0x1415, 0x3, 0x655d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd3, 0xa5, 0x3e}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB="23b5c0c93b86ca050f4f00010afdf5"], 0x1, [{0x0, 0x0}]}) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x1c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = gettid() sched_setaffinity(r5, 0x8, &(0x7f0000000280)=0x8) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000400), 0xc, 0x400) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.96828971s ago: executing program 3 (id=783): r0 = open(&(0x7f0000000000)='./file0\x00', 0x441, 0x1da) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x214c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x2138, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xd2, 0x7f, [@measure_req={0x26, 0x10, {0x2, 0x3, 0x0, "fc49d05c36efbe2f6191514432"}}, @peer_mgmt={0x75, 0x16, {0x0, 0x10, @void, @val=0x1c, @val="1bea39db9099ae7780fecfa32cb250ef"}}, @fast_bss_trans={0x37, 0x52, {0x6, 0x0, "78c3cee253cc0b21612869d855ba6257", "92126c32dfc1282eedf659a217f4e46c446683a2f8477e1642ac3a0ba0bf81cc", "fa73cc2a9a13cd2c8a7a2caf8aa8aa7d97cdd8d49690b9d69b334d5b295ffcd9"}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x1ff, @device_b, 0x1000, @value=@device_b, 0x32, 0x81, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x7f}]}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x46, 0x2}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7f, 0x7f, [@preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x4, 0xb7, 0x1, @device_a, 0xad5d, @value=@device_b, 0x8, 0x8, 0x4, [{{0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0xce5}, {{0x1}, @device_b, 0x7}]}}, @random={0xf9, 0x13, "febb3e0f7a22bc2763a9b0b17cfe47303517da"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x13, 0x8, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x2, 0x6}}, @ibss={0x6, 0x2, 0x216c}]}, @NL80211_ATTR_BEACON_HEAD={0x139, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac=@device_b, {0xc, 0x420}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8, @default, 0x7dbde27ab581bf83, @void, @val={0x1, 0x6, [{0x30}, {0x2}, {0xb}, {0x12}, {0x36}, {0x6}]}, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x9f0e}, @void, @val={0x25, 0x3, {0x0, 0x64, 0x81}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x35, "4be2a9f98aacec3166e97f8a06aa3402215a8d5c01ba5a2ca935691c3ab10bd0ed17351ef68faf4b5987d2c67d85534bc7ee7b09d1"}, {0xdd, 0x9d, "552f132575f6ea3dd8d6e342cdb857c1188f99fb899a766923904863f9bcefaf35f03f5dde0f013d41ed5544a890c5511c2dfd9433a734cad3f2cc6df26292a60c3770115a6f8566357104d9359cebf0d0e4144399240f3c6e7f43bb182e1fd1c6133167506ed9341db89cca60703d256b50a0ac7e269cdc2b1e12ce016ed7546416917090382690e411486cef38ca746a9e89026fb3fa61786e6cb9b3"}, {0xdd, 0x21, "5bdee2ddb8384b80b1eee32a3751ff87b6ccf77700056157274cf296191e3952a3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1db, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0x9, 0x25, @device_a, 0x6, 0xce60, 0xdac}}, @fast_bss_trans={0x37, 0x124, {0x2, 0x8, "1c31e4d1aca2b984267eb627677b0383", "012274419119a293085f781ac73f2e069546ea86403ef40c032abe8a4db24195", "bfaf13fc8442b8b2efbdec9d75dda7a0ead709c366b2f41cc3e251a92d1fa4f3", [{0x4, 0x21, "70e45c6125c0b4303a615ed8e8a3abd2d1565d336ee474ede981e7845c0b993086"}, {0x4, 0x1, 'y'}, {0x2, 0x13, "ad79810af54839d8d9ca31606c1a4359d8c299"}, {0x3, 0x24, "88a06bf7a98c6794ed56f921894015821e17dc509e66046030927d682382686fbbfc9d9a"}, {0x3, 0x5, "159d34bc38"}, {0x2, 0x27, "830de3d3b7cecda035b4aa090d8968d43d21f58511b7d0d504a3b4a8b53ffbad474893e5a326c0"}, {0x2, 0x1a, "9a5692bfea9128a9c569aa5ac3c0cadaf3c6acd305ca449f4006"}, {0x1, 0x23, "28cc4dae8f12a6c925dce22d24280127bc9e8748b9fdbc0b3fec235218e7fa22a1cca8"}]}}, @tim={0x5, 0x3b, {0x3, 0x8e, 0x8, "e9c29df8ef742ed5097335b1ef4bd7d300064dac9f6bcf835cf7a04c1e8bdc7a7aaf6e49dda467fd570b133eec0533081d709ca76c636824"}}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0x1}}, @mic={0x8c, 0x18, {0x7ff, "5169dd935102", @long="1947385db436b43e4d67a926d77a390c"}}, @mic={0x8c, 0x18, {0xc03, "b02f95b0aa58", @long="fb6d930c8f217d3cddaf47d60a050bcf"}}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x4, 0x0, {0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x0, 0x3}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_HEAD={0x2f0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @random="7d8d4338c826", {0x9, 0xf8d}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x0, @random=0x101, 0xa084, @void, @val={0x1, 0x5, [{0x16, 0x1}, {0x60}, {0x12, 0x1}, {0x30, 0x1}, {0x2}]}, @void, @val={0x4, 0x6, {0xd, 0x2, 0xfe01, 0x2}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3c, {0x29, 0xeb, 0x2f, "b4fb10efb1236c711ca2e1107768876d2e526aa14cc3031ce20bb924dd292e4faf72cd192750e410582fcd1dc5965261885b2ded12de51fee1"}}, @val={0x25, 0x3, {0x1, 0x64, 0x6}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x0, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1}}, @void, [{0xdd, 0xfb, "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"}, {0xdd, 0x96, "17031f55fff1aba188c34638fc45123effaeaf6974d818bd9bd27b099ccc425195ddf552a80571cb1b56dc427206628a1f8b4a4c39c73660b158afa1a59bbc0269504ed1fea505fd8f7d322aab2202c836597475e0f92c908d1024b1cd17b78f23e878bc51b05727cb885962f0f5557cb12e3c928af2a8305ec45b43561eefed90b555c5942398cc17d758bcbe8ef18813820108e736"}, {0xdd, 0xc5, "b4ea7d4764f8517bf35831b018e70ed143f4d0633d3d95ea3c92d7f96795df220ef8a28ce14aa80a8a81132a9ede4204b40293dc24953d1d2d66563b916fe467ede9231f3b4fe73ba205ec86a15e7dfacb916241da61fe1039afbe752577ac7af6000af0ee6ba3adec9974c6ffb4d89f1d7777cc4b1412c4b9e8ab3df74048a6f6948a3877c01a8912cb13569af352c7c4d30dc1b967d1c24325c73421d4e276005a76722fed106aeaab80ac98e426c58890775cb4d139d383fb91cc6b2d8825999953c65c"}]}}, @NL80211_ATTR_IE={0x18f, 0x2a, [@perr={0x84, 0x88, {0x6, 0x8, [{{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x1}, {{0x0, 0x1}, @device_a, 0xd0, @value=@device_b, 0x2f}, {{}, @broadcast, 0x2, @void, 0x34}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x23}, {{}, @device_a, 0x4, @void, 0x14}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x5}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x25}, {{}, @device_b, 0x6, @void, 0x38}]}}, @mesh_id={0x72, 0x6}, @random={0xe, 0xe9, "bee928dc5343b19ecfcb9ad4167090add80aed8536bff61750ecd1b0bb63afee80f60f5a335258d3d71f720c63b63bf3cf1ec1e8ea20bffb06e7f556823132dad83653886f4992e0e1a1ee7804020fb587f2f18be83df2d9fb82780cb64c6cd19599d99af7d3eac7e27516acc991bfc11fe953d298f3ec8400bb78551aa9f81ca2a39b899317289ad1c0b6afa3feab1425863eb19281ce80001708717865322394ad9aff775df2a46b0a46dbd561d3144e50c94eeb84c9a733adef3d938948d16443e8cfb97a18b37639c88900d6373f6b9d7387d2b60f2bd309443a8ce69025166503444c1e0d9612"}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0xf7}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x9, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x238, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x1, 0x5, 0x6, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x8000, 0x0, 0x1, 0x4, 0x1, 0x0, 0xff99, 0x3]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1125, 0x7f, [@dsss={0x3, 0x1, 0x99}, @measure_req={0x26, 0x1003, {0xe, 0x0, 0x10, "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"}}, @mic={0x8c, 0x18, {0x547, "7e4ca86f93f3", @long="bf252c8b9170f4fe106aa863f8a61116"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x4}}, @fast_bss_trans={0x37, 0x52, {0x5, 0x0, "56a82dce807801c4685e1d798edeaa99", "94c1e565da0ac8851b0ca42f4c80dffd7d5690b31ac805fc99dd485dbea5ead1", "21e920f4243f9bb2b96d8a74ce2f5cdf5c963adab2edf851a9875510813ddcef"}}, @tim={0x5, 0xa0, {0x9, 0xee, 0x0, "4465b6e8a5fa02dc750e19bdb767ae814a9a3535a0510dffb7325615bbf0661c3b34ad65d881d5ccd23915f8d5e2704bf3d1c48e51c440290a24e554560b8e62d93ead66f2d1bc9ed106a54501c9b0ea7ab8882f16eab43d51677e25472137b2ece447253d127a3782c21e951d6cc126da13c0c1fb0f36f3f5ce9bfa7ba2903d0c758101083c7780e75f651a7bc29653614f144e9a883f6bb4ba3df5fd"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd2, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xaf, 0x5}}, @supported_rates={0x1, 0x1, [{0x1b, 0x1}]}, @measure_req={0x26, 0xc3, {0x8, 0x3, 0x6, "3df55a73e321c88a06c70bb991b4f72dfc516fdf809fb0b81284de4e3a1b1707653bad5ed60f76f997780b8758d95f09d6fc59501fd5c43af174a98bf2048ccc69afc624b8bf4e16975f330ece716a6a2e0613aef55af6f51d5c0ad97c5ec1d997c56fb5735a9df7e5db6ed076954ea183ef0468692eec7f34479d81f997970bb2cbce5d37f81717dc03c34094525fb3fa429a9d986134d0a3ba072aa838ba93338f818fea84484af2580d57eadc7e1a4ea8dc87d088ffe7a551444c3df171b4"}}]}, @NL80211_ATTR_BEACON_HEAD={0x32d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_b, @random="b2eb5df683f1", {0x4, 0x5}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x4, @random=0x7, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x9, 0x6, 0x7, 0x6}}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0xa0, 0xad, 0x7}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb, "059f9ae7c93eea97b106d2"}, {0xdd, 0x6, "382d7ec55f1e"}, {0xdd, 0x16, "54936fa0cca9324e7376137d5218a7ade40f4724701e"}, {0xdd, 0x24, "e5f597edf45844cc6755d7b8f9fd06076de4452206bed3094d2b43a8f0c56ebec04fe986"}, {0xdd, 0x7f, "b4ef0475c681861382e437601ccb7adb94eb8ad42ba21c01d3829ffb33a0971f2143e55804f5b5c074acb057f4d0e4eed402e04650d35f64a9f80044cfa6894cb8f8a455c80586bfee8b72e98417116434a4ea3b0f608e8eeb3c2d982bac808b2343aab6b3bcdc64285bb0c9b33f4055b93ab8530995fbbde54c79d53be948"}, {0xdd, 0xe3, "cf958453730d1e98d729faf5eb191c98821aabe2c9655510c4cfa63865f212a1dffd352121513328a3d9e3fd202807872891d4ec3398a8f680cce230fca0a1c55d6d13c7c855f67903f6efffbd8fcb460423a62110f58a83218618e5b3eaa5b76fa890e9ae534cd0e0e8583bc98fc0aba570c309a90eaee4831192c9b8a931ffd11d962c518b7192ecc723d70ae9a1f555932d515ea9c5af22026d40701e6efd1eb26e64e791931918be2e67352251b4bc46e41ec0b37ea0e4bc07bae9842173f902163a2a1a67af54f71d649cea63c3edcb649b9bbe586b1fdb0e47ce33b9499297fc"}, {0xdd, 0x16, "655c690624913b0f794e4b4ffc93b0e865c73dfcce52"}, {0xdd, 0x95, "f72550050f67e4483085a75301486659e0d6d7c2f32228bbcc2c7a91d4378c778b3f33e214154644d7a3111c238d37335e2696c6eb54220c07bd860f5f3afd2082f9f81ddd5e2574864c8da5264e4a2196c6c1dcb97c3340a040b0458822be7bdb3e1b1eae3f28a2414c5628ca630269eff24d2f458475c355102402569a18fdbe4d0322ccc71b4630d45b00db80a18885c4f00a63"}, {0xdd, 0x76, "80dc9a4066655f7c1096223c609fd11fd92c741b14ee542eb5228ed004935c7688b106b387ac0289a68c7440e125c82163e506c2c58ef2d24db7a2f3dba9e8dbb698da25f47e50d96839b34deaaf1ea28fcc3ba78823621f431ebd39189e227205589ca7bbb05d535fa64f45b1542594161f31ccb240"}]}}, @NL80211_ATTR_BEACON_TAIL={0xbd, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x9, @device_a, 0xf, @value=@broadcast, 0x7, 0x3, @broadcast, 0x9}}, @mesh_chsw={0x76, 0x6, {0xdf, 0x8, 0x3d, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @fast_bss_trans={0x37, 0x61, {0x80, 0x1, "cc17ca3aa631a13e56fdf5e9fee71495", "f28e8dbd75a349ec276f5096b79e672ef422237fa2a0255022f055646f11c6fd", "7c2266e5f3d8b8d2b94abd9276cc99fef631a581343c434c552a55415f455ace", [{0x4, 0xd, "2c577109417c166cae2f174f7e"}]}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x1, 0x0, {0x3b, 0x1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x0, 0x0, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]]}]}, 0x214c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x310}, 0x3}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="700084801000010072213a37314985f82566aa242400010034558714857ddf7d3c4dd20d8f31e83750813ddd36af1a3a79a093be591b5fba080002000000000008000200ff7f00000a00010002020202020200001c0006800800050000000000080003000000008008000100feffffff100084800b0001008c040c668f28620006009800010000000400ff000a00f500da8bd33bb3e700000a00060008021100000000000400ec000400ff0008009e"], 0xd4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="50010000", @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010f58e559f919fbe300", @ANYRES16=r6, @ANYBLOB="00042abd7000fcdbdf252700000008000300", @ANYRES32=r11, @ANYBLOB="06003600faff00000a00060008021100000100000a00060068c52de372250000b9002a0005130994ffd4ce3b8ddc855a57fc28a58838b0b93e8456080600080211000001e400000008004008021100000100400100080211000000160000080211000000ff070000350000080211000000ffffffff420000080211000000040000001e00000802110000010300000030000301b9bd06080211000000822507010f080000000802110000017f000000050000000080000001040802110000000000008075140000040031c7b00a02cc1ccc2da5b9627a0d186b0000000a00340001010101010100000a0034000202020202020000"], 0x110}, 0x1, 0x0, 0x0, 0x4000001}, 0x18001) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000340)={'mangle\x00', 0x0, [0x6, 0x2, 0x4, 0x3b, 0x7]}, &(0x7f0000002600)=0x54) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x1000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x33}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ac1414bb060001000200000008000600a7"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r13, 0x100, 0x7, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040884) 2.811134603s ago: executing program 1 (id=784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x0, 0x0, 0xffffffff, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xff}, {}, {}, {}, {}, {0x80}]}}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000000)) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048885}, 0x20084054) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) gettid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x2, 0x0, 'queue0\x00', 0xffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$vim2m(0x0, 0xfffffffffffffffe, 0x2) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f0000000400)={0xa, 0x4e21, 0x1000000080000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="140000002900801d6cb189b8fd0c269c4af7c5189928efd4c7de74fc99fc071ed18169130b982cc7a555f9cd55e1f7d93056d4e8432c6fa915c28ade0731faece039f44f9af8040ae841683afc7d51a4ffdfebe80ca9e979266f57847d92b59252b92c7d22341b4713a286403282e423572c90c5005826c6bb6e544fc26e56d555b9591cea09d1234caa564689895cb1c708863118af3350e77dd0ba12572ca887158d5011606734aa3260b2fc7765b2f650ddd3f9396d1a4b1ad400e3de059572dfc56d3eec1442808ca4b82200624800067e8b41e3923664a0e29533795d4d1b4c0efe8c6ecd8e28fd196a11d6b35e8d1523a59243c090990d695f5ce6b43d9e90"], 0x18}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405668, &(0x7f0000000080)={0x0, 0x3, 0x0, "b80100000000000000000000000000000000000000000000b700"}) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r7 = socket(0x848000000015, 0x805, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x400, 0x0, @loopback}, 0x1c) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x13, &(0x7f0000000000)=0x8, 0x4) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0xffffff34, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 2.024696433s ago: executing program 2 (id=770): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900), 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000340)=ANY=[@ANYBLOB='-'], 0x28) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) close(0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) getpid() r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_CPUID(r9, 0x4008ae8a, &(0x7f0000000080)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 1.727029514s ago: executing program 1 (id=785): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$mouse(&(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581"], 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000060000000000000001000084ffffffff0000000003000000000000000000000000000002000000000000000000000010020000000000"], 0x0, 0x4a}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x80000000, 0x30}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001d00)}}, 0x10) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={r2}, 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001340)={0xffffffffffffffff, r3, 0x25, 0x2}, 0x3c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x6, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, &(0x7f0000000100)}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="258400010000000000135ad3881eeb48e97000000000ca8080f2ffde"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x6, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, r4, r5, 0xffffffffffffffff]}, 0x80) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001f00)={0x0, 0x8, 0x10}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001f40)='cgroup.freeze\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x48) 1.542014516s ago: executing program 3 (id=786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x22c}}, 0x0) 1.462251059s ago: executing program 2 (id=787): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) write$binfmt_script(0xffffffffffffffff, 0x0, 0xffffff3c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500), 0x4) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), r0, 0x0, 0xffffffffa003e45c, 0x700000000000000) 1.281422755s ago: executing program 3 (id=788): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/oss_mixer\x00', 0x298f3cc22e12b39a, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x82, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newsa={0xec, 0x10, 0x10, 0x0, 0x25dfdbff, {{@in=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, {@in6=@private2}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x8}, {}, 0x0, 0x3503, 0xa}}, 0xec}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) write$proc_mixer(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="53594e544820274d6173746572204361707475726520537769746368272030303030303030303030303030303030303030300a50484f4e45494e0a4d4f4e49544f5220274361707475726520566f6c756d65272030303030303030303030303030303030303030300a4c494e453220274c696e65272030303030303089303030303030303030303030300a4449474954414c320aa7e6d2ced9e74bb5b144780d87d4a93e4424dc69fca7f4270f6954968e6fbe01d6c6e79d562e1cb4c33d4ce2829574da21b144bd058f9dc3918697d38065807e9cdd9ec54120236c71e3fb75d2adfe4f0578e2cdab10bbf6fb4b79ccbb0580266052a736193c2621e7a7d8e6c7084ad05cf6c12a5bd4a77e4f2ccdd504f2600e66584eb256066da27f6088270b70078680bf0341a449e6ad5bea64b77c64cbd4ace86664dc5d48cf3afa5a96e8156c5153c76cff54e36209c879a41962cf44"], 0x94) writev(r0, &(0x7f00000023c0)=[{&(0x7f00000020c0)="02a218a2f0bdf14cb2cefdfe8958547030fea59cfda609f009f142d7a34144005c228b502204e8567a986f1a0ba6c2361820e522bfef8ce16103fd2e114ef102b0f3688d1092eb8d09c4f2f2cf4442fbcf03d25a0170c917fb35693e45256869fcc0628750489de3588b7d566969515729", 0x71}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x10001, 0x341000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYBLOB="56bb2edbeea86c64cde386082a494b2b0989777db25c44645ce3f1fda6423bdc7557072db8bc1d87abe309f878569cf632e07af78bde89afc8a5ae298fe5fc1b469bf5ff00c339900003004a0788b07d4693edcbcdcd33b0b849a8f8a275d13ecbf4e5d2e58190f89625306595146d928ad03003ab1e2322e9930ccb2571b532c6dc1bd9f9b65041cb7b994b6aa365201339d611e4", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffceb, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310400000000000000001600000018000180140002006e657464657673696d300000000000000500040020000000050003"], 0x3c}}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xb3, 0x0, 0x0}) r7 = dup3(r6, r3, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000500)={0x48, 0x1, 0x0, 0x0, 0x6, 0xffffffffffff8407}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000006c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000001ec0)='f'}) dup3(r1, r0, 0x0) 1.162201648s ago: executing program 2 (id=789): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r0, 0x500, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x8) 1.031277464s ago: executing program 2 (id=790): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x1}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="060300000001040000"], 0x9, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x1c, 0x0, @void}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001a000708ab092500090007000aab0700a90100001d6051932100018010000000090000000000ffff00039815fa2c1ec28656aaa79bb94b46fe000000bc000300", 0x44) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffff", 0x23}], 0x1}, 0x0) r3 = socket(0x2, 0xc, 0x9) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000380)=[@op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}], 0x40}], 0x1, 0x0) r4 = openat$sr(0xffffff9c, &(0x7f0000000340), 0x131580, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'geneve1\x00'}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r5, &(0x7f00000003c0)="3f030e00031b12000000000089e9aaa911d7c2290f00810000008100642c4a1b786100008d6b", 0x26, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="fe5a19730647"}, 0x14) r6 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_SCSI_RESET(r6, 0x227d, 0xffefff1f00000000) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x80010, r4, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='exfat\x00', 0x2000400, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) 951.213452ms ago: executing program 2 (id=791): r0 = open(&(0x7f0000000000)='./file0\x00', 0x441, 0x1da) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x2150, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x213c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xd2, 0x7f, [@measure_req={0x26, 0x10, {0x2, 0x3, 0x0, "fc49d05c36efbe2f6191514432"}}, @peer_mgmt={0x75, 0x16, {0x0, 0x10, @void, @val=0x1c, @val="1bea39db9099ae7780fecfa32cb250ef"}}, @fast_bss_trans={0x37, 0x52, {0x6, 0x0, "78c3cee253cc0b21612869d855ba6257", "92126c32dfc1282eedf659a217f4e46c446683a2f8477e1642ac3a0ba0bf81cc", "fa73cc2a9a13cd2c8a7a2caf8aa8aa7d97cdd8d49690b9d69b334d5b295ffcd9"}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x1ff, @device_b, 0x1000, @value=@device_b, 0x32, 0x81, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x7f}]}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x46, 0x2}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7f, 0x7f, [@preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x4, 0xb7, 0x1, @device_a, 0xad5d, @value=@device_b, 0x8, 0x8, 0x4, [{{0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0xce5}, {{0x1}, @device_b, 0x7}]}}, @random={0xf9, 0x13, "febb3e0f7a22bc2763a9b0b17cfe47303517da"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x13, 0x8, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x2, 0x6}}, @ibss={0x6, 0x2, 0x216c}]}, @NL80211_ATTR_BEACON_HEAD={0x139, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac=@device_b, {0xc, 0x420}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8, @default, 0x7dbde27ab581bf83, @void, @val={0x1, 0x6, [{0x30}, {0x2}, {0xb}, {0x12}, {0x36}, {0x6}]}, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x9f0e}, @void, @val={0x25, 0x3, {0x0, 0x64, 0x81}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x35, "4be2a9f98aacec3166e97f8a06aa3402215a8d5c01ba5a2ca935691c3ab10bd0ed17351ef68faf4b5987d2c67d85534bc7ee7b09d1"}, {0xdd, 0x9d, "552f132575f6ea3dd8d6e342cdb857c1188f99fb899a766923904863f9bcefaf35f03f5dde0f013d41ed5544a890c5511c2dfd9433a734cad3f2cc6df26292a60c3770115a6f8566357104d9359cebf0d0e4144399240f3c6e7f43bb182e1fd1c6133167506ed9341db89cca60703d256b50a0ac7e269cdc2b1e12ce016ed7546416917090382690e411486cef38ca746a9e89026fb3fa61786e6cb9b3"}, {0xdd, 0x21, "5bdee2ddb8384b80b1eee32a3751ff87b6ccf77700056157274cf296191e3952a3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1e0, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0x9, 0x25, @device_a, 0x6, 0xce60, 0xdac}}, @fast_bss_trans={0x37, 0x124, {0x2, 0x8, "1c31e4d1aca2b984267eb627677b0383", "012274419119a293085f781ac73f2e069546ea86403ef40c032abe8a4db24195", "bfaf13fc8442b8b2efbdec9d75dda7a0ead709c366b2f41cc3e251a92d1fa4f3", [{0x4, 0x21, "70e45c6125c0b4303a615ed8e8a3abd2d1565d336ee474ede981e7845c0b993086"}, {0x4, 0x1, 'y'}, {0x2, 0x13, "ad79810af54839d8d9ca31606c1a4359d8c299"}, {0x3, 0x24, "88a06bf7a98c6794ed56f921894015821e17dc509e66046030927d682382686fbbfc9d9a"}, {0x3, 0x5, "159d34bc38"}, {0x2, 0x27, "830de3d3b7cecda035b4aa090d8968d43d21f58511b7d0d504a3b4a8b53ffbad474893e5a326c0"}, {0x2, 0x1a, "9a5692bfea9128a9c569aa5ac3c0cadaf3c6acd305ca449f4006"}, {0x1, 0x23, "28cc4dae8f12a6c925dce22d24280127bc9e8748b9fdbc0b3fec235218e7fa22a1cca8"}]}}, @channel_switch={0x25, 0x3, {0x1, 0xb7, 0x8}}, @tim={0x5, 0x3b, {0x3, 0x8e, 0x8, "e9c29df8ef742ed5097335b1ef4bd7d300064dac9f6bcf835cf7a04c1e8bdc7a7aaf6e49dda467fd570b133eec0533081d709ca76c636824"}}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0x1}}, @mic={0x8c, 0x18, {0x7ff, "5169dd935102", @long="1947385db436b43e4d67a926d77a390c"}}, @mic={0x8c, 0x18, {0xc03, "b02f95b0aa58", @long="fb6d930c8f217d3cddaf47d60a050bcf"}}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x4, 0x0, {0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x0, 0x3}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_HEAD={0x2ed, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @random="7d8d4338c826", {0x9, 0xf8d}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x0, @random=0x101, 0xa084, @void, @val={0x1, 0x5, [{0x16, 0x1}, {0x60}, {0x12, 0x1}, {0x30, 0x1}, {0x2}]}, @void, @val={0x4, 0x6, {0xd, 0x2, 0xfe01, 0x2}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3c, {0x29, 0xeb, 0x2f, "b4fb10efb1236c711ca2e1107768876d2e526aa14cc3031ce20bb924dd292e4faf72cd192750e410582fcd1dc5965261885b2ded12de51fee1"}}, @val={0x25, 0x3, {0x1, 0x64, 0x6}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x0, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1}}, @void, [{0xdd, 0xf8, "261427880e3592b32b72f85fb4ec5f670e6f3d4a384efcf50ea643d60e7e36619b6abcedc4fffdca14bb8f3f580b42921e4c1b3ddfc54e33e01233da78b112f51c080f126311c169efcc4e947763a4ff6eeda46665af19e09e3059c2f0ca0e4736afb5485e397dfbd90786e20d61b5115bb5649744d630f465a3d47fe01405ce70fed33d25628c04e6270b678ff90ae7d268d96ad69f7603321be560588f80949261b82ebe6e12e7b2dbbdde37ede79f03b23656d4d56298f18f6192203a22ac325e674094b87a1b09f7eb6bd7e37338cec10b0b1b716f64742ffc10ff2f834ffdb7e120c135ae4ebcda7ec0e158813828f6352141df1fdc"}, {0xdd, 0x96, "17031f55fff1aba188c34638fc45123effaeaf6974d818bd9bd27b099ccc425195ddf552a80571cb1b56dc427206628a1f8b4a4c39c73660b158afa1a59bbc0269504ed1fea505fd8f7d322aab2202c836597475e0f92c908d1024b1cd17b78f23e878bc51b05727cb885962f0f5557cb12e3c928af2a8305ec45b43561eefed90b555c5942398cc17d758bcbe8ef18813820108e736"}, {0xdd, 0xc5, "b4ea7d4764f8517bf35831b018e70ed143f4d0633d3d95ea3c92d7f96795df220ef8a28ce14aa80a8a81132a9ede4204b40293dc24953d1d2d66563b916fe467ede9231f3b4fe73ba205ec86a15e7dfacb916241da61fe1039afbe752577ac7af6000af0ee6ba3adec9974c6ffb4d89f1d7777cc4b1412c4b9e8ab3df74048a6f6948a3877c01a8912cb13569af352c7c4d30dc1b967d1c24325c73421d4e276005a76722fed106aeaab80ac98e426c58890775cb4d139d383fb91cc6b2d8825999953c65c"}]}}, @NL80211_ATTR_IE={0x18f, 0x2a, [@perr={0x84, 0x88, {0x6, 0x8, [{{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x1}, {{0x0, 0x1}, @device_a, 0xd0, @value=@device_b, 0x2f}, {{}, @broadcast, 0x2, @void, 0x34}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x23}, {{}, @device_a, 0x4, @void, 0x14}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x5}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x25}, {{}, @device_b, 0x6, @void, 0x38}]}}, @mesh_id={0x72, 0x6}, @random={0xe, 0xe9, "bee928dc5343b19ecfcb9ad4167090add80aed8536bff61750ecd1b0bb63afee80f60f5a335258d3d71f720c63b63bf3cf1ec1e8ea20bffb06e7f556823132dad83653886f4992e0e1a1ee7804020fb587f2f18be83df2d9fb82780cb64c6cd19599d99af7d3eac7e27516acc991bfc11fe953d298f3ec8400bb78551aa9f81ca2a39b899317289ad1c0b6afa3feab1425863eb19281ce80001708717865322394ad9aff775df2a46b0a46dbd561d3144e50c94eeb84c9a733adef3d938948d16443e8cfb97a18b37639c88900d6373f6b9d7387d2b60f2bd309443a8ce69025166503444c1e0d9612"}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0xf7}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x9, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x238, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x1, 0x5, 0x6, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x8000, 0x0, 0x1, 0x4, 0x1, 0x0, 0xff99, 0x3]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1125, 0x7f, [@dsss={0x3, 0x1, 0x99}, @measure_req={0x26, 0x1003, {0xe, 0x0, 0x10, "849ffbfacb590c63ea1c65b5e3dd13056ca5862aa7bffbeca179b6afa73124ba2a6d227b91fbacd2db2b9d37c8ece65cffca83dee0efc21a2b1a53e0c84e7fe74e77c5e9fafc52f757017a4f6ea5354f23dcc8517d8ff292546f1688f32f43c36e61fd571cbb1b034db086ae2b809bf3207e0969c180895f54beed1a7cdb365c46d2d2fae5c248b5326e6e8636a21ca539a6e0adf66dc0248757414cff026278ff897ab404367f0e34bcfd0f401e11bc6fed187f4ef7aac1fb30af0be08ce5b23e7a82a62a2ecd229f719051d5f1aa1cf9053434d05af6039e876cd02c314975c32c3b3c20e5b391650fd3d5a346d45df0aaedf2c31028b088f2ce57571e4e3dec0ce58848d5ae63b5473f1675568c6045390b32a29aac9dd3435a29fd9d549dee0f24ab8c4120e8050807fc2c85a7414bb339422c142e98179c66e28ba00c830b78dd10ddd6cc68fd851b4a6726f2c91c3121a56ddc126859bd4131c65d1e17159bd7a65560231155e00da8ae8fdc477c766494366cbef67bef9c5ae0ce5ed61b3244f5bc4cda1205410979f11cbf0946bba13f2a6c3ff1b7fec7955c395ab4dcf311711a9fd18a7bd376a50020168b70371850dfe1b4dcb59dcaa12a8482e3847e41e023a2e8b23a67a5772f090e8c16b4edeecd1d4675ea1e257bec4ce35ed06c76d3d93894a73d280bc515f3d3197b206741af51ff4e6f23b3c2c288e30237147658d9f46e9c11875c50d06e70572ba483664b167e3dbf7bd114162118addc64c742de6ff3fccf6d3ffc1391abac818cca4d1cc1ea3d1b15066b9beebd97dccc4334ab7acc0c041b56c5f75de8587f5dc268cf199770b1d8137723f52a7668172becfe793ffd84bf73250eda638abd9cc57e65504dc48a0c8fb4d9d24907b49ff1f68fe33f9a2118276546c72a5da19f1125e57e66062d5922d1c771040e810ba59b3b7c6397f3314e363b92887e90a4448e000c3126f9925b69d444e485ed6d8f340bfbe4028d3b4bf621c578a2618de80361ad013d71278221526665555fe8aed2b116d379e458a55c1d09f11c04b1196d419a5d1bff7f740bc8776cd2a3f5d56b772e60330b6d32f3e1d34453f05094c55084b569ccc0933cddb620afd2ae4bae9419381daf4fcda706c13d12b31199979cd47291843b3d6c2e5c076ed9bcc8eb32d0524f4cefeaa9b16f4cad41c9be0744d42a54ffd273ade3469bd56564e50a3e7e7d4db8f1ef89ceaf5570af734ace86aa171240dfe870c26277519ae24752bf853953cd9109bc3a811494baeee21e0abe7b563787fbb205534a35d67eb0eefbb2e6648b49a389f7ba3a2040a2b013784ee4bc543562149459a99e19684b9aef241e8706073a0af8b18c61fb5202c6a1caf160f12a962cc5809c94d5a583a4503bbf077f7aa0743e1270ab110028d83ef0078a77abee029578bdcd0f1522330c1224d9ef7525752bde03dc09bb45b44d2b0a15d0d60e5c7864b6c9d13231b7683936f0d17238c246eb433763bf9c18cbdb8e233cd5cabaf3e91f0e7e2ae472d0307cb0b99001525f0176828f41fe773d321ec273ffb2ad31957284c2b82298fbb2703cdc5b23441c549dc77ae8ca3021bcbc3dc98a0506abe65d32d577b5283d79a7e6807fdcfb016d0ff9dd652f6414aac25569d3fda4abf718f061fe228d99d7cb7f718e4df310eeabca9398e77f089223983d9fc0c67e2130a3386b8eaf8db74c697cc75a71eff7e4673bdfe6b0eb3de9a99396bc14dc42b84100ed4891aae0651379188fdcf4efde3d33e6cb6923b642ed61a14c68e54220f1b7b69c6455a188fbbcc6e229941ef64e7254a423403e391e6b4bdffaba0f64f04a99ef51b0322d97511ccc3022f1061856b93592646977a81753948a29ab41a21f11914d2e9f54737ce231e8c3e40523c09897250d2d4c7c2f2e9bc9cacbd3197764ad75a69d652a2fa5f2948176e862d4567d721cb11c3dfd6f9800fa3d047075c5975f495ada6b8c96310bc7e8f910436e0f52fdb00a2b22bdec0a5809dce9b6a650623466f90f45537daf14f7a55aba1f056661c42bca52e53c3139acc4102e78a326fe86e0dc892c288e76d492e016823a1559a4ca8c4964381cd466497f498232a6362490b63a9d52f695f0d7732fe20b535026369c9a74cb952f3f25b4bce3d5c61b091acd36042b43222063609368c914b33a5edc301fdb76833dbd10b6bdef94475fc63f25a655d8ab46705f434c5f911ca2921fc2e74891b0be85dcbeda5e85ce2471f623b8c7d29d995752a348ead03e3629cc1f6ae4c76080b21539e2cca43831073bf155a4c6a8cea8dcd4bd18faa0b0b336003e026bf8383fba95060ee5ac53a1edb03532deec3e74683012dd623ad87d1740575024f4e7f7783b27e1df837a60c4bb23104b0bce8b6b2bb41e8d9453286d0ef701af44867c6712dcb80119d200082675295886d7733ef9f9a9c4e3bac3a9668e33d475d3066758ccab788f008b4b0c25603989e46027e479e74650f979f98a3741feedaee138725170a42a1ba6a82ae867dc84db09b84ca463dd593fa2586df7cbaa6553c39bcc221756ccffa3daa48a91ca6e67a5f8f09c6edad131085ad5e1ba311a6487714d8cde097181b50c3852c43d818efbb9c28943813c1012d2986f21ad15be8b0f083fac3f72c631e692019478e657ce246ade060de371507286d14f5ed60cbff276c40fc92dce480452cc6e245cff509674ca98734f23fbb94144c05c8a2de1937ac15f0c018f4cf9fa723f1309fa0bb710d24dee0dcff690f257eddb17dee803cfd829c42bfa7d5812018c82252de951be8f4fd4b3360ffe78be7624958b47e9049058f31ebe25503f979afbbc6fe449d6671fa9299a2cad09f82fb94366cd16ce34db1cac4a08be4d07e655f693089c5877b8d16856e5f88d661aa18849ec3731efca6164391b2b849686427ef734da1e073871fb978ced3fdca66531b8e6ee7b2243a5fe62e743f728d84f22f1d7b65358df2e30a81d508003e7f47ca643b89c984f5f8b57de49d7c3b244cd781f1f77d1545f79d1a361066e7817b6a36884e159724e6ca9b17518dba9faa4476c023ed5552b6bbfee0aec9b5e1fe2e2db0e70d2506797c11a1e7209175df6e27f84db64929e422b5b6b64de39a094bb0f459adc778520140ae8e5971e95a9c0bbbcc1e8d3ca75de307e97146c85ba65e77e57cc75fc275424c034ab9d62620af377fbe2f393cc9bd566a790bc8ee2b4e71f71b747a2248a5ee8d119443b87cfd1f9caedc2706fd5b717b64eb62bdc72fa1a791079d2a3695f0c6eb6bfa078fc88e631dbb3ad1b27e281bab86afc16845f8ca6ca7fc77187e29812a016304991dfcb686269939e785b717a3826c6fe042a4908c4fc094ad6514738e8df6ccf855f8f5c0075a99e2daf4b40a26d18979014eb418f28205f1dac48eb9738e67f5b9c58215033437f74038657d20dc35e2cb8b98e1ddfc7ac20cc265db0d8dfaede9b9e97b4548c78aa93b28d93b62d1b81f187c488a404647412ee6df85720f863e07a23a0ea5af6708691b935f5f4a268b23181d0b10099bee3834a0638c9850afb5b49f040c41f230e6504f507288f439d6d395beef5221995d0d8e6a4c689ee6bf8f2bea654711a1a513fbef55c1970d2a0d2f4b1ee6aed2eca1843d1dc58c5c3b9aac8e42c08b367d7cbe4db542bc0e58c7689ced26c4177221954b3266bface35f4c573a8619d34eb9142595a9617a8ae00437f16dea736a979618e1d5906a082c1c195656030cedfae528968b5bcbd917f2661dae3b95834e1c7e5ec0fcc6a32f37a0023b8eb0aeb2592fc6a9e664a177b65f532a666b8fbaf302230b536e30c126d4b0f70c9704d2a45a45486f1963837e713dfe457f36b7540d883a53ba1695918e81dd508d6185ce5100dc360e8c2d395ee5604a7e69f6c622f9a3c0e6bf107d7fb1cc087c9cf1ea8251bab61196c2e9957d8853941806e1b52fe0a0fc879d2cbf931207d85faae11863882993306d46a43c6687c0200e85d539f1cd42c9489a5bf27cd9a6bc6de85c88b4140441a861fc50c812c739c8268463d5e1f38e16e6a1d9b6e42a71eb2d5e396db531a3fed3b689732c0850605d67de1296710739bc2b3efeb96beedf82f8d6a8f542119923a9339cebf3c3c966df302643ea2ee6c33d47d01c63b13ec4bc3fb706f5911fc734172aa9a841d8c3bc246fb7e31b27ae4f994aa01d83233d6f62035e080ebd00e7796e5c211a9350ab174d9e580f238ac91b20d93a2330ee3586f14ba27e3f88139473b8150c2af95cc906860b9091207d96ecb082e3e727a268ec6f4c8f90ee79ea73d8cad267ff788d4fa47ffb0218226d08219eccf1424486e80fc978c0276d05ea5326cf2f205327e9b621356a6bfc53a37ef0dbc35de52f608cf06ae643ba658e5b01db6cc174e4d963d9c8d0bc6e4e5308f9278918a91d681fc8c713c5c5f3fb403127f05569c6c84464b0dfd948fdab24d12c5c4fb329651fc08e3674db11ddc1a60d730c90ce62f520dcce277679ced3696072171c21ec249ca18783a0540be79e85467a0722ff53fa54dd7701ca30fdf86165fe695595da42c31f6f9fad73be0ab5194c2f34f27d56241ac6674d7c6b4a1c0fbbf726730977600199987746c66c884fbf3cf683c7fed1a5df9a5f233466d7554ac006af6b378346f07397fd48303de6e95abdcc4a901da675af60f71add9d86b244b0ec5907f379835620a277584620feca8eeaa2165f0a5ea94a5667c4bc9d80313f6df8324e7ec9515c9e21d8f7a1f65788e0473c00d85605767dfae803c5ff233faafafaaca26629e6a1f71100094e4889be54a765f3d368d80bd39fdc0918b8f1e06b74c2077415bf856b54efb22189a4f6b7e90928826757eb848e03e5cf9554e26736d93eba784e8c961d2196f67af213dfa2b388395d6738366989b2a4b364d82107e93883f084f6495e68cecdcc7bfc16e17c8f4aae8e66dfacea380222c82a349eff57c40a0439602f1372defc1d7a5d385e233ee16883ba779b4d0beee40d79591ea8d9f6b508cb863f9b117f2fbe82865f218689be381acb637b464b5e0bc4495d1e9def0dcd183560fe21d9925f44683b7e329e76f9dcaa99245685cbda9d1045e72df32d027b73efa5ea4937b56988d37eec603e1d1115c01f545f33e83cc6dcff4230795f48dd50033e7c62d41af5fcc4d4d3320830b412425dd5308987cd679d50d9433b2292cf0c6c30a2b801a0ef3df3c7b92e8647184d9750ea31f722cf5cd2f7e5a2fd5fead56ab46eb8bc301785acf8cb4785bd963a3013e301dca6c6794e2d48a7795e59df2c6b8bb94cd1d7c271719bb9d765baa871f7319bbc9517f15a6c8c500cdd1fe6d8d085cd5b015d26ce4dd8d792d0912a8f00e84216fecfd1d392fd50223fbe05543ede47f7de2685aa9427b3013cec2df47704fa0155a5bec133fd7c42dfe4bf9a8b4ddb61f8641385db6b691734352cf5584c9bd6b469c516a9e53d5654ea48515d0983c96eb625818d16516942d92a65e0f8a2ececcfc3f2746d865d5efca96a022b8e884a6d42aeb337942ce6540257ff58bbdc1e6f801b0575a96086d5111cdcbfd2afd6d7c636ab3fbaffef204f4d9b9e9afa501fb89f4065eb077df91ea51031316e07fb15525975e09b0115d9f89a6f59a368e28dbf839ab26895b6d472c9d247a9429a99e226292c47556772982e4be73e1ed95bd82107070eb727ec3216fdf984b5cdaa58a24800de10c2df7c2db2fcf434401"}}, @mic={0x8c, 0x18, {0x547, "7e4ca86f93f3", @long="bf252c8b9170f4fe106aa863f8a61116"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x4}}, @fast_bss_trans={0x37, 0x52, {0x5, 0x0, "56a82dce807801c4685e1d798edeaa99", "94c1e565da0ac8851b0ca42f4c80dffd7d5690b31ac805fc99dd485dbea5ead1", "21e920f4243f9bb2b96d8a74ce2f5cdf5c963adab2edf851a9875510813ddcef"}}, @tim={0x5, 0xa0, {0x9, 0xee, 0x0, "4465b6e8a5fa02dc750e19bdb767ae814a9a3535a0510dffb7325615bbf0661c3b34ad65d881d5ccd23915f8d5e2704bf3d1c48e51c440290a24e554560b8e62d93ead66f2d1bc9ed106a54501c9b0ea7ab8882f16eab43d51677e25472137b2ece447253d127a3782c21e951d6cc126da13c0c1fb0f36f3f5ce9bfa7ba2903d0c758101083c7780e75f651a7bc29653614f144e9a883f6bb4ba3df5fd"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd2, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xaf, 0x5}}, @supported_rates={0x1, 0x1, [{0x1b, 0x1}]}, @measure_req={0x26, 0xc3, {0x8, 0x3, 0x6, "3df55a73e321c88a06c70bb991b4f72dfc516fdf809fb0b81284de4e3a1b1707653bad5ed60f76f997780b8758d95f09d6fc59501fd5c43af174a98bf2048ccc69afc624b8bf4e16975f330ece716a6a2e0613aef55af6f51d5c0ad97c5ec1d997c56fb5735a9df7e5db6ed076954ea183ef0468692eec7f34479d81f997970bb2cbce5d37f81717dc03c34094525fb3fa429a9d986134d0a3ba072aa838ba93338f818fea84484af2580d57eadc7e1a4ea8dc87d088ffe7a551444c3df171b4"}}]}, @NL80211_ATTR_BEACON_HEAD={0x32d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_b, @random="b2eb5df683f1", {0x4, 0x5}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x4, @random=0x7, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x9, 0x6, 0x7, 0x6}}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0xa0, 0xad, 0x7}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb, "059f9ae7c93eea97b106d2"}, {0xdd, 0x6, "382d7ec55f1e"}, {0xdd, 0x16, "54936fa0cca9324e7376137d5218a7ade40f4724701e"}, {0xdd, 0x24, "e5f597edf45844cc6755d7b8f9fd06076de4452206bed3094d2b43a8f0c56ebec04fe986"}, {0xdd, 0x7f, "b4ef0475c681861382e437601ccb7adb94eb8ad42ba21c01d3829ffb33a0971f2143e55804f5b5c074acb057f4d0e4eed402e04650d35f64a9f80044cfa6894cb8f8a455c80586bfee8b72e98417116434a4ea3b0f608e8eeb3c2d982bac808b2343aab6b3bcdc64285bb0c9b33f4055b93ab8530995fbbde54c79d53be948"}, {0xdd, 0xe3, "cf958453730d1e98d729faf5eb191c98821aabe2c9655510c4cfa63865f212a1dffd352121513328a3d9e3fd202807872891d4ec3398a8f680cce230fca0a1c55d6d13c7c855f67903f6efffbd8fcb460423a62110f58a83218618e5b3eaa5b76fa890e9ae534cd0e0e8583bc98fc0aba570c309a90eaee4831192c9b8a931ffd11d962c518b7192ecc723d70ae9a1f555932d515ea9c5af22026d40701e6efd1eb26e64e791931918be2e67352251b4bc46e41ec0b37ea0e4bc07bae9842173f902163a2a1a67af54f71d649cea63c3edcb649b9bbe586b1fdb0e47ce33b9499297fc"}, {0xdd, 0x16, "655c690624913b0f794e4b4ffc93b0e865c73dfcce52"}, {0xdd, 0x95, "f72550050f67e4483085a75301486659e0d6d7c2f32228bbcc2c7a91d4378c778b3f33e214154644d7a3111c238d37335e2696c6eb54220c07bd860f5f3afd2082f9f81ddd5e2574864c8da5264e4a2196c6c1dcb97c3340a040b0458822be7bdb3e1b1eae3f28a2414c5628ca630269eff24d2f458475c355102402569a18fdbe4d0322ccc71b4630d45b00db80a18885c4f00a63"}, {0xdd, 0x76, "80dc9a4066655f7c1096223c609fd11fd92c741b14ee542eb5228ed004935c7688b106b387ac0289a68c7440e125c82163e506c2c58ef2d24db7a2f3dba9e8dbb698da25f47e50d96839b34deaaf1ea28fcc3ba78823621f431ebd39189e227205589ca7bbb05d535fa64f45b1542594161f31ccb240"}]}}, @NL80211_ATTR_BEACON_TAIL={0xbd, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x9, @device_a, 0xf, @value=@broadcast, 0x7, 0x3, @broadcast, 0x9}}, @mesh_chsw={0x76, 0x6, {0xdf, 0x8, 0x3d, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @fast_bss_trans={0x37, 0x61, {0x80, 0x1, "cc17ca3aa631a13e56fdf5e9fee71495", "f28e8dbd75a349ec276f5096b79e672ef422237fa2a0255022f055646f11c6fd", "7c2266e5f3d8b8d2b94abd9276cc99fef631a581343c434c552a55415f455ace", [{0x4, 0xd, "2c577109417c166cae2f174f7e"}]}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x1, 0x0, {0x3b, 0x1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x0, 0x0, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]]}]}, 0x2150}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x310}, 0x3}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="700084801000010072213a37314985f82566aa242400010034558714857ddf7d3c4dd20d8f31e83750813ddd36af1a3a79a093be591b5fba080002000000000008000200ff7f00000a00010002020202020200001c0006800800050000000000080003000000008008000100feffffff100084800b0001008c040c668f28620006009800010000000400ff000a00f500da8bd33bb3e700000a00060008021100000000000400ec000400ff0008009e"], 0xd4}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="50010000", @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010f58e559f919fbe300", @ANYRES16=r6, @ANYBLOB="00042abd7000fcdbdf252700000008000300", @ANYRES32=r10, @ANYBLOB="06003600faff00000a00060008021100000100000a00060068c52de372250000b9002a0005130994ffd4ce3b8ddc855a57fc28a58838b0b93e8456080600080211000001e400000008004008021100000100400100080211000000160000080211000000ff070000350000080211000000ffffffff420000080211000000040000001e00000802110000010300000030000301b9bd06080211000000822507010f080000000802110000017f000000050000000080000001040802110000000000008075140000040031c7b00a02cc1ccc2da5b9627a0d186b0000000a00340001010101010100000a0034000202020202020000"], 0x110}, 0x1, 0x0, 0x0, 0x4000001}, 0x18001) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000340)={'mangle\x00', 0x0, [0x6, 0x2, 0x4, 0x3b, 0x7]}, &(0x7f0000002600)=0x54) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x1000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x33}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ac1414bb060001000200000008000600a7"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r12, 0x100, 0x7, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040884) 361.229995ms ago: executing program 3 (id=793): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002380)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x82) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0xeb, &(0x7f0000000400)=""/235, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1a6b7, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r0, r0], &(0x7f0000000740), 0x10, 0x1}, 0x90) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x1830802, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRES32, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=0x0]) read$FUSE(r4, 0x0, 0x12) write$FUSE_INIT(r4, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x8001, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000081000000040000000000190000000000000000000000000000000000353e27d7d9b4e1fbe5c5b408d34513bb6febe9a8c78ba7dd4cc8a4bb0f7b7e562a6820a1421a738c977e0aa398e06ba72a1692e14222e44a1a4016ef3b67"], 0x0) r6 = dup(r2) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = msgget$private(0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) msgctl$IPC_SET(r7, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff}}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="cd21612b352e0e0500000000"], 0x24}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='GPL\x00', &(0x7f0000000280)=')-\x00', 0x0) 31.452075ms ago: executing program 2 (id=794): r0 = open(&(0x7f0000000000)='./file0\x00', 0x441, 0x1da) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)={0x214c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x2138, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0xd2, 0x7f, [@measure_req={0x26, 0x10, {0x2, 0x3, 0x0, "fc49d05c36efbe2f6191514432"}}, @peer_mgmt={0x75, 0x16, {0x0, 0x10, @void, @val=0x1c, @val="1bea39db9099ae7780fecfa32cb250ef"}}, @fast_bss_trans={0x37, 0x52, {0x6, 0x0, "78c3cee253cc0b21612869d855ba6257", "92126c32dfc1282eedf659a217f4e46c446683a2f8477e1642ac3a0ba0bf81cc", "fa73cc2a9a13cd2c8a7a2caf8aa8aa7d97cdd8d49690b9d69b334d5b295ffcd9"}}, @preq={0x82, 0x41, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x1ff, @device_b, 0x1000, @value=@device_b, 0x32, 0x81, 0x3, [{{0x0, 0x0, 0x1}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0x7f}]}}, @mesh_id={0x72, 0x6}, @channel_switch={0x25, 0x3, {0x0, 0x46, 0x2}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x7f, 0x7f, [@preq={0x82, 0x4c, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x4, 0xb7, 0x1, @device_a, 0xad5d, @value=@device_b, 0x8, 0x8, 0x4, [{{0x1}, @broadcast, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @broadcast, 0xce5}, {{0x1}, @device_b, 0x7}]}}, @random={0xf9, 0x13, "febb3e0f7a22bc2763a9b0b17cfe47303517da"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x13, 0x8, 0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}, @chsw_timing={0x68, 0x4, {0x2, 0x6}}, @ibss={0x6, 0x2, 0x216c}]}, @NL80211_ATTR_BEACON_HEAD={0x139, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x8}, @device_a, @device_b, @from_mac=@device_b, {0xc, 0x420}, @value=@ver_80211n={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x8, @default, 0x7dbde27ab581bf83, @void, @val={0x1, 0x6, [{0x30}, {0x2}, {0xb}, {0x12}, {0x36}, {0x6}]}, @val={0x3, 0x1, 0x68}, @void, @val={0x6, 0x2, 0x9f0e}, @void, @val={0x25, 0x3, {0x0, 0x64, 0x81}}, @void, @void, @void, @void, @void, @void, [{0xdd, 0x35, "4be2a9f98aacec3166e97f8a06aa3402215a8d5c01ba5a2ca935691c3ab10bd0ed17351ef68faf4b5987d2c67d85534bc7ee7b09d1"}, {0xdd, 0x9d, "552f132575f6ea3dd8d6e342cdb857c1188f99fb899a766923904863f9bcefaf35f03f5dde0f013d41ed5544a890c5511c2dfd9433a734cad3f2cc6df26292a60c3770115a6f8566357104d9359cebf0d0e4144399240f3c6e7f43bb182e1fd1c6133167506ed9341db89cca60703d256b50a0ac7e269cdc2b1e12ce016ed7546416917090382690e411486cef38ca746a9e89026fb3fa61786e6cb9b3"}, {0xdd, 0x21, "5bdee2ddb8384b80b1eee32a3751ff87b6ccf77700056157274cf296191e3952a3"}]}}, @NL80211_ATTR_BEACON_TAIL={0x1db, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x2}, 0x9, 0x25, @device_a, 0x6, 0xce60, 0xdac}}, @fast_bss_trans={0x37, 0x124, {0x2, 0x8, "1c31e4d1aca2b984267eb627677b0383", "012274419119a293085f781ac73f2e069546ea86403ef40c032abe8a4db24195", "bfaf13fc8442b8b2efbdec9d75dda7a0ead709c366b2f41cc3e251a92d1fa4f3", [{0x4, 0x21, "70e45c6125c0b4303a615ed8e8a3abd2d1565d336ee474ede981e7845c0b993086"}, {0x4, 0x1, 'y'}, {0x2, 0x13, "ad79810af54839d8d9ca31606c1a4359d8c299"}, {0x3, 0x24, "88a06bf7a98c6794ed56f921894015821e17dc509e66046030927d682382686fbbfc9d9a"}, {0x3, 0x5, "159d34bc38"}, {0x2, 0x27, "830de3d3b7cecda035b4aa090d8968d43d21f58511b7d0d504a3b4a8b53ffbad474893e5a326c0"}, {0x2, 0x1a, "9a5692bfea9128a9c569aa5ac3c0cadaf3c6acd305ca449f4006"}, {0x1, 0x23, "28cc4dae8f12a6c925dce22d24280127bc9e8748b9fdbc0b3fec235218e7fa22a1cca8"}]}}, @tim={0x5, 0x3b, {0x3, 0x8e, 0x8, "e9c29df8ef742ed5097335b1ef4bd7d300064dac9f6bcf835cf7a04c1e8bdc7a7aaf6e49dda467fd570b133eec0533081d709ca76c636824"}}, @channel_switch={0x25, 0x3, {0x1, 0x68, 0x1}}, @mic={0x8c, 0x18, {0x7ff, "5169dd935102", @long="1947385db436b43e4d67a926d77a390c"}}, @mic={0x8c, 0x18, {0xc03, "b02f95b0aa58", @long="fb6d930c8f217d3cddaf47d60a050bcf"}}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x4, 0x0, {0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x400, 0x0, 0x3}}, @gcr_ga={0xbd, 0x6, @broadcast}]}, @NL80211_ATTR_BEACON_HEAD={0x2f0, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @device_b, @random="7d8d4338c826", {0x9, 0xf8d}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x0, @random=0x101, 0xa084, @void, @val={0x1, 0x5, [{0x16, 0x1}, {0x60}, {0x12, 0x1}, {0x30, 0x1}, {0x2}]}, @void, @val={0x4, 0x6, {0xd, 0x2, 0xfe01, 0x2}}, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3c, {0x29, 0xeb, 0x2f, "b4fb10efb1236c711ca2e1107768876d2e526aa14cc3031ce20bb924dd292e4faf72cd192750e410582fcd1dc5965261885b2ded12de51fee1"}}, @val={0x25, 0x3, {0x1, 0x64, 0x6}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x0, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1}}, @void, [{0xdd, 0xfb, "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"}, {0xdd, 0x96, "17031f55fff1aba188c34638fc45123effaeaf6974d818bd9bd27b099ccc425195ddf552a80571cb1b56dc427206628a1f8b4a4c39c73660b158afa1a59bbc0269504ed1fea505fd8f7d322aab2202c836597475e0f92c908d1024b1cd17b78f23e878bc51b05727cb885962f0f5557cb12e3c928af2a8305ec45b43561eefed90b555c5942398cc17d758bcbe8ef18813820108e736"}, {0xdd, 0xc5, "b4ea7d4764f8517bf35831b018e70ed143f4d0633d3d95ea3c92d7f96795df220ef8a28ce14aa80a8a81132a9ede4204b40293dc24953d1d2d66563b916fe467ede9231f3b4fe73ba205ec86a15e7dfacb916241da61fe1039afbe752577ac7af6000af0ee6ba3adec9974c6ffb4d89f1d7777cc4b1412c4b9e8ab3df74048a6f6948a3877c01a8912cb13569af352c7c4d30dc1b967d1c24325c73421d4e276005a76722fed106aeaab80ac98e426c58890775cb4d139d383fb91cc6b2d8825999953c65c"}]}}, @NL80211_ATTR_IE={0x18f, 0x2a, [@perr={0x84, 0x88, {0x6, 0x8, [{{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x1}, {{0x0, 0x1}, @device_a, 0xd0, @value=@device_b, 0x2f}, {{}, @broadcast, 0x2, @void, 0x34}, {{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x23}, {{}, @device_a, 0x4, @void, 0x14}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x5}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x25}, {{}, @device_b, 0x6, @void, 0x38}]}}, @mesh_id={0x72, 0x6}, @random={0xe, 0xe9, "bee928dc5343b19ecfcb9ad4167090add80aed8536bff61750ecd1b0bb63afee80f60f5a335258d3d71f720c63b63bf3cf1ec1e8ea20bffb06e7f556823132dad83653886f4992e0e1a1ee7804020fb587f2f18be83df2d9fb82780cb64c6cd19599d99af7d3eac7e27516acc991bfc11fe953d298f3ec8400bb78551aa9f81ca2a39b899317289ad1c0b6afa3feab1425863eb19281ce80001708717865322394ad9aff775df2a46b0a46dbd561d3144e50c94eeb84c9a733adef3d938948d16443e8cfb97a18b37639c88900d6373f6b9d7387d2b60f2bd309443a8ce69025166503444c1e0d9612"}, @channel_switch={0x25, 0x3, {0x0, 0x24, 0xf7}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @chsw_timing={0x68, 0x4, {0x9, 0x9}}]}, @NL80211_ATTR_PROBE_RESP={0x238, 0x91, "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"}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x1, 0x5, 0x6, 0x4, 0x5]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x8000, 0x0, 0x1, 0x4, 0x1, 0x0, 0xff99, 0x3]}, @beacon_params=[@NL80211_ATTR_IE_PROBE_RESP={0x1125, 0x7f, [@dsss={0x3, 0x1, 0x99}, @measure_req={0x26, 0x1003, {0xe, 0x0, 0x10, "849ffbfacb590c63ea1c65b5e3dd13056ca5862aa7bffbeca179b6afa73124ba2a6d227b91fbacd2db2b9d37c8ece65cffca83dee0efc21a2b1a53e0c84e7fe74e77c5e9fafc52f757017a4f6ea5354f23dcc8517d8ff292546f1688f32f43c36e61fd571cbb1b034db086ae2b809bf3207e0969c180895f54beed1a7cdb365c46d2d2fae5c248b5326e6e8636a21ca539a6e0adf66dc0248757414cff026278ff897ab404367f0e34bcfd0f401e11bc6fed187f4ef7aac1fb30af0be08ce5b23e7a82a62a2ecd229f719051d5f1aa1cf9053434d05af6039e876cd02c314975c32c3b3c20e5b391650fd3d5a346d45df0aaedf2c31028b088f2ce57571e4e3dec0ce58848d5ae63b5473f1675568c6045390b32a29aac9dd3435a29fd9d549dee0f24ab8c4120e8050807fc2c85a7414bb339422c142e98179c66e28ba00c830b78dd10ddd6cc68fd851b4a6726f2c91c3121a56ddc126859bd4131c65d1e17159bd7a65560231155e00da8ae8fdc477c766494366cbef67bef9c5ae0ce5ed61b3244f5bc4cda1205410979f11cbf0946bba13f2a6c3ff1b7fec7955c395ab4dcf311711a9fd18a7bd376a50020168b70371850dfe1b4dcb59dcaa12a8482e3847e41e023a2e8b23a67a5772f090e8c16b4edeecd1d4675ea1e257bec4ce35ed06c76d3d93894a73d280bc515f3d3197b206741af51ff4e6f23b3c2c288e30237147658d9f46e9c11875c50d06e70572ba483664b167e3dbf7bd114162118addc64c742de6ff3fccf6d3ffc1391abac818cca4d1cc1ea3d1b15066b9beebd97dccc4334ab7acc0c041b56c5f75de8587f5dc268cf199770b1d8137723f52a7668172becfe793ffd84bf73250eda638abd9cc57e65504dc48a0c8fb4d9d24907b49ff1f68fe33f9a2118276546c72a5da19f1125e57e66062d5922d1c771040e810ba59b3b7c6397f3314e363b92887e90a4448e000c3126f9925b69d444e485ed6d8f340bfbe4028d3b4bf621c578a2618de80361ad013d71278221526665555fe8aed2b116d379e458a55c1d09f11c04b1196d419a5d1bff7f740bc8776cd2a3f5d56b772e60330b6d32f3e1d34453f05094c55084b569ccc0933cddb620afd2ae4bae9419381daf4fcda706c13d12b31199979cd47291843b3d6c2e5c076ed9bcc8eb32d0524f4cefeaa9b16f4cad41c9be0744d42a54ffd273ade3469bd56564e50a3e7e7d4db8f1ef89ceaf5570af734ace86aa171240dfe870c26277519ae24752bf853953cd9109bc3a811494baeee21e0abe7b563787fbb205534a35d67eb0eefbb2e6648b49a389f7ba3a2040a2b013784ee4bc543562149459a99e19684b9aef241e8706073a0af8b18c61fb5202c6a1caf160f12a962cc5809c94d5a583a4503bbf077f7aa0743e1270ab110028d83ef0078a77abee029578bdcd0f1522330c1224d9ef7525752bde03dc09bb45b44d2b0a15d0d60e5c7864b6c9d13231b7683936f0d17238c246eb433763bf9c18cbdb8e233cd5cabaf3e91f0e7e2ae472d0307cb0b99001525f0176828f41fe773d321ec273ffb2ad31957284c2b82298fbb2703cdc5b23441c549dc77ae8ca3021bcbc3dc98a0506abe65d32d577b5283d79a7e6807fdcfb016d0ff9dd652f6414aac25569d3fda4abf718f061fe228d99d7cb7f718e4df310eeabca9398e77f089223983d9fc0c67e2130a3386b8eaf8db74c697cc75a71eff7e4673bdfe6b0eb3de9a99396bc14dc42b84100ed4891aae0651379188fdcf4efde3d33e6cb6923b642ed61a14c68e54220f1b7b69c6455a188fbbcc6e229941ef64e7254a423403e391e6b4bdffaba0f64f04a99ef51b0322d97511ccc3022f1061856b93592646977a81753948a29ab41a21f11914d2e9f54737ce231e8c3e40523c09897250d2d4c7c2f2e9bc9cacbd3197764ad75a69d652a2fa5f2948176e862d4567d721cb11c3dfd6f9800fa3d047075c5975f495ada6b8c96310bc7e8f910436e0f52fdb00a2b22bdec0a5809dce9b6a650623466f90f45537daf14f7a55aba1f056661c42bca52e53c3139acc4102e78a326fe86e0dc892c288e76d492e016823a1559a4ca8c4964381cd466497f498232a6362490b63a9d52f695f0d7732fe20b535026369c9a74cb952f3f25b4bce3d5c61b091acd36042b43222063609368c914b33a5edc301fdb76833dbd10b6bdef94475fc63f25a655d8ab46705f434c5f911ca2921fc2e74891b0be85dcbeda5e85ce2471f623b8c7d29d995752a348ead03e3629cc1f6ae4c76080b21539e2cca43831073bf155a4c6a8cea8dcd4bd18faa0b0b336003e026bf8383fba95060ee5ac53a1edb03532deec3e74683012dd623ad87d1740575024f4e7f7783b27e1df837a60c4bb23104b0bce8b6b2bb41e8d9453286d0ef701af44867c6712dcb80119d200082675295886d7733ef9f9a9c4e3bac3a9668e33d475d3066758ccab788f008b4b0c25603989e46027e479e74650f979f98a3741feedaee138725170a42a1ba6a82ae867dc84db09b84ca463dd593fa2586df7cbaa6553c39bcc221756ccffa3daa48a91ca6e67a5f8f09c6edad131085ad5e1ba311a6487714d8cde097181b50c3852c43d818efbb9c28943813c1012d2986f21ad15be8b0f083fac3f72c631e692019478e657ce246ade060de371507286d14f5ed60cbff276c40fc92dce480452cc6e245cff509674ca98734f23fbb94144c05c8a2de1937ac15f0c018f4cf9fa723f1309fa0bb710d24dee0dcff690f257eddb17dee803cfd829c42bfa7d5812018c82252de951be8f4fd4b3360ffe78be7624958b47e9049058f31ebe25503f979afbbc6fe449d6671fa9299a2cad09f82fb94366cd16ce34db1cac4a08be4d07e655f693089c5877b8d16856e5f88d661aa18849ec3731efca6164391b2b849686427ef734da1e073871fb978ced3fdca66531b8e6ee7b2243a5fe62e743f728d84f22f1d7b65358df2e30a81d508003e7f47ca643b89c984f5f8b57de49d7c3b244cd781f1f77d1545f79d1a361066e7817b6a36884e159724e6ca9b17518dba9faa4476c023ed5552b6bbfee0aec9b5e1fe2e2db0e70d2506797c11a1e7209175df6e27f84db64929e422b5b6b64de39a094bb0f459adc778520140ae8e5971e95a9c0bbbcc1e8d3ca75de307e97146c85ba65e77e57cc75fc275424c034ab9d62620af377fbe2f393cc9bd566a790bc8ee2b4e71f71b747a2248a5ee8d119443b87cfd1f9caedc2706fd5b717b64eb62bdc72fa1a791079d2a3695f0c6eb6bfa078fc88e631dbb3ad1b27e281bab86afc16845f8ca6ca7fc77187e29812a016304991dfcb686269939e785b717a3826c6fe042a4908c4fc094ad6514738e8df6ccf855f8f5c0075a99e2daf4b40a26d18979014eb418f28205f1dac48eb9738e67f5b9c58215033437f74038657d20dc35e2cb8b98e1ddfc7ac20cc265db0d8dfaede9b9e97b4548c78aa93b28d93b62d1b81f187c488a404647412ee6df85720f863e07a23a0ea5af6708691b935f5f4a268b23181d0b10099bee3834a0638c9850afb5b49f040c41f230e6504f507288f439d6d395beef5221995d0d8e6a4c689ee6bf8f2bea654711a1a513fbef55c1970d2a0d2f4b1ee6aed2eca1843d1dc58c5c3b9aac8e42c08b367d7cbe4db542bc0e58c7689ced26c4177221954b3266bface35f4c573a8619d34eb9142595a9617a8ae00437f16dea736a979618e1d5906a082c1c195656030cedfae528968b5bcbd917f2661dae3b95834e1c7e5ec0fcc6a32f37a0023b8eb0aeb2592fc6a9e664a177b65f532a666b8fbaf302230b536e30c126d4b0f70c9704d2a45a45486f1963837e713dfe457f36b7540d883a53ba1695918e81dd508d6185ce5100dc360e8c2d395ee5604a7e69f6c622f9a3c0e6bf107d7fb1cc087c9cf1ea8251bab61196c2e9957d8853941806e1b52fe0a0fc879d2cbf931207d85faae11863882993306d46a43c6687c0200e85d539f1cd42c9489a5bf27cd9a6bc6de85c88b4140441a861fc50c812c739c8268463d5e1f38e16e6a1d9b6e42a71eb2d5e396db531a3fed3b689732c0850605d67de1296710739bc2b3efeb96beedf82f8d6a8f542119923a9339cebf3c3c966df302643ea2ee6c33d47d01c63b13ec4bc3fb706f5911fc734172aa9a841d8c3bc246fb7e31b27ae4f994aa01d83233d6f62035e080ebd00e7796e5c211a9350ab174d9e580f238ac91b20d93a2330ee3586f14ba27e3f88139473b8150c2af95cc906860b9091207d96ecb082e3e727a268ec6f4c8f90ee79ea73d8cad267ff788d4fa47ffb0218226d08219eccf1424486e80fc978c0276d05ea5326cf2f205327e9b621356a6bfc53a37ef0dbc35de52f608cf06ae643ba658e5b01db6cc174e4d963d9c8d0bc6e4e5308f9278918a91d681fc8c713c5c5f3fb403127f05569c6c84464b0dfd948fdab24d12c5c4fb329651fc08e3674db11ddc1a60d730c90ce62f520dcce277679ced3696072171c21ec249ca18783a0540be79e85467a0722ff53fa54dd7701ca30fdf86165fe695595da42c31f6f9fad73be0ab5194c2f34f27d56241ac6674d7c6b4a1c0fbbf726730977600199987746c66c884fbf3cf683c7fed1a5df9a5f233466d7554ac006af6b378346f07397fd48303de6e95abdcc4a901da675af60f71add9d86b244b0ec5907f379835620a277584620feca8eeaa2165f0a5ea94a5667c4bc9d80313f6df8324e7ec9515c9e21d8f7a1f65788e0473c00d85605767dfae803c5ff233faafafaaca26629e6a1f71100094e4889be54a765f3d368d80bd39fdc0918b8f1e06b74c2077415bf856b54efb22189a4f6b7e90928826757eb848e03e5cf9554e26736d93eba784e8c961d2196f67af213dfa2b388395d6738366989b2a4b364d82107e93883f084f6495e68cecdcc7bfc16e17c8f4aae8e66dfacea380222c82a349eff57c40a0439602f1372defc1d7a5d385e233ee16883ba779b4d0beee40d79591ea8d9f6b508cb863f9b117f2fbe82865f218689be381acb637b464b5e0bc4495d1e9def0dcd183560fe21d9925f44683b7e329e76f9dcaa99245685cbda9d1045e72df32d027b73efa5ea4937b56988d37eec603e1d1115c01f545f33e83cc6dcff4230795f48dd50033e7c62d41af5fcc4d4d3320830b412425dd5308987cd679d50d9433b2292cf0c6c30a2b801a0ef3df3c7b92e8647184d9750ea31f722cf5cd2f7e5a2fd5fead56ab46eb8bc301785acf8cb4785bd963a3013e301dca6c6794e2d48a7795e59df2c6b8bb94cd1d7c271719bb9d765baa871f7319bbc9517f15a6c8c500cdd1fe6d8d085cd5b015d26ce4dd8d792d0912a8f00e84216fecfd1d392fd50223fbe05543ede47f7de2685aa9427b3013cec2df47704fa0155a5bec133fd7c42dfe4bf9a8b4ddb61f8641385db6b691734352cf5584c9bd6b469c516a9e53d5654ea48515d0983c96eb625818d16516942d92a65e0f8a2ececcfc3f2746d865d5efca96a022b8e884a6d42aeb337942ce6540257ff58bbdc1e6f801b0575a96086d5111cdcbfd2afd6d7c636ab3fbaffef204f4d9b9e9afa501fb89f4065eb077df91ea51031316e07fb15525975e09b0115d9f89a6f59a368e28dbf839ab26895b6d472c9d247a9429a99e226292c47556772982e4be73e1ed95bd82107070eb727ec3216fdf984b5cdaa58a24800de10c2df7c2db2fcf434401"}}, @mic={0x8c, 0x18, {0x547, "7e4ca86f93f3", @long="bf252c8b9170f4fe106aa863f8a61116"}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2, 0x4}}, @fast_bss_trans={0x37, 0x52, {0x5, 0x0, "56a82dce807801c4685e1d798edeaa99", "94c1e565da0ac8851b0ca42f4c80dffd7d5690b31ac805fc99dd485dbea5ead1", "21e920f4243f9bb2b96d8a74ce2f5cdf5c963adab2edf851a9875510813ddcef"}}, @tim={0x5, 0xa0, {0x9, 0xee, 0x0, "4465b6e8a5fa02dc750e19bdb767ae814a9a3535a0510dffb7325615bbf0661c3b34ad65d881d5ccd23915f8d5e2704bf3d1c48e51c440290a24e554560b8e62d93ead66f2d1bc9ed106a54501c9b0ea7ab8882f16eab43d51677e25472137b2ece447253d127a3782c21e951d6cc126da13c0c1fb0f36f3f5ce9bfa7ba2903d0c758101083c7780e75f651a7bc29653614f144e9a883f6bb4ba3df5fd"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xd2, 0x7f, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x7, 0xaf, 0x5}}, @supported_rates={0x1, 0x1, [{0x1b, 0x1}]}, @measure_req={0x26, 0xc3, {0x8, 0x3, 0x6, "3df55a73e321c88a06c70bb991b4f72dfc516fdf809fb0b81284de4e3a1b1707653bad5ed60f76f997780b8758d95f09d6fc59501fd5c43af174a98bf2048ccc69afc624b8bf4e16975f330ece716a6a2e0613aef55af6f51d5c0ad97c5ec1d997c56fb5735a9df7e5db6ed076954ea183ef0468692eec7f34479d81f997970bb2cbce5d37f81717dc03c34094525fb3fa429a9d986134d0a3ba072aa838ba93338f818fea84484af2580d57eadc7e1a4ea8dc87d088ffe7a551444c3df171b4"}}]}, @NL80211_ATTR_BEACON_HEAD={0x32d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_b, @random="b2eb5df683f1", {0x4, 0x5}, @value=@ver_80211n={0x0, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x4, @random=0x7, 0x2000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x9, 0x6, 0x7, 0x6}}, @void, @void, @void, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0xa0, 0xad, 0x7}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xb, "059f9ae7c93eea97b106d2"}, {0xdd, 0x6, "382d7ec55f1e"}, {0xdd, 0x16, "54936fa0cca9324e7376137d5218a7ade40f4724701e"}, {0xdd, 0x24, "e5f597edf45844cc6755d7b8f9fd06076de4452206bed3094d2b43a8f0c56ebec04fe986"}, {0xdd, 0x7f, "b4ef0475c681861382e437601ccb7adb94eb8ad42ba21c01d3829ffb33a0971f2143e55804f5b5c074acb057f4d0e4eed402e04650d35f64a9f80044cfa6894cb8f8a455c80586bfee8b72e98417116434a4ea3b0f608e8eeb3c2d982bac808b2343aab6b3bcdc64285bb0c9b33f4055b93ab8530995fbbde54c79d53be948"}, {0xdd, 0xe3, "cf958453730d1e98d729faf5eb191c98821aabe2c9655510c4cfa63865f212a1dffd352121513328a3d9e3fd202807872891d4ec3398a8f680cce230fca0a1c55d6d13c7c855f67903f6efffbd8fcb460423a62110f58a83218618e5b3eaa5b76fa890e9ae534cd0e0e8583bc98fc0aba570c309a90eaee4831192c9b8a931ffd11d962c518b7192ecc723d70ae9a1f555932d515ea9c5af22026d40701e6efd1eb26e64e791931918be2e67352251b4bc46e41ec0b37ea0e4bc07bae9842173f902163a2a1a67af54f71d649cea63c3edcb649b9bbe586b1fdb0e47ce33b9499297fc"}, {0xdd, 0x16, "655c690624913b0f794e4b4ffc93b0e865c73dfcce52"}, {0xdd, 0x95, "f72550050f67e4483085a75301486659e0d6d7c2f32228bbcc2c7a91d4378c778b3f33e214154644d7a3111c238d37335e2696c6eb54220c07bd860f5f3afd2082f9f81ddd5e2574864c8da5264e4a2196c6c1dcb97c3340a040b0458822be7bdb3e1b1eae3f28a2414c5628ca630269eff24d2f458475c355102402569a18fdbe4d0322ccc71b4630d45b00db80a18885c4f00a63"}, {0xdd, 0x76, "80dc9a4066655f7c1096223c609fd11fd92c741b14ee542eb5228ed004935c7688b106b387ac0289a68c7440e125c82163e506c2c58ef2d24db7a2f3dba9e8dbb698da25f47e50d96839b34deaaf1ea28fcc3ba78823621f431ebd39189e227205589ca7bbb05d535fa64f45b1542594161f31ccb240"}]}}, @NL80211_ATTR_BEACON_TAIL={0xbd, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x9, @device_a, 0xf, @value=@broadcast, 0x7, 0x3, @broadcast, 0x9}}, @mesh_chsw={0x76, 0x6, {0xdf, 0x8, 0x3d, 0x8}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @fast_bss_trans={0x37, 0x61, {0x80, 0x1, "cc17ca3aa631a13e56fdf5e9fee71495", "f28e8dbd75a349ec276f5096b79e672ef422237fa2a0255022f055646f11c6fd", "7c2266e5f3d8b8d2b94abd9276cc99fef631a581343c434c552a55415f455ace", [{0x4, 0xd, "2c577109417c166cae2f174f7e"}]}}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x1, 0x0, {0x3b, 0x1, 0x0, 0x4, 0x0, 0x1, 0x1, 0x3}, 0x0, 0x0, 0x7}}, @gcr_ga={0xbd, 0x6, @broadcast}]}]]}]}, 0x214c}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = dup(r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x310}, 0x3}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r6, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="700084801000010072213a37314985f82566aa242400010034558714857ddf7d3c4dd20d8f31e83750813ddd36af1a3a79a093be591b5fba080002000000000008000200ff7f00000a00010002020202020200001c0006800800050000000000080003000000008008000100feffffff100084800b0001008c040c668f28620006009800010000000400ff000a00f500da8bd33bb3e700000a00060008021100000000000400ec000400ff0008009e"], 0xd4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000a80)=ANY=[@ANYBLOB="50010000", @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="3301330080000000080211000001080211000000505050505050000000000002000000000000145000000100030124040600000000000005f5204903b81f0eb513b1451feae34fe032a1b514256261b428cde2bd214b230b96948a4cf7bd40a472449a3da3c5ff224435fec3e2423d93599a55d53ea25dfd3dda0c944df7ccb535ddc28eccfb08aa8abfbf76751278ae37cc24c443d5c3e32eda79508217e580845035bc9aafc668f02f097551d0e30a6158ddecc4f64e7173d2ce39139c14bb06e2c73fb15a8aa14c21f62331599793f4060d4ba5792efa0103b55ecd200f128b68534fc2281c764f93ae57a4daf6282bfad870b89332918d1259d1fabb9e40ba28d662475390949cb6cebb13d9565d28ddffc60faf78c7a310f41cceaccf47cd1029ccfb3ea5f5d9404a0c4cce5d959d8415ab450d96d642d221030000c1005e1f9be31a0333e455e4e0cdc4"], 0x150}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="10010f58e559f919fbe300", @ANYRES16=r6, @ANYBLOB="00042abd7000fcdbdf252700000008000300", @ANYRES32=r11, @ANYBLOB="06003600faff00000a00060008021100000100000a00060068c52de372250000b9002a0005130994ffd4ce3b8ddc855a57fc28a58838b0b93e8456080600080211000001e400000008004008021100000100400100080211000000160000080211000000ff070000350000080211000000ffffffff420000080211000000040000001e00000802110000010300000030000301b9bd06080211000000822507010f080000000802110000017f000000050000000080000001040802110000000000008075140000040031c7b00a02cc1ccc2da5b9627a0d186b0000000a00340001010101010100000a0034000202020202020000"], 0x110}, 0x1, 0x0, 0x0, 0x4000001}, 0x18001) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000340)={'mangle\x00', 0x0, [0x6, 0x2, 0x4, 0x3b, 0x7]}, &(0x7f0000002600)=0x54) preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0x1000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x33}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = socket$netlink(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="1506000000000000004c0100000024000180060005004e22000008000300ac1414bb060001000200000008000600a7"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r9, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, r13, 0x100, 0x7, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4040884) 0s ago: executing program 1 (id=795): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000001000), 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000001480)={0x980001}) openat$vcsu(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000240)={0x3, 0x0, [{0x4000, 0x0, 0x0}, {0x3000, 0xfa, &(0x7f00000008c0)=""/250}, {0x10000, 0xb8, &(0x7f0000000a40)=""/184}]}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x1000002, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x104, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0xfffffff8, 0x200, 0x8000, 0x5c0, r3, 0xfffffff0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r8 = socket(0x0, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES8=r7, @ANYRES32=r8, @ANYRESOCT, @ANYRES32=r8, @ANYRES8=r5, @ANYRESDEC=r8, @ANYBLOB="7c2dd2983f135746e28ad95a0d63cf067d041c177343d7fdda3cda0743b053a8bc365864718cdaca817bc80264c0a67ed33ab8bcacb50712abff1c9f0ebe50c90fa8368fd482f0dabc062605879ec208be37d26a88f769d46e442408b0280556d3b8be59fbfa422062018adf832cdbeca15b76b2f38d7feef3bbfed676bbae1781919d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r6}, 0x90) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x60600) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000003c0)=@abs={0x1}, 0x2) connect$unix(r8, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030"], 0x15) kernel console output (not intermixed with test programs): 961][ T6365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.298363][ T5211] Bluetooth: hci3: ACL packet for unknown connection handle 1993 [ 143.732275][ T6377] FAULT_INJECTION: forcing a failure. [ 143.732275][ T6377] name failslab, interval 1, probability 0, space 0, times 1 [ 143.738356][ T6377] CPU: 1 PID: 6377 Comm: syz.0.340 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 143.742037][ T6377] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.745890][ T6377] Call Trace: [ 143.747109][ T6377] [ 143.748389][ T6377] dump_stack_lvl+0x16c/0x1f0 [ 143.750393][ T6377] should_fail_ex+0x497/0x5b0 [ 143.752109][ T6377] ? __pfx_lock_acquire+0x10/0x10 [ 143.753949][ T6377] should_failslab+0x9/0x20 [ 143.755511][ T6377] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 143.757345][ T6377] ? stack_depot_save_flags+0x28/0x900 [ 143.759236][ T6377] ? skb_clone+0x190/0x3f0 [ 143.760895][ T6377] skb_clone+0x190/0x3f0 [ 143.762729][ T6377] dev_queue_xmit_nit+0x38f/0xba0 [ 143.764977][ T6377] dev_hard_start_xmit+0x56/0x790 [ 143.767179][ T6377] __dev_queue_xmit+0x7ba/0x4130 [ 143.769104][ T6377] ? __pfx___dev_queue_xmit+0x10/0x10 [ 143.771226][ T6377] ? rcu_is_watching+0x12/0xc0 [ 143.773116][ T6377] ? __copy_skb_header+0x2e8/0x5b0 [ 143.775183][ T6377] ? __skb_clone+0x570/0x760 [ 143.777196][ T6377] netlink_deliver_tap+0xa8a/0xcf0 [ 143.779343][ T6377] netlink_unicast+0x604/0x820 [ 143.781305][ T6377] ? __pfx_netlink_unicast+0x10/0x10 [ 143.783646][ T6377] ? __phys_addr_symbol+0x30/0x80 [ 143.785733][ T6377] ? __check_object_size+0x48e/0x720 [ 143.788085][ T6377] netlink_sendmsg+0x8b8/0xd70 [ 143.789738][ T6377] ? __pfx_netlink_sendmsg+0x10/0x10 [ 143.791530][ T6377] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 143.793460][ T6377] ____sys_sendmsg+0x9b4/0xb50 [ 143.795501][ T6377] ? __pfx_____sys_sendmsg+0x10/0x10 [ 143.797464][ T6377] ? get_compat_msghdr+0x11b/0x170 [ 143.799649][ T6377] ? __pfx___lock_acquire+0x10/0x10 [ 143.801524][ T6377] ___sys_sendmsg+0x135/0x1e0 [ 143.803361][ T6377] ? __pfx____sys_sendmsg+0x10/0x10 [ 143.805628][ T6377] ? ksys_write+0x21c/0x260 [ 143.807555][ T6377] ? __fget_light+0x173/0x210 [ 143.809495][ T6377] __sys_sendmsg+0x117/0x1f0 [ 143.811513][ T6377] ? __pfx___sys_sendmsg+0x10/0x10 [ 143.813537][ T6377] __do_fast_syscall_32+0x73/0x120 [ 143.815862][ T6377] do_fast_syscall_32+0x32/0x80 [ 143.818050][ T6377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.820843][ T6377] RIP: 0023:0xf747a579 [ 143.822522][ T6377] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 143.830920][ T6377] RSP: 002b:00000000f5d9257c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 143.834549][ T6377] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 143.837992][ T6377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.841424][ T6377] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.844746][ T6377] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 143.848094][ T6377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.851410][ T6377] [ 144.185497][ T5274] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 144.305679][ T5272] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 144.319075][ T6385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.320407][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 144.357712][ T6387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.374007][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 144.378367][ T5274] usb 5-1: unable to get BOS descriptor or descriptor too short [ 144.385201][ T5274] usb 5-1: string descriptor 0 read error: -22 [ 144.387737][ T5274] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 144.391535][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.398373][ T6388] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 144.402557][ T5274] usb 5-1: config 0 descriptor?? [ 144.471469][ T6387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.494119][ T5272] usb 7-1: Using ep0 maxpacket: 8 [ 144.498594][ T5272] usb 7-1: unable to get BOS descriptor or descriptor too short [ 144.506697][ T5272] usb 7-1: string descriptor 0 read error: -22 [ 144.509754][ T5272] usb 7-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 144.513723][ T5272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.519189][ T5272] usb 7-1: config 0 descriptor?? [ 144.587897][ T6387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.680140][ T6387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.909981][ T6387] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.932675][ T6387] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.943003][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.968403][ T6387] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.000091][ T6387] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.352309][ T6401] process 'syz.3.349' launched './file2' with NULL argv: empty string added [ 145.424239][ T55] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 145.624210][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 145.629106][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 145.640348][ T55] usb 6-1: string descriptor 0 read error: -22 [ 145.643741][ T55] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 145.647812][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.658472][ T55] usb 6-1: config 0 descriptor?? [ 145.803985][ T8] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 145.936555][ T5274] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 145.948460][ T5274] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 145.951790][ T5274] dib0700: firmware download failed at 7 with -22 [ 145.958723][ T5274] usb 5-1: USB disconnect, device number 21 [ 145.971789][ T5483] udevd[5483]: setting mode of /dev/bus/usb/005/021 to 020664 failed: No such file or directory [ 145.982908][ T5483] udevd[5483]: setting owner of /dev/bus/usb/005/021 to uid=0, gid=0 failed: No such file or directory [ 146.007609][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 146.012285][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 8 [ 146.027792][ T8] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.031882][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.062243][ T5272] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 146.067127][ T8] usb 8-1: config 0 descriptor?? [ 146.071024][ T6401] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 146.086824][ T5272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 146.090313][ T5272] dib0700: firmware download failed at 7 with -22 [ 146.097392][ T5272] usb 7-1: USB disconnect, device number 19 [ 146.372959][ T8] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 146.380893][ T8] usb 8-1: USB disconnect, device number 17 [ 146.388700][ T8] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 146.524133][ T55] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 146.532775][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 146.536165][ T55] dib0700: firmware download failed at 7 with -22 [ 146.540827][ T55] usb 6-1: USB disconnect, device number 21 [ 146.589101][ T6406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.600741][ T5211] Bluetooth: hci0: ACL packet for unknown connection handle 1993 [ 146.694013][ T6408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.701883][ T5211] Bluetooth: hci4: ACL packet for unknown connection handle 1993 [ 146.960262][ T6412] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 146.972570][ T6411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.364389][ T5228] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 147.546838][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 147.551800][ T5228] usb 6-1: unable to get BOS descriptor or descriptor too short [ 147.560406][ T5228] usb 6-1: string descriptor 0 read error: -22 [ 147.563580][ T5228] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 147.567801][ T5228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.572603][ T5228] usb 6-1: config 0 descriptor?? [ 147.605374][ T6423] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 147.807296][ T6414] Zero length message leads to an empty skb [ 147.954102][ T5272] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 148.142220][ T5272] usb 7-1: Using ep0 maxpacket: 8 [ 148.147197][ T5272] usb 7-1: unable to get BOS descriptor or descriptor too short [ 148.157118][ T5272] usb 7-1: string descriptor 0 read error: -22 [ 148.161207][ T5272] usb 7-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 148.167384][ T5272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.173769][ T5272] usb 7-1: config 0 descriptor?? [ 148.481355][ T5228] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 148.487665][ T5228] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 148.491794][ T5228] dib0700: firmware download failed at 7 with -22 [ 148.502675][ T5228] usb 6-1: USB disconnect, device number 22 [ 148.738052][ T55] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 148.914325][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 148.919789][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.934033][ T55] usb 5-1: string descriptor 0 read error: -22 [ 148.939419][ T55] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 148.943681][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.954958][ T55] usb 5-1: config 0 descriptor?? [ 149.014092][ T6446] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 149.222678][ T5272] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 149.237615][ T5272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 149.241744][ T5272] dib0700: firmware download failed at 7 with -22 [ 149.268281][ T5272] usb 7-1: USB disconnect, device number 20 [ 149.561526][ T6459] Bluetooth: MGMT ver 1.22 [ 149.572173][ T6459] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 149.633546][ T5211] Bluetooth: hci2: unexpected event 0x14 length: 14 > 6 [ 150.171521][ T6467] binder: 6466:6467 ioctl c028660f 20000300 returned -22 [ 150.440889][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.371'. [ 150.479651][ T6482] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 150.720817][ T55] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 150.728031][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 150.731674][ T55] dib0700: firmware download failed at 7 with -22 [ 150.767109][ T55] usb 5-1: USB disconnect, device number 22 [ 151.824598][ T55] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 152.014193][ T55] usb 6-1: Using ep0 maxpacket: 8 [ 152.020211][ T55] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.023913][ C0] sched: RT throttling activated [ 152.028631][ T55] usb 6-1: string descriptor 0 read error: -22 [ 152.035131][ T55] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 152.039095][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.047942][ T55] usb 6-1: config 0 descriptor?? [ 153.015708][ T55] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 153.022731][ T55] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 153.029204][ T55] dib0700: firmware download failed at 7 with -22 [ 153.052506][ T55] usb 6-1: USB disconnect, device number 23 [ 153.158052][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.383'. [ 153.885581][ T6532] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 154.205683][ T6533] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 154.454593][ T6540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.641781][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.392'. [ 154.786372][ T6552] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 154.864378][ T2675] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 155.043975][ T2675] usb 5-1: Using ep0 maxpacket: 8 [ 155.048390][ T2675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.057622][ T2675] usb 5-1: string descriptor 0 read error: -22 [ 155.060513][ T2675] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 155.064821][ T2675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.069633][ T2675] usb 5-1: config 0 descriptor?? [ 155.188727][ T6556] exFAT-fs (nullb0): invalid boot record signature [ 155.191550][ T6556] exFAT-fs (nullb0): failed to read boot sector [ 155.194704][ T6556] exFAT-fs (nullb0): failed to recognize exfat type [ 155.346950][ T6557] netlink: 104 bytes leftover after parsing attributes in process `syz.2.395'. [ 155.352816][ T6562] netlink: 68 bytes leftover after parsing attributes in process `syz.3.398'. [ 156.047204][ T6572] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 156.193370][ T6578] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 156.499535][ T2675] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 156.508938][ T2675] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 156.512939][ T2675] dib0700: firmware download failed at 7 with -22 [ 156.524996][ T2675] usb 5-1: USB disconnect, device number 23 [ 156.812335][ T6586] loop0: detected capacity change from 0 to 7 [ 156.821262][ T6586] Dev loop0: unable to read RDB block 7 [ 156.824419][ T6586] loop0: unable to read partition table [ 156.828104][ T6586] loop0: partition table beyond EOD, truncated [ 156.831024][ T6586] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 156.831024][ T6586] ) failed (rc=-5) [ 157.137744][ T6592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.204154][ T2675] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 157.394057][ T2675] usb 6-1: Using ep0 maxpacket: 8 [ 157.414690][ T2675] usb 6-1: unable to get BOS descriptor or descriptor too short [ 157.429424][ T2675] usb 6-1: string descriptor 0 read error: -22 [ 157.432321][ T2675] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 157.444044][ T2675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.449522][ T2675] usb 6-1: config 0 descriptor?? [ 157.591024][ T6598] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 157.641846][ T6602] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 158.151665][ T2675] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 158.162260][ T2675] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 158.166804][ T2675] dib0700: firmware download failed at 7 with -22 [ 158.174918][ T2675] usb 6-1: USB disconnect, device number 24 [ 158.274009][ T1936] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 158.432389][ T6617] PKCS8: Unsupported PKCS#8 version [ 158.453969][ T1936] usb 8-1: Using ep0 maxpacket: 8 [ 158.458822][ T1936] usb 8-1: unable to get BOS descriptor or descriptor too short [ 158.480706][ T1936] usb 8-1: string descriptor 0 read error: -22 [ 158.483631][ T1936] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 158.493142][ T1936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.502998][ T1936] usb 8-1: config 0 descriptor?? [ 158.520666][ T6623] exFAT-fs (nullb0): invalid boot record signature [ 158.523756][ T6623] exFAT-fs (nullb0): failed to read boot sector [ 158.527239][ T6623] exFAT-fs (nullb0): failed to recognize exfat type [ 158.636550][ T5211] Bluetooth: hci4: ACL packet for unknown connection handle 1992 [ 158.684645][ T6630] 9pnet_fd: Insufficient options for proto=fd [ 158.915997][ T6631] tipc: Started in network mode [ 158.926622][ T6631] tipc: Node identity 7, cluster identity 4711 [ 158.929301][ T6631] tipc: Node number set to 7 [ 159.115628][ T5211] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 159.119143][ T5211] Bluetooth: hci4: Injecting HCI hardware error event [ 159.123612][ T5211] Bluetooth: hci4: hardware error 0x00 [ 159.388089][ T1936] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 159.399787][ T1936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 159.406643][ T1936] dib0700: firmware download failed at 7 with -22 [ 159.425677][ T1936] usb 8-1: USB disconnect, device number 18 [ 160.008759][ T6654] tipc: Started in network mode [ 160.010964][ T6654] tipc: Node identity 7f000001, cluster identity 4711 [ 160.017163][ T6654] tipc: Enabled bearer , priority 10 [ 160.284012][ T5249] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 160.338888][ T6676] loop0: detected capacity change from 0 to 7 [ 160.352253][ T6677] 9pnet_fd: Insufficient options for proto=fd [ 160.356296][ T6676] Dev loop0: unable to read RDB block 7 [ 160.358876][ T6676] loop0: unable to read partition table [ 160.361600][ T6676] loop0: partition table beyond EOD, truncated [ 160.369492][ T6676] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 160.369492][ T6676] ) failed (rc=-5) [ 160.504007][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 160.508814][ T5249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 160.517725][ T5249] usb 6-1: string descriptor 0 read error: -22 [ 160.520577][ T5249] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 160.533932][ T5249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.539975][ T5249] usb 6-1: config 0 descriptor?? [ 160.684950][ T6689] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 161.145673][ T816] tipc: Node number set to 2130706433 [ 161.194009][ T5211] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 161.345200][ T6698] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 161.387213][ T6700] FAULT_INJECTION: forcing a failure. [ 161.387213][ T6700] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.392256][ T6700] CPU: 3 PID: 6700 Comm: syz.0.438 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 161.396391][ T6700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.400810][ T6700] Call Trace: [ 161.402224][ T6700] [ 161.403425][ T6700] dump_stack_lvl+0x16c/0x1f0 [ 161.405622][ T6700] should_fail_ex+0x497/0x5b0 [ 161.407604][ T6700] _copy_from_user+0x30/0xf0 [ 161.409526][ T6700] write_ldt+0xfa/0xc30 [ 161.411460][ T6700] ? __pfx___seccomp_filter+0x10/0x10 [ 161.413870][ T6700] ? __pfx_write_ldt+0x10/0x10 [ 161.416073][ T6700] ? fput+0x32/0x390 [ 161.417771][ T6700] ? ksys_write+0x1ab/0x260 [ 161.419730][ T6700] __ia32_sys_modify_ldt+0xb0/0x170 [ 161.421871][ T6700] __do_fast_syscall_32+0x73/0x120 [ 161.423617][ T6700] do_fast_syscall_32+0x32/0x80 [ 161.425423][ T6700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.428011][ T6700] RIP: 0023:0xf747a579 [ 161.429654][ T6700] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 161.437566][ T6700] RSP: 002b:00000000f5d9257c EFLAGS: 00000292 ORIG_RAX: 000000000000007b [ 161.441041][ T6700] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000020000200 [ 161.444356][ T6700] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.447645][ T6700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.450901][ T6700] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 161.454172][ T6700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.457343][ T6700] [ 161.538057][ T6702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.439'. [ 161.543854][ T6702] netlink: 43 bytes leftover after parsing attributes in process `syz.3.439'. [ 161.550093][ T6702] netlink: 'syz.3.439': attribute type 5 has an invalid length. [ 161.553586][ T6702] netlink: 43 bytes leftover after parsing attributes in process `syz.3.439'. [ 161.874975][ T5249] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 161.895075][ T5249] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 161.898609][ T5249] dib0700: firmware download failed at 7 with -22 [ 161.919844][ T5249] usb 6-1: USB disconnect, device number 25 [ 162.495472][ T1936] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 162.588104][ T6722] Bluetooth: MGMT ver 1.22 [ 162.613580][ T6723] IPVS: sync thread started: state = BACKUP, mcast_ifn = ipvlan1, syncid = 0, id = 0 [ 162.674074][ T1936] usb 7-1: Using ep0 maxpacket: 8 [ 162.684632][ T1936] usb 7-1: unable to get BOS descriptor or descriptor too short [ 162.696666][ T1936] usb 7-1: string descriptor 0 read error: -22 [ 162.704223][ T1936] usb 7-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 162.708124][ T1936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.720037][ T1936] usb 7-1: config 0 descriptor?? [ 163.460639][ T6758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.738036][ T5228] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 163.857777][ T1936] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 163.867718][ T1936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 163.870876][ T1936] dib0700: firmware download failed at 7 with -22 [ 163.876283][ T1936] usb 7-1: USB disconnect, device number 21 [ 163.944060][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 163.951257][ T5228] usb 6-1: unable to get BOS descriptor or descriptor too short [ 163.957240][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 163.960845][ T5228] usb 6-1: string descriptor 0 read error: -22 [ 163.964360][ T5228] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 163.968663][ T5228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.976313][ T5228] usb 6-1: config 0 descriptor?? [ 164.295269][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.455'. [ 164.425917][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 164.429836][ T6788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.456'. [ 165.127934][ T5228] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 165.136542][ T5228] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 165.140081][ T5228] dib0700: firmware download failed at 7 with -22 [ 165.148567][ T5228] usb 6-1: USB disconnect, device number 26 [ 165.453546][ T6836] FAULT_INJECTION: forcing a failure. [ 165.453546][ T6836] name failslab, interval 1, probability 0, space 0, times 0 [ 165.459125][ T6836] CPU: 3 PID: 6836 Comm: syz.0.463 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 165.462946][ T6836] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.467427][ T6836] Call Trace: [ 165.468829][ T6836] [ 165.470100][ T6836] dump_stack_lvl+0x16c/0x1f0 [ 165.472149][ T6836] should_fail_ex+0x497/0x5b0 [ 165.474146][ T6836] should_failslab+0x9/0x20 [ 165.476061][ T6836] __kmalloc_noprof+0xcf/0x420 [ 165.477855][ T6836] ? __pfx_d_absolute_path+0x10/0x10 [ 165.479886][ T6836] tomoyo_encode2+0x100/0x3e0 [ 165.481929][ T6836] tomoyo_realpath_from_path+0x1a7/0x710 [ 165.484277][ T6836] tomoyo_path_number_perm+0x245/0x5b0 [ 165.486174][ T6836] ? tomoyo_path_number_perm+0x232/0x5b0 [ 165.488592][ T6836] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 165.491150][ T6836] ? __pfx_lock_release+0x10/0x10 [ 165.493202][ T6836] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 165.495923][ T6836] ? __fget_files+0x256/0x400 [ 165.498141][ T6836] security_file_ioctl_compat+0x75/0xc0 [ 165.501005][ T6836] __do_compat_sys_ioctl+0x5d/0x330 [ 165.503312][ T6836] __do_fast_syscall_32+0x73/0x120 [ 165.505617][ T6836] do_fast_syscall_32+0x32/0x80 [ 165.507699][ T6836] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.509452][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 165.510397][ T6836] RIP: 0023:0xf747a579 [ 165.515585][ T6836] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 165.523870][ T6836] RSP: 002b:00000000f5d9257c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 165.527107][ T6836] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000541c [ 165.530155][ T6836] RDX: 0000000020001900 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.533191][ T6836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 165.536251][ T6836] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 165.540784][ T6836] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 165.546438][ T6836] [ 165.548637][ C3] vkms_vblank_simulate: vblank timer overrun [ 165.559371][ T6836] ERROR: Out of memory at tomoyo_realpath_from_path. [ 165.624503][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.465'. [ 165.724970][ T6849] binder: 6848:6849 ioctl c0306201 20000000 returned -14 [ 165.784036][ T1936] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 165.794321][ T6854] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 165.918657][ T6862] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 165.983948][ T1936] usb 8-1: Using ep0 maxpacket: 8 [ 165.989366][ T1936] usb 8-1: unable to get BOS descriptor or descriptor too short [ 166.001493][ T1936] usb 8-1: string descriptor 0 read error: -22 [ 166.004626][ T1936] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 166.008206][ T1936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.013853][ T1936] usb 8-1: config 0 descriptor?? [ 166.758825][ T6879] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 166.972298][ T1936] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 166.991483][ T1936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 167.004043][ T1936] dib0700: firmware download failed at 7 with -22 [ 167.017699][ T1936] usb 8-1: USB disconnect, device number 19 [ 167.100775][ T6899] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 167.198536][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 167.480610][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 167.626153][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.478'. [ 167.629920][ T6909] netlink: 32 bytes leftover after parsing attributes in process `syz.0.478'. [ 167.663464][ T6911] binder: 6910:6911 ioctl c0306201 20000000 returned -14 [ 167.731283][ T6914] FAULT_INJECTION: forcing a failure. [ 167.731283][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.738249][ T6914] CPU: 2 PID: 6914 Comm: syz.0.479 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 167.742414][ T6914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 167.747092][ T6914] Call Trace: [ 167.748547][ T6914] [ 167.749890][ T6914] dump_stack_lvl+0x16c/0x1f0 [ 167.750259][ T6915] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 167.751877][ T6914] should_fail_ex+0x497/0x5b0 [ 167.757243][ T6914] _copy_to_user+0x30/0xc0 [ 167.759202][ T6914] simple_read_from_buffer+0xd0/0x160 [ 167.761495][ T6914] proc_fail_nth_read+0x1b0/0x290 [ 167.763671][ T6914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.766044][ T6914] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.768243][ T6914] vfs_read+0x1d4/0xbd0 [ 167.769860][ T6914] ? __fdget_pos+0xeb/0x180 [ 167.771235][ T6914] ? __pfx_vfs_read+0x10/0x10 [ 167.772743][ T6914] ? __pfx___mutex_lock+0x10/0x10 [ 167.774729][ T6914] ? __fget_files+0x256/0x400 [ 167.776700][ T6914] ksys_read+0x12f/0x260 [ 167.778399][ T6914] ? __pfx_ksys_read+0x10/0x10 [ 167.780316][ T6914] __do_fast_syscall_32+0x73/0x120 [ 167.782389][ T6914] do_fast_syscall_32+0x32/0x80 [ 167.784492][ T6914] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.787135][ T6914] RIP: 0023:0xf747a579 [ 167.788895][ T6914] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 167.796641][ T6914] RSP: 002b:00000000f5d925b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 167.800103][ T6914] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5d92630 [ 167.803328][ T6914] RDX: 000000000000000f RSI: 00000000f7464ff4 RDI: 0000000000000000 [ 167.806264][ T6914] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 167.809138][ T6914] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 167.812415][ T6914] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.815655][ T6914] [ 168.164069][ T816] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 168.294109][ T1936] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 168.354025][ T816] usb 6-1: Using ep0 maxpacket: 8 [ 168.359214][ T816] usb 6-1: unable to get BOS descriptor or descriptor too short [ 168.378327][ T816] usb 6-1: string descriptor 0 read error: -22 [ 168.381409][ T816] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 168.385918][ T816] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.391947][ T816] usb 6-1: config 0 descriptor?? [ 168.434972][ T2675] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 168.485016][ T1936] usb 7-1: Using ep0 maxpacket: 8 [ 168.493181][ T1936] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 168.500033][ T1936] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.510733][ T1936] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.520138][ T1936] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.526249][ T1936] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.529319][ T1936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.615402][ T2675] usb 5-1: Using ep0 maxpacket: 8 [ 168.620452][ T2675] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.633636][ T2675] usb 5-1: string descriptor 0 read error: -22 [ 168.638053][ T2675] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 168.642015][ T2675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.651336][ T2675] usb 5-1: config 0 descriptor?? [ 168.756206][ T1936] usb 7-1: GET_CAPABILITIES returned 0 [ 168.758833][ T1936] usbtmc 7-1:16.0: can't read capabilities [ 168.784071][ T5272] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 168.964128][ T5272] usb 8-1: Using ep0 maxpacket: 8 [ 168.980748][ T5272] usb 8-1: unable to get BOS descriptor or descriptor too short [ 169.004246][ T5272] usb 8-1: string descriptor 0 read error: -22 [ 169.009624][ T6927] Scaler: ================= START STATUS ================= [ 169.012680][ T6927] Scaler: ================== END STATUS ================== [ 169.016144][ T5272] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 169.020279][ T5272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.029232][ T5272] usb 8-1: config 0 descriptor?? [ 169.050316][ T6927] 9pnet_fd: Insufficient options for proto=fd [ 169.124905][ T1936] usb 7-1: USB disconnect, device number 22 [ 170.090373][ T6989] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 170.492480][ T816] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 170.499801][ T816] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 170.503768][ T816] dib0700: firmware download failed at 7 with -22 [ 170.514996][ T816] usb 6-1: USB disconnect, device number 27 [ 171.005759][ T5272] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 171.018023][ T5272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 171.029571][ T5272] dib0700: firmware download failed at 7 with -22 [ 171.035650][ T5272] usb 8-1: USB disconnect, device number 20 [ 171.106603][ T2675] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 171.112816][ T2675] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 171.144892][ T2675] dib0700: firmware download failed at 7 with -22 [ 171.154594][ T2675] usb 5-1: USB disconnect, device number 24 [ 171.167221][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 171.284473][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 171.607945][ T7033] binder: 7032:7033 ioctl c0306201 20000000 returned -14 [ 171.671459][ T7039] syz.2.496 uses obsolete (PF_INET,SOCK_PACKET) [ 171.681369][ T7044] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 171.781308][ T7052] exFAT-fs (nullb0): invalid boot record signature [ 171.785280][ T7052] exFAT-fs (nullb0): failed to read boot sector [ 171.788447][ T7052] exFAT-fs (nullb0): failed to recognize exfat type [ 172.194152][ T5274] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 172.374109][ T5274] usb 6-1: Using ep0 maxpacket: 8 [ 172.379071][ T5274] usb 6-1: unable to get BOS descriptor or descriptor too short [ 172.387052][ T5274] usb 6-1: string descriptor 0 read error: -22 [ 172.389810][ T5274] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 172.393811][ T5274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.399573][ T5274] usb 6-1: config 0 descriptor?? [ 172.555372][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.506'. [ 172.820875][ T7105] exFAT-fs (nullb0): invalid boot record signature [ 172.824036][ T7105] exFAT-fs (nullb0): failed to read boot sector [ 172.827140][ T7105] exFAT-fs (nullb0): failed to recognize exfat type [ 173.141836][ T7136] FAULT_INJECTION: forcing a failure. [ 173.141836][ T7136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.148130][ T7136] CPU: 1 PID: 7136 Comm: syz.0.513 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 173.153690][ T7136] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.158304][ T7136] Call Trace: [ 173.159780][ T7136] [ 173.161097][ T7136] dump_stack_lvl+0x16c/0x1f0 [ 173.163442][ T7136] should_fail_ex+0x497/0x5b0 [ 173.165464][ T7136] _copy_to_user+0x30/0xc0 [ 173.167530][ T7136] bpf_test_finish.isra.0+0x551/0x6b0 [ 173.170290][ T7136] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 173.173121][ T7136] ? krealloc_noprof+0xa7/0x100 [ 173.175385][ T7136] bpf_prog_test_run_skb+0x1139/0x1de0 [ 173.177962][ T7136] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 173.180493][ T7136] ? fput+0x32/0x390 [ 173.182260][ T7136] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 173.184747][ T7136] __sys_bpf+0x1787/0x5830 [ 173.186672][ T7136] ? __pfx___sys_bpf+0x10/0x10 [ 173.188526][ T7136] ? ksys_write+0x21c/0x260 [ 173.190297][ T7136] ? __pfx_lock_release+0x10/0x10 [ 173.192036][ T7136] ? __mutex_unlock_slowpath+0x164/0x650 [ 173.194424][ T7136] ? fput+0x32/0x390 [ 173.196160][ T7136] ? ksys_write+0x1ab/0x260 [ 173.198197][ T7136] ? __pfx_ksys_write+0x10/0x10 [ 173.200362][ T7136] __ia32_sys_bpf+0x76/0xe0 [ 173.202385][ T7136] __do_fast_syscall_32+0x73/0x120 [ 173.204699][ T7136] do_fast_syscall_32+0x32/0x80 [ 173.206966][ T7136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.209785][ T7136] RIP: 0023:0xf747a579 [ 173.211673][ T7136] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.221759][ T7136] RSP: 002b:00000000f5d9257c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 173.226582][ T7136] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000200002c0 [ 173.231231][ T7136] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.234631][ T7136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.237773][ T7136] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 173.240800][ T7136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.243895][ T7136] [ 173.382037][ T7144] binder: 7142:7144 ioctl c0306201 20000000 returned -14 [ 173.444013][ T7151] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 173.731626][ T5274] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 173.745769][ T5274] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 173.749446][ T5274] dib0700: firmware download failed at 7 with -22 [ 173.759745][ T5274] usb 6-1: USB disconnect, device number 28 [ 174.388484][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.518'. [ 175.150169][ T7208] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 175.227908][ T7209] syz.2.527: attempt to access beyond end of device [ 175.227908][ T7209] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 175.366745][ T7212] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20003 [ 175.574000][ T5272] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 175.764084][ T5272] usb 8-1: Using ep0 maxpacket: 8 [ 175.772186][ T5272] usb 8-1: unable to get BOS descriptor or descriptor too short [ 175.799877][ T5272] usb 8-1: string descriptor 0 read error: -22 [ 175.807289][ T5272] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 175.816877][ T5272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.830377][ T5272] usb 8-1: config 0 descriptor?? [ 175.943303][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.530'. [ 175.965818][ T39] audit: type=1326 audit(1720532103.806:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 175.984770][ T39] audit: type=1326 audit(1720532103.806:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.017541][ T39] audit: type=1326 audit(1720532103.806:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.037036][ T39] audit: type=1326 audit(1720532103.806:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.058330][ T39] audit: type=1326 audit(1720532103.806:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.068562][ T39] audit: type=1326 audit(1720532103.806:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.079570][ T7228] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 176.079898][ T39] audit: type=1326 audit(1720532103.806:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.093102][ T39] audit: type=1326 audit(1720532103.806:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=85 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.102804][ T39] audit: type=1326 audit(1720532103.806:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.112995][ T39] audit: type=1326 audit(1720532103.806:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.531" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747a579 code=0x7ffc0000 [ 176.474343][ T5228] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 176.673994][ T5228] usb 5-1: Using ep0 maxpacket: 8 [ 176.686350][ T5228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 176.694839][ T5228] usb 5-1: string descriptor 0 read error: -22 [ 176.697836][ T5228] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 176.701769][ T5228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.719198][ T5228] usb 5-1: config 0 descriptor?? [ 176.736408][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.538'. [ 177.264040][ T5249] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 177.445545][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 177.453443][ T5249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 177.463000][ T5249] usb 6-1: string descriptor 0 read error: -22 [ 177.466407][ T5249] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 177.470410][ T5249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.477586][ T5249] usb 6-1: config 0 descriptor?? [ 177.712855][ T5272] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 177.734306][ T5272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 177.737899][ T5272] dib0700: firmware download failed at 7 with -22 [ 177.757959][ T5272] usb 8-1: USB disconnect, device number 21 [ 177.810621][ T7322] netlink: 'syz.2.541': attribute type 1 has an invalid length. [ 177.845229][ T7322] bond1: entered promiscuous mode [ 177.860921][ T7322] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 177.869684][ T7322] bond1: (slave bridge8): making interface the new active one [ 177.873151][ T7322] bridge8: entered promiscuous mode [ 177.877932][ T7322] bond1: (slave bridge8): Enslaving as an active interface with an up link [ 177.886114][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 177.901931][ T5228] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 177.917608][ T5228] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 177.926502][ T5228] dib0700: firmware download failed at 7 with -22 [ 177.942308][ T5228] usb 5-1: USB disconnect, device number 25 [ 177.954234][ T7322] bond1 (unregistering): (slave bridge8): Releasing active interface [ 177.958216][ T7322] bridge8: left promiscuous mode [ 177.992513][ T7322] bond1 (unregistering): Released all slaves [ 178.281807][ T5249] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 178.290827][ T5249] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 178.297339][ T5249] dib0700: firmware download failed at 7 with -22 [ 178.305190][ T5249] usb 6-1: USB disconnect, device number 29 [ 178.545535][ T7421] syz.0.545: attempt to access beyond end of device [ 178.545535][ T7421] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 178.555102][ T7420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.543'. [ 179.045370][ T7429] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 179.478650][ T7439] FAULT_INJECTION: forcing a failure. [ 179.478650][ T7439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.486975][ T7439] CPU: 2 PID: 7439 Comm: syz.1.550 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 179.492357][ T7439] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.498837][ T7439] Call Trace: [ 179.500444][ T7439] [ 179.502068][ T7439] dump_stack_lvl+0x16c/0x1f0 [ 179.505569][ T7439] should_fail_ex+0x497/0x5b0 [ 179.507874][ T7439] _copy_to_user+0x30/0xc0 [ 179.510222][ T7439] bpf_test_finish.isra.0+0x551/0x6b0 [ 179.513178][ T7439] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 179.516356][ T7439] ? krealloc_noprof+0xa7/0x100 [ 179.518807][ T7439] bpf_prog_test_run_skb+0x1139/0x1de0 [ 179.521278][ T7439] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 179.523906][ T7439] ? fput+0x32/0x390 [ 179.525903][ T7439] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 179.528881][ T7439] __sys_bpf+0x1787/0x5830 [ 179.531656][ T7439] ? __pfx___sys_bpf+0x10/0x10 [ 179.534348][ T7439] ? ksys_write+0x21c/0x260 [ 179.536599][ T7439] ? __pfx_lock_release+0x10/0x10 [ 179.539209][ T7439] ? __mutex_unlock_slowpath+0x164/0x650 [ 179.541827][ T7439] ? fput+0x32/0x390 [ 179.543584][ T7439] ? ksys_write+0x1ab/0x260 [ 179.545523][ T7439] ? __pfx_ksys_write+0x10/0x10 [ 179.547552][ T7439] __ia32_sys_bpf+0x76/0xe0 [ 179.549566][ T7439] __do_fast_syscall_32+0x73/0x120 [ 179.551818][ T7439] do_fast_syscall_32+0x32/0x80 [ 179.554493][ T7439] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.558039][ T7439] RIP: 0023:0xf7440579 [ 179.560410][ T7439] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 179.570354][ T7439] RSP: 002b:00000000f5d5857c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 179.574718][ T7439] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 179.578497][ T7439] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 179.582055][ T7439] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.585495][ T7439] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 179.589317][ T7439] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.593373][ T7439] [ 179.609897][ T7443] syz.3.552: attempt to access beyond end of device [ 179.609897][ T7443] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 179.660498][ T7456] syz.0.554: attempt to access beyond end of device [ 179.660498][ T7456] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 179.911291][ T7475] syz.3.559: attempt to access beyond end of device [ 179.911291][ T7475] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 179.944432][ T25] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 180.125959][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 180.130374][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 180.137707][ T25] usb 6-1: string descriptor 0 read error: -22 [ 180.140608][ T25] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 180.144787][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.149982][ T25] usb 6-1: config 0 descriptor?? [ 180.727036][ T7487] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.897185][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 180.901791][ T7508] netlink: 32 bytes leftover after parsing attributes in process `syz.3.567'. [ 180.912085][ T7501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.964502][ T5219] Bluetooth: hci2: command 0x0406 tx timeout [ 180.967351][ T5219] Bluetooth: hci3: command 0x0406 tx timeout [ 180.970448][ T5213] Bluetooth: hci0: command 0x0406 tx timeout [ 181.040311][ T25] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 181.046632][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 181.050635][ T25] dib0700: firmware download failed at 7 with -22 [ 181.056668][ T25] usb 6-1: USB disconnect, device number 30 [ 181.289161][ T7546] syz.0.572: attempt to access beyond end of device [ 181.289161][ T7546] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 181.474281][ T1936] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 181.674031][ T1936] usb 8-1: Using ep0 maxpacket: 8 [ 181.681558][ T1936] usb 8-1: unable to get BOS descriptor or descriptor too short [ 181.694373][ T1936] usb 8-1: string descriptor 0 read error: -22 [ 181.700872][ T1936] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 181.710058][ T1936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.718323][ T1936] usb 8-1: config 0 descriptor?? [ 181.749894][ T7554] netlink: 96 bytes leftover after parsing attributes in process `syz.2.574'. [ 182.034000][ T5228] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 182.076721][ T7585] netlink: 'syz.2.578': attribute type 9 has an invalid length. [ 182.244274][ T5228] usb 6-1: Using ep0 maxpacket: 8 [ 182.248595][ T5228] usb 6-1: unable to get BOS descriptor or descriptor too short [ 182.260820][ T5228] usb 6-1: string descriptor 0 read error: -22 [ 182.263687][ T5228] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 182.274046][ T5228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.291632][ T5228] usb 6-1: config 0 descriptor?? [ 183.252980][ T1936] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 183.265850][ T1936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 183.273404][ T1936] dib0700: firmware download failed at 7 with -22 [ 183.287732][ T1936] usb 8-1: USB disconnect, device number 22 [ 183.585332][ T5228] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 183.591054][ T5228] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 183.595991][ T5228] dib0700: firmware download failed at 7 with -22 [ 183.604584][ T5228] usb 6-1: USB disconnect, device number 31 [ 183.650803][ T7639] 9pnet_fd: Insufficient options for proto=fd [ 183.720072][ T7639] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 183.803601][ T7681] mmap: syz.2.588 (7681) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 184.009387][ T7689] 9p: Unknown Cache mode or invalid value mmapA [ 184.031651][ T7691] block device autoloading is deprecated and will be removed. [ 184.041458][ T7691] syz.2.590: attempt to access beyond end of device [ 184.041458][ T7691] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 184.095635][ T7699] binder: 7696:7699 ioctl c0306201 20000000 returned -14 [ 184.168757][ T7711] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 184.484162][ T1936] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 184.665635][ T1936] usb 8-1: Using ep0 maxpacket: 8 [ 184.672156][ T1936] usb 8-1: unable to get BOS descriptor or descriptor too short [ 184.680493][ T1936] usb 8-1: string descriptor 0 read error: -22 [ 184.683319][ T1936] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 184.687273][ T1936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.694420][ T1936] usb 8-1: config 0 descriptor?? [ 184.964371][ T5249] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 185.102560][ T7751] 9pnet_fd: Insufficient options for proto=fd [ 185.154200][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 185.159198][ T5249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 185.171025][ T5249] usb 6-1: string descriptor 0 read error: -22 [ 185.173547][ T5249] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 185.184057][ T5249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.195583][ T5249] usb 6-1: config 0 descriptor?? [ 185.213683][ T7788] netlink: 5 bytes leftover after parsing attributes in process `syz.0.605'. [ 185.218519][ T7788] FAULT_INJECTION: forcing a failure. [ 185.218519][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 185.225393][ T7788] CPU: 3 PID: 7788 Comm: syz.0.605 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 185.229538][ T7788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.233885][ T7788] Call Trace: [ 185.235306][ T7788] [ 185.236610][ T7788] dump_stack_lvl+0x16c/0x1f0 [ 185.238659][ T7788] should_fail_ex+0x497/0x5b0 [ 185.240602][ T7788] should_failslab+0x9/0x20 [ 185.242159][ T7788] kmem_cache_alloc_node_noprof+0x71/0x310 [ 185.244126][ T7788] ? __alloc_skb+0x2b3/0x380 [ 185.245723][ T7788] __alloc_skb+0x2b3/0x380 [ 185.247630][ T7788] ? __pfx___alloc_skb+0x10/0x10 [ 185.249455][ T7788] ? rtnl_prop_list_size+0x1a0/0x2d0 [ 185.251452][ T7788] ? if_nlmsg_size+0x606/0x9f0 [ 185.253521][ T7788] rtmsg_ifinfo_build_skb+0x81/0x280 [ 185.255861][ T7788] rtmsg_ifinfo+0x9f/0x1a0 [ 185.257879][ T7788] __dev_notify_flags+0x24e/0x2e0 [ 185.260123][ T7788] ? __pfx___dev_notify_flags+0x10/0x10 [ 185.262596][ T7788] ? __dev_change_flags+0x3d9/0x720 [ 185.264937][ T7788] ? __pfx___dev_change_flags+0x10/0x10 [ 185.267394][ T7788] ? rcu_is_watching+0x12/0xc0 [ 185.269534][ T7788] ? __kmalloc_noprof+0x20b/0x420 [ 185.271777][ T7788] dev_change_flags+0x10c/0x160 [ 185.273960][ T7788] do_setlink+0x19a6/0x3ea0 [ 185.275991][ T7788] ? vprintk_emit+0x1ca/0x5a0 [ 185.278089][ T7788] ? __pfx_do_setlink+0x10/0x10 [ 185.280247][ T7788] ? vprintk+0x86/0xa0 [ 185.282080][ T7788] ? _printk+0xc8/0x100 [ 185.283948][ T7788] ? __pfx__printk+0x10/0x10 [ 185.286012][ T7788] ? ___ratelimit+0x24c/0x580 [ 185.288111][ T7788] ? hlock_class+0x4e/0x130 [ 185.290100][ T7788] ? __pfx____ratelimit+0x10/0x10 [ 185.292296][ T7788] ? rcu_is_watching+0x12/0xc0 [ 185.294436][ T7788] ? do_trace_netlink_extack+0x16d/0x1e0 [ 185.296940][ T7788] ? __nla_validate_parse+0x605/0x2b10 [ 185.299323][ T7788] ? __pfx___nla_validate_parse+0x10/0x10 [ 185.301887][ T7788] ? __pfx_mark_lock+0x10/0x10 [ 185.303999][ T7788] ? find_held_lock+0x2d/0x110 [ 185.306122][ T7788] ? __nla_parse+0x40/0x60 [ 185.308097][ T7788] rtnl_setlink+0x28d/0x3f0 [ 185.310173][ T7788] ? __pfx_rtnl_setlink+0x10/0x10 [ 185.312425][ T7788] ? hlock_class+0x4e/0x130 [ 185.314436][ T7788] ? __lock_acquire+0x14f4/0x3b30 [ 185.316722][ T7788] ? do_raw_spin_unlock+0x172/0x230 [ 185.319034][ T7788] ? _raw_spin_unlock+0x28/0x50 [ 185.321214][ T7788] ? __mutex_lock+0x1a6/0x9c0 [ 185.323329][ T7788] ? rtnetlink_rcv_msg+0x372/0xea0 [ 185.325601][ T7788] ? __pfx___mutex_lock+0x10/0x10 [ 185.327796][ T7788] ? rtnetlink_rcv_msg+0x35a/0xea0 [ 185.330073][ T7788] ? __pfx_rtnl_setlink+0x10/0x10 [ 185.332139][ T7788] rtnetlink_rcv_msg+0x3c7/0xea0 [ 185.334324][ T7788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.336710][ T7788] ? __dev_queue_xmit+0x87e/0x4130 [ 185.338992][ T7788] netlink_rcv_skb+0x165/0x410 [ 185.341110][ T7788] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 185.343580][ T7788] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.345963][ T7788] ? netlink_deliver_tap+0x1ae/0xcf0 [ 185.348306][ T7788] netlink_unicast+0x542/0x820 [ 185.350472][ T7788] ? __pfx_netlink_unicast+0x10/0x10 [ 185.352827][ T7788] ? __phys_addr_symbol+0x30/0x80 [ 185.355080][ T7788] ? __check_object_size+0x48e/0x720 [ 185.357436][ T7788] netlink_sendmsg+0x8b8/0xd70 [ 185.359599][ T7788] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.361972][ T7788] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 185.364321][ T7788] sock_write_iter+0x50a/0x5c0 [ 185.366477][ T7788] ? __pfx_sock_write_iter+0x10/0x10 [ 185.368791][ T7788] ? __pfx_mark_lock+0x10/0x10 [ 185.370797][ T7788] do_iter_readv_writev+0x504/0x780 [ 185.372946][ T7788] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 185.375334][ T7788] ? bpf_lsm_file_permission+0x9/0x10 [ 185.377593][ T7788] ? security_file_permission+0x98/0xc0 [ 185.379936][ T7788] vfs_writev+0x36f/0xde0 [ 185.381782][ T7788] ? __pfx_vfs_writev+0x10/0x10 [ 185.383864][ T7788] ? __fget_files+0x24c/0x400 [ 185.385893][ T7788] ? do_writev+0x287/0x370 [ 185.387801][ T7788] do_writev+0x287/0x370 [ 185.389606][ T7788] ? __pfx_do_writev+0x10/0x10 [ 185.391642][ T7788] __do_fast_syscall_32+0x73/0x120 [ 185.393809][ T7788] do_fast_syscall_32+0x32/0x80 [ 185.395862][ T7788] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.398512][ T7788] RIP: 0023:0xf747a579 [ 185.400232][ T7788] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 185.408300][ T7788] RSP: 002b:00000000f5d7157c EFLAGS: 00000292 ORIG_RAX: 0000000000000092 [ 185.411840][ T7788] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200 [ 185.415152][ T7788] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 185.418472][ T7788] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.421776][ T7788] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 185.425068][ T7788] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.428434][ T7788] [ 185.431489][ T7788] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 185.543975][ T7791] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 185.546224][ T7795] trusted_key: syz.0.606 sent an empty control message without MSG_MORE. [ 185.561335][ T7751] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 185.757687][ T7798] netlink: 'syz.0.607': attribute type 21 has an invalid length. [ 185.761533][ T7798] netlink: 132 bytes leftover after parsing attributes in process `syz.0.607'. [ 186.034561][ T7809] exFAT-fs (nullb0): invalid boot record signature [ 186.037778][ T7809] exFAT-fs (nullb0): failed to read boot sector [ 186.044207][ T7809] exFAT-fs (nullb0): failed to recognize exfat type [ 186.148399][ T1936] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 186.157224][ T1936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 186.161132][ T1936] dib0700: firmware download failed at 7 with -22 [ 186.166472][ T1936] usb 8-1: USB disconnect, device number 23 [ 186.344361][ T7831] syz.0.611: attempt to access beyond end of device [ 186.344361][ T7831] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 186.422008][ T5249] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 186.426741][ T5249] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 186.430858][ T5249] dib0700: firmware download failed at 7 with -22 [ 186.440019][ T5249] usb 6-1: USB disconnect, device number 32 [ 186.742454][ T7843] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.164283][ T7847] netfs: Couldn't get user pages (rc=-14) [ 187.220293][ T7857] exFAT-fs (nullb0): invalid boot record signature [ 187.223297][ T7857] exFAT-fs (nullb0): failed to read boot sector [ 187.226922][ T7857] exFAT-fs (nullb0): failed to recognize exfat type [ 187.284572][ T7860] exFAT-fs (nullb0): invalid boot record signature [ 187.287273][ T7860] exFAT-fs (nullb0): failed to read boot sector [ 187.289863][ T7860] exFAT-fs (nullb0): failed to recognize exfat type [ 187.357969][ T7867] tipc: Started in network mode [ 187.359860][ T7867] tipc: Node identity ac1414aa, cluster identity 4711 [ 187.363573][ T7867] tipc: Enabled bearer , priority 10 [ 187.364330][ T8] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 187.367499][ T7867] tipc: Disabling bearer [ 187.403617][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.623'. [ 187.505624][ T7874] warning: `syz.1.625' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 187.523979][ T8] usb 8-1: device descriptor read/64, error -71 [ 187.793994][ T8] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 187.815115][ T7889] syz.2.628: attempt to access beyond end of device [ 187.815115][ T7889] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 187.944033][ T8] usb 8-1: device descriptor read/64, error -71 [ 187.984376][ T7891] netfs: Couldn't get user pages (rc=-14) [ 188.064495][ T8] usb usb8-port1: attempt power cycle [ 188.223566][ T7902] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 188.486021][ T8] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 188.502732][ T7909] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 188.515127][ T8] usb 8-1: device descriptor read/8, error -71 [ 188.658686][ T7913] tipc: Enabled bearer , priority 10 [ 188.672640][ T7913] tipc: Disabling bearer [ 188.766116][ T7918] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 188.784099][ T8] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 188.817098][ T8] usb 8-1: device descriptor read/8, error -71 [ 188.936795][ T8] usb usb8-port1: unable to enumerate USB device [ 189.129924][ T7931] netfs: Couldn't get user pages (rc=-14) [ 189.144036][ T826] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 189.216881][ T7939] exFAT-fs (nullb0): invalid boot record signature [ 189.219843][ T7939] exFAT-fs (nullb0): failed to read boot sector [ 189.222565][ T7939] exFAT-fs (nullb0): failed to recognize exfat type [ 189.297856][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.642'. [ 189.301771][ T7948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.642'. [ 189.324037][ T826] usb 6-1: Using ep0 maxpacket: 8 [ 189.331430][ T826] usb 6-1: unable to get BOS descriptor or descriptor too short [ 189.339828][ T826] usb 6-1: string descriptor 0 read error: -22 [ 189.342689][ T826] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 189.347002][ T826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.352622][ T826] usb 6-1: config 0 descriptor?? [ 190.060216][ T826] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 190.070709][ T826] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 190.077207][ T826] dib0700: firmware download failed at 7 with -22 [ 190.093254][ T826] usb 6-1: USB disconnect, device number 33 [ 190.530642][ T8004] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 190.547806][ T2675] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 190.663998][ T1936] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 190.721888][ T8009] FAULT_INJECTION: forcing a failure. [ 190.721888][ T8009] name failslab, interval 1, probability 0, space 0, times 0 [ 190.727204][ T8009] CPU: 1 PID: 8009 Comm: syz.1.653 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 190.731389][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.735893][ T8009] Call Trace: [ 190.737304][ T8009] [ 190.738553][ T8009] dump_stack_lvl+0x16c/0x1f0 [ 190.740572][ T8009] should_fail_ex+0x497/0x5b0 [ 190.742609][ T8009] should_failslab+0x9/0x20 [ 190.743985][ T2675] usb 5-1: Using ep0 maxpacket: 8 [ 190.744552][ T8009] kmalloc_node_trace_noprof+0x6e/0x360 [ 190.749145][ T8009] ? __get_vm_area_node+0xe1/0x2d0 [ 190.749644][ T2675] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 190.751049][ T8009] __get_vm_area_node+0xe1/0x2d0 [ 190.756840][ T8009] __vmalloc_node_range_noprof+0x276/0x1520 [ 190.759355][ T8009] ? __dev_ethtool+0x2d9a/0x5990 [ 190.761469][ T8009] ? find_held_lock+0x2d/0x110 [ 190.763501][ T8009] ? __dev_ethtool+0x2d9a/0x5990 [ 190.763966][ T2675] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.765296][ T8009] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.769360][ T2675] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.771587][ T8009] ? __pfx___might_resched+0x10/0x10 [ 190.777984][ T8009] ? __might_fault+0xe3/0x190 [ 190.779898][ T8009] ? __dev_ethtool+0x2d9a/0x5990 [ 190.782016][ T8009] vzalloc_noprof+0x6b/0x90 [ 190.783952][ T8009] ? __dev_ethtool+0x2d9a/0x5990 [ 190.784114][ T2675] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.785883][ T8009] __dev_ethtool+0x2d9a/0x5990 [ 190.789802][ T2675] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.791795][ T8009] ? __pfx_mark_lock+0x10/0x10 [ 190.799028][ T8009] ? __orc_find+0x104/0x130 [ 190.800992][ T8009] ? __pfx___dev_ethtool+0x10/0x10 [ 190.803301][ T8009] ? is_bpf_text_address+0x94/0x1a0 [ 190.805643][ T8009] ? kernel_text_address+0x8d/0x100 [ 190.807507][ T8009] ? __kernel_text_address+0xd/0x40 [ 190.809735][ T8009] ? unwind_get_return_address+0x45/0xe0 [ 190.812231][ T8009] ? hlock_class+0x4e/0x130 [ 190.814097][ T2675] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.814164][ T8009] ? __lock_acquire+0x14f4/0x3b30 [ 190.818123][ T2675] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.820332][ T8009] ? stack_trace_save+0x95/0xd0 [ 190.825697][ T8009] ? __pfx___lock_acquire+0x10/0x10 [ 190.827803][ T8009] ? stack_depot_save_flags+0x28/0x900 [ 190.830030][ T8009] ? lock_acquire+0x1b1/0x560 [ 190.831830][ T8009] ? __mutex_trylock_common+0xea/0x250 [ 190.833657][ T8009] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.835684][ T8009] ? rcu_is_watching+0x12/0xc0 [ 190.837324][ T8009] ? trace_contention_end+0xea/0x140 [ 190.839160][ T8009] ? __mutex_lock+0x1a6/0x9c0 [ 190.840725][ T8009] ? dev_ethtool+0x167/0x330 [ 190.842315][ T8009] ? __pfx___mutex_lock+0x10/0x10 [ 190.844032][ T8009] dev_ethtool+0x17c/0x330 [ 190.845523][ T8009] ? __pfx_dev_ethtool+0x10/0x10 [ 190.847396][ T8009] ? netdev_name_node_lookup_rcu+0xf0/0x140 [ 190.849581][ T8009] dev_ioctl+0x2a2/0x10a0 [ 190.851023][ T8009] compat_sock_ioctl+0x452/0x7f0 [ 190.852643][ T8009] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 190.854942][ T8009] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 190.857153][ T8009] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 190.859220][ T8009] __do_compat_sys_ioctl+0x2c3/0x330 [ 190.861013][ T8009] __do_fast_syscall_32+0x73/0x120 [ 190.863399][ T8009] do_fast_syscall_32+0x32/0x80 [ 190.865478][ T8009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.867728][ T8009] RIP: 0023:0xf7440579 [ 190.869222][ T8009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 190.876637][ T8009] RSP: 002b:00000000f5d5857c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 190.879962][ T8009] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 0000000000008946 [ 190.882869][ T8009] RDX: 0000000020000900 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.885952][ T8009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.888764][ T8009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 190.891768][ T8009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.895109][ T8009] [ 190.900413][ T8009] syz.1.653: vmalloc error: size 232, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 190.906019][ T8009] CPU: 2 PID: 8009 Comm: syz.1.653 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 190.909651][ T8009] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.913683][ T8009] Call Trace: [ 190.914838][ T8009] [ 190.916082][ T8009] dump_stack_lvl+0x16c/0x1f0 [ 190.918234][ T8009] warn_alloc+0x24d/0x3a0 [ 190.920080][ T8009] ? __pfx_warn_alloc+0x10/0x10 [ 190.922143][ T8009] ? should_fail_ex+0x2de/0x5b0 [ 190.924217][ T8009] ? rcu_is_watching+0x12/0xc0 [ 190.926250][ T8009] ? trace_kmalloc+0x2d/0xe0 [ 190.928085][ T8009] ? __kasan_kmalloc+0x8a/0xb0 [ 190.929704][ T8009] ? __get_vm_area_node+0x1bc/0x2d0 [ 190.931840][ T8009] __vmalloc_node_range_noprof+0xc1e/0x1520 [ 190.933881][ T8009] ? find_held_lock+0x2d/0x110 [ 190.935506][ T8009] ? __dev_ethtool+0x2d9a/0x5990 [ 190.937250][ T8009] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 190.939463][ T8009] ? __pfx___might_resched+0x10/0x10 [ 190.941272][ T8009] ? __might_fault+0xe3/0x190 [ 190.942938][ T8009] ? __dev_ethtool+0x2d9a/0x5990 [ 190.944694][ T8009] vzalloc_noprof+0x6b/0x90 [ 190.946264][ T8009] ? __dev_ethtool+0x2d9a/0x5990 [ 190.947961][ T8009] __dev_ethtool+0x2d9a/0x5990 [ 190.949720][ T8009] ? __pfx_mark_lock+0x10/0x10 [ 190.951567][ T8009] ? __orc_find+0x104/0x130 [ 190.953193][ T8009] ? __pfx___dev_ethtool+0x10/0x10 [ 190.955188][ T8009] ? is_bpf_text_address+0x94/0x1a0 [ 190.956999][ T8009] ? kernel_text_address+0x8d/0x100 [ 190.958725][ T8009] ? __kernel_text_address+0xd/0x40 [ 190.960343][ T8009] ? unwind_get_return_address+0x45/0xe0 [ 190.962252][ T8009] ? hlock_class+0x4e/0x130 [ 190.963844][ T8009] ? __lock_acquire+0x14f4/0x3b30 [ 190.965728][ T8009] ? stack_trace_save+0x95/0xd0 [ 190.967421][ T8009] ? __pfx___lock_acquire+0x10/0x10 [ 190.969098][ T8009] ? stack_depot_save_flags+0x28/0x900 [ 190.970963][ T8009] ? lock_acquire+0x1b1/0x560 [ 190.972819][ T8009] ? __mutex_trylock_common+0xea/0x250 [ 190.973975][ T1936] usb 8-1: Using ep0 maxpacket: 32 [ 190.975174][ T8009] ? __pfx___mutex_trylock_common+0x10/0x10 [ 190.975204][ T8009] ? rcu_is_watching+0x12/0xc0 [ 190.979363][ T1936] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 190.979591][ T8009] ? trace_contention_end+0xea/0x140 [ 190.979617][ T8009] ? __mutex_lock+0x1a6/0x9c0 [ 190.981693][ T1936] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 190.985404][ T8009] ? dev_ethtool+0x167/0x330 [ 190.985442][ T8009] ? __pfx___mutex_lock+0x10/0x10 [ 190.985469][ T8009] dev_ethtool+0x17c/0x330 [ 190.985490][ T8009] ? __pfx_dev_ethtool+0x10/0x10 [ 190.987792][ T1936] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.989747][ T8009] ? netdev_name_node_lookup_rcu+0xf0/0x140 [ 190.989778][ T8009] dev_ioctl+0x2a2/0x10a0 [ 190.989806][ T8009] compat_sock_ioctl+0x452/0x7f0 [ 190.989837][ T8009] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 190.996649][ T1936] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 190.997335][ T8009] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 190.997355][ T8009] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 190.999380][ T1936] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 191.001118][ T8009] __do_compat_sys_ioctl+0x2c3/0x330 [ 191.006951][ T1936] usb 8-1: Product: syz [ 191.009096][ T8009] __do_fast_syscall_32+0x73/0x120 [ 191.009120][ T8009] do_fast_syscall_32+0x32/0x80 [ 191.009134][ T8009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.011081][ T1936] usb 8-1: Manufacturer: syz [ 191.012883][ T8009] RIP: 0023:0xf7440579 [ 191.012900][ T8009] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 191.014850][ T1936] usb 8-1: SerialNumber: syz [ 191.018659][ T8009] RSP: 002b:00000000f5d5857c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 191.018682][ T8009] RAX: ffffffffffffffda RBX: 000000000000001c RCX: 0000000000008946 [ 191.018696][ T8009] RDX: 0000000020000900 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.018707][ T8009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.018717][ T8009] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 191.018728][ T8009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.024525][ T7992] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 191.025134][ T8009] [ 191.032641][ T1936] input: appletouch as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/input/input7 [ 191.039813][ T8009] Mem-Info: [ 191.060050][ T2675] usb 5-1: usb_control_msg returned -32 [ 191.061002][ T8009] active_anon:2677 inactive_anon:181 isolated_anon:0 [ 191.061002][ T8009] active_file:14667 inactive_file:27665 isolated_file:0 [ 191.061002][ T8009] unevictable:384 dirty:79 writeback:0 [ 191.061002][ T8009] slab_reclaimable:5079 slab_unreclaimable:56811 [ 191.061002][ T8009] mapped:12082 shmem:817 pagetables:702 [ 191.061002][ T8009] sec_pagetables:339 bounce:0 [ 191.061002][ T8009] kernel_misc_reclaimable:0 [ 191.061002][ T8009] free:117560 free_pcp:3271 free_cma:0 [ 191.067301][ T2675] usbtmc 5-1:16.0: can't read capabilities [ 191.070046][ T8009] Node 0 active_anon:0kB inactive_anon:716kB active_file:60kB inactive_file:552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1372kB dirty:12kB writeback:0kB shmem:1568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10272kB pagetables:1984kB sec_pagetables:1332kB all_unreclaimable? no [ 191.114267][ T8009] Node 1 active_anon:10728kB inactive_anon:8kB active_file:58608kB inactive_file:110108kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:46956kB dirty:304kB writeback:0kB shmem:1700kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:1204kB pagetables:824kB sec_pagetables:24kB all_unreclaimable? no [ 191.128248][ T8009] Node 0 DMA free:960kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 191.143182][ C1] appletouch 8-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 191.143487][ T8009] lowmem_reserve[]: 0 374 0 0 0 [ 191.151340][ T8009] Node 0 DMA32 free:30080kB boost:0kB min:19048kB low:23808kB high:28568kB reserved_highatomic:6144KB active_anon:472kB inactive_anon:228kB active_file:0kB inactive_file:960kB unevictable:1536kB writepending:12kB present:1032192kB managed:410812kB mlocked:0kB bounce:0kB free_pcp:1352kB local_pcp:412kB free_cma:0kB [ 191.165016][ T8009] lowmem_reserve[]: 0 0 0 0 0 [ 191.167204][ T8009] Node 1 DMA32 free:438568kB boost:0kB min:47048kB low:58808kB high:70568kB reserved_highatomic:0KB active_anon:10728kB inactive_anon:8kB active_file:58608kB inactive_file:110108kB unevictable:0kB writepending:304kB present:1048436kB managed:946208kB mlocked:0kB bounce:0kB free_pcp:12316kB local_pcp:1156kB free_cma:0kB [ 191.179655][ T8009] lowmem_reserve[]: 0 0 0 0 0 [ 191.181646][ T8009] Node 0 DMA: 26*4kB (U) 5*8kB (U) 3*16kB (U) 25*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 992kB [ 191.188171][ T8009] Node 0 DMA32: 171*4kB (MEH) 216*8kB (UMEH) 62*16kB (MEH) 129*32kB (UMEH) 68*64kB (UMEH) 23*128kB (UMEH) 7*256kB (UME) 5*512kB (UM) 4*1024kB (M) 3*2048kB (UM) 0*4096kB = 29420kB [ 191.196022][ T8009] Node 1 DMA32: 492*4kB (UME) 653*8kB (M) 639*16kB (UME) 578*32kB (UME) 232*64kB (UME) 127*128kB (UME) 37*256kB (UME) 17*512kB (UME) 5*1024kB (UME) 0*2048kB 85*4096kB (M) = 438472kB [ 191.204194][ T8009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.208482][ T8009] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 191.212720][ T8009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 191.217908][ T8009] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 191.221727][ T8009] 44068 total pagecache pages [ 191.223780][ T8009] 805 pages in swap cache [ 191.226600][ T8009] Free swap = 109264kB [ 191.228359][ T8009] Total swap = 124996kB [ 191.230166][ T8009] 524155 pages RAM [ 191.232086][ T8009] 0 pages HighMem/MovableOnly [ 191.235077][ T8009] 181060 pages reserved [ 191.237061][ T8009] 0 pages cma reserved [ 191.314833][ C0] appletouch 8-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 191.319591][ T1936] usb 8-1: USB disconnect, device number 28 [ 191.345395][ T1936] appletouch 8-1:1.0: input: appletouch disconnected [ 191.945656][ T8067] capability: warning: `syz.3.662' uses deprecated v2 capabilities in a way that may be insecure [ 191.984019][ T2675] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 192.155123][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 192.165645][ T2675] usb 6-1: Using ep0 maxpacket: 8 [ 192.170732][ T2675] usb 6-1: unable to get BOS descriptor or descriptor too short [ 192.177620][ T2675] usb 6-1: string descriptor 0 read error: -22 [ 192.180251][ T2675] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 192.184279][ T2675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.189255][ T2675] usb 6-1: config 0 descriptor?? [ 192.334007][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 192.337896][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 192.345643][ T10] usb 7-1: string descriptor 0 read error: -22 [ 192.348365][ T10] usb 7-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 192.352062][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.356965][ T10] usb 7-1: config 0 descriptor?? [ 192.424063][ T1936] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 192.604076][ T1936] usb 8-1: Using ep0 maxpacket: 8 [ 192.613220][ T1936] usb 8-1: unable to get BOS descriptor or descriptor too short [ 192.620224][ T1936] usb 8-1: string descriptor 0 read error: -22 [ 192.622651][ T1936] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 192.633997][ T1936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.646123][ T1936] usb 8-1: config 0 descriptor?? [ 192.670057][ T2675] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 192.679785][ T2675] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 192.682806][ T2675] dib0700: firmware download failed at 7 with -22 [ 192.688891][ T2675] usb 6-1: USB disconnect, device number 34 [ 193.263422][ T5249] usb 5-1: USB disconnect, device number 26 [ 193.672913][ T10] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 193.679766][ T8126] FAULT_INJECTION: forcing a failure. [ 193.679766][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 193.685525][ T8126] CPU: 3 PID: 8126 Comm: syz.0.669 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 193.688312][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 193.689692][ T8126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 193.689701][ T8126] Call Trace: [ 193.689706][ T8126] [ 193.689711][ T8126] dump_stack_lvl+0x16c/0x1f0 [ 193.689728][ T8126] should_fail_ex+0x497/0x5b0 [ 193.689745][ T8126] should_failslab+0x9/0x20 [ 193.689760][ T8126] kmem_cache_alloc_node_noprof+0x71/0x310 [ 193.689777][ T8126] ? __alloc_skb+0x2b3/0x380 [ 193.689805][ T8126] __alloc_skb+0x2b3/0x380 [ 193.693262][ T10] dib0700: firmware download failed at 7 with -22 [ 193.697118][ T8126] ? __pfx___alloc_skb+0x10/0x10 [ 193.697159][ T8126] netlink_ack+0x164/0xb20 [ 193.697169][ T8126] ? __dev_queue_xmit+0x85d/0x4130 [ 193.697187][ T8126] netlink_rcv_skb+0x327/0x410 [ 193.697197][ T8126] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 193.697213][ T8126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.697230][ T8126] ? bpf_lsm_capable+0x9/0x10 [ 193.697254][ T8126] ? security_capable+0x98/0xd0 [ 193.697274][ T8126] ? ns_capable+0xd7/0x110 [ 193.697298][ T8126] nfnetlink_rcv+0x1b4/0x430 [ 193.697317][ T8126] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 193.697330][ T8126] ? netlink_deliver_tap+0x1ae/0xcf0 [ 193.697348][ T8126] netlink_unicast+0x542/0x820 [ 193.706554][ T10] usb 7-1: USB disconnect, device number 23 [ 193.709120][ T8126] ? __pfx_netlink_unicast+0x10/0x10 [ 193.709153][ T8126] ? __phys_addr_symbol+0x30/0x80 [ 193.709180][ T8126] ? __check_object_size+0x48e/0x720 [ 193.709204][ T8126] netlink_sendmsg+0x8b8/0xd70 [ 193.709227][ T8126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.756252][ T8126] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 193.758534][ T8126] ____sys_sendmsg+0x9b4/0xb50 [ 193.760653][ T8126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.763002][ T8126] ? get_compat_msghdr+0x11b/0x170 [ 193.765296][ T8126] ? __pfx___lock_acquire+0x10/0x10 [ 193.767482][ T8126] ___sys_sendmsg+0x135/0x1e0 [ 193.769611][ T8126] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.771785][ T8126] ? ksys_write+0x21c/0x260 [ 193.773598][ T8126] ? __fget_light+0x173/0x210 [ 193.775593][ T8126] __sys_sendmsg+0x117/0x1f0 [ 193.777540][ T8126] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.779687][ T8126] __do_fast_syscall_32+0x73/0x120 [ 193.781836][ T8126] do_fast_syscall_32+0x32/0x80 [ 193.783858][ T8126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 193.786667][ T8126] RIP: 0023:0xf747a579 [ 193.788214][ T8126] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 193.792076][ T1936] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 193.796190][ T8126] RSP: 002b:00000000f5d9257c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 193.796215][ T8126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 193.796225][ T8126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 193.796231][ T8126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 193.796238][ T8126] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 193.796244][ T8126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 193.796259][ T8126] [ 193.827082][ T1936] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 193.830539][ T1936] dib0700: firmware download failed at 7 with -22 [ 193.836404][ T1936] usb 8-1: USB disconnect, device number 29 [ 194.240545][ T1354] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243951][ T1354] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.312433][ T8173] FAULT_INJECTION: forcing a failure. [ 194.312433][ T8173] name failslab, interval 1, probability 0, space 0, times 0 [ 194.318671][ T8173] CPU: 0 PID: 8173 Comm: syz.2.676 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 194.323057][ T8173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.327759][ T8173] Call Trace: [ 194.329226][ T8173] [ 194.330529][ T8173] dump_stack_lvl+0x16c/0x1f0 [ 194.332612][ T8173] should_fail_ex+0x497/0x5b0 [ 194.334709][ T8173] should_failslab+0x9/0x20 [ 194.336705][ T8173] __kmalloc_node_noprof+0xd5/0x450 [ 194.339014][ T8173] ? kvmalloc_node_noprof+0x9d/0x1a0 [ 194.341335][ T8173] kvmalloc_node_noprof+0x9d/0x1a0 [ 194.343668][ T8173] vmemdup_user+0x25/0x100 [ 194.345648][ T8173] setxattr_copy+0x148/0x200 [ 194.347654][ T8173] setxattr+0xdd/0x180 [ 194.349314][ T8173] ? __pfx_setxattr+0x10/0x10 [ 194.351447][ T8173] ? mnt_get_write_access+0x20c/0x300 [ 194.353823][ T8173] __ia32_sys_fsetxattr+0x261/0x310 [ 194.356122][ T8173] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 194.359023][ T8173] __do_fast_syscall_32+0x73/0x120 [ 194.361285][ T8173] do_fast_syscall_32+0x32/0x80 [ 194.363432][ T8173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 194.366224][ T8173] RIP: 0023:0xf73d2579 [ 194.368027][ T8173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 194.376650][ T8173] RSP: 002b:00000000f5cea57c EFLAGS: 00000292 ORIG_RAX: 00000000000000e4 [ 194.380173][ T8173] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 194.383741][ T8173] RDX: 0000000020000040 RSI: 0000000000000002 RDI: 0000000000000000 [ 194.387193][ T8173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.390587][ T8173] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 194.393916][ T8173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.397307][ T8173] [ 194.474017][ T5228] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 194.654046][ T5228] usb 5-1: Using ep0 maxpacket: 8 [ 194.659214][ T5228] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.667296][ T5228] usb 5-1: string descriptor 0 read error: -22 [ 194.669896][ T5228] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 194.672890][ T5228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.678945][ T5228] usb 5-1: config 0 descriptor?? [ 194.733987][ T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 194.798821][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 194.802574][ T8201] netlink: 32 bytes leftover after parsing attributes in process `syz.3.683'. [ 194.923999][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 194.928987][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 194.938156][ T10] usb 7-1: string descriptor 0 read error: -22 [ 194.940999][ T10] usb 7-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 194.945232][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.950707][ T10] usb 7-1: config 0 descriptor?? [ 194.988646][ T8217] exFAT-fs (nullb0): invalid boot record signature [ 194.991638][ T8217] exFAT-fs (nullb0): failed to read boot sector [ 194.994798][ T8217] exFAT-fs (nullb0): failed to recognize exfat type [ 195.154090][ T5272] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 195.344109][ T5272] usb 8-1: Using ep0 maxpacket: 8 [ 195.354734][ T5272] usb 8-1: unable to get BOS descriptor or descriptor too short [ 195.370264][ T5272] usb 8-1: string descriptor 0 read error: -22 [ 195.373024][ T5272] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 195.376767][ T5272] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.384139][ T5272] usb 8-1: config 0 descriptor?? [ 195.460110][ T5228] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 195.464755][ T5228] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 195.468186][ T5228] dib0700: firmware download failed at 7 with -22 [ 195.477224][ T5228] usb 5-1: USB disconnect, device number 27 [ 195.726481][ T10] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 195.735515][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 195.739568][ T10] dib0700: firmware download failed at 7 with -22 [ 195.756355][ T10] usb 7-1: USB disconnect, device number 24 [ 196.032572][ T8284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 196.037958][ T5272] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 196.047216][ T5272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 196.050772][ T5272] dib0700: firmware download failed at 7 with -22 [ 196.064766][ T5272] usb 8-1: USB disconnect, device number 30 [ 196.120685][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 196.804216][ T5272] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 196.996569][ T5272] usb 7-1: Using ep0 maxpacket: 8 [ 197.001202][ T5272] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.010895][ T5272] usb 7-1: string descriptor 0 read error: -22 [ 197.014121][ T5272] usb 7-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 197.018148][ T5272] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.023338][ T5272] usb 7-1: config 0 descriptor?? [ 197.151224][ T8350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.705'. [ 197.444024][ T5249] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 197.582467][ T8397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.596817][ T5208] Bluetooth: hci3: ACL packet for unknown connection handle 1993 [ 197.624016][ T5249] usb 5-1: Using ep0 maxpacket: 8 [ 197.629075][ T5249] usb 5-1: unable to get BOS descriptor or descriptor too short [ 197.636708][ T5249] usb 5-1: string descriptor 0 read error: -22 [ 197.639651][ T5249] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 197.643644][ T5249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.649731][ T5249] usb 5-1: config 0 descriptor?? [ 197.889896][ T5272] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 197.903364][ T5272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 197.906936][ T5272] dib0700: firmware download failed at 7 with -22 [ 197.916219][ T5272] usb 7-1: USB disconnect, device number 25 [ 198.197918][ T5249] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 198.203281][ T5249] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 198.206941][ T5249] dib0700: firmware download failed at 7 with -22 [ 198.214573][ T5249] usb 5-1: USB disconnect, device number 28 [ 198.704111][ T5249] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 198.884239][ T5249] usb 6-1: Using ep0 maxpacket: 8 [ 198.889532][ T5249] usb 6-1: unable to get BOS descriptor or descriptor too short [ 198.904206][ T5249] usb 6-1: string descriptor 0 read error: -22 [ 198.908569][ T5249] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 198.912387][ T5249] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.918986][ T5249] usb 6-1: config 0 descriptor?? [ 198.929405][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 198.933591][ T8469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.721'. [ 199.415797][ T5249] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 199.420481][ T5249] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 199.421308][ T8477] input: syz1 as /devices/virtual/input/input8 [ 199.423336][ T5249] dib0700: firmware download failed at 7 with -22 [ 199.425233][ T5249] usb 6-1: USB disconnect, device number 35 [ 199.701296][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.724'. [ 199.954977][ T5273] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 200.044653][ T5249] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 200.075650][ T8555] exFAT-fs (nullb0): invalid boot record signature [ 200.078552][ T8555] exFAT-fs (nullb0): failed to read boot sector [ 200.081387][ T8555] exFAT-fs (nullb0): failed to recognize exfat type [ 200.166203][ T5273] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.170247][ T5273] usb 7-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 200.174750][ T5273] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.178664][ T5273] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 200.183565][ T5273] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 200.192948][ T5273] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 200.197017][ T5273] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 200.200492][ T5273] usb 7-1: Product: syz [ 200.202346][ T5273] usb 7-1: Manufacturer: syz [ 200.207827][ T8500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.212389][ T5273] cdc_wdm 7-1:1.0: skipping garbage [ 200.214835][ T5273] cdc_wdm 7-1:1.0: skipping garbage [ 200.219238][ T5273] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 200.221841][ T5273] cdc_wdm 7-1:1.0: Unknown control protocol [ 200.226303][ T5249] usb 5-1: Using ep0 maxpacket: 8 [ 200.231519][ T5249] usb 5-1: unable to get BOS descriptor or descriptor too short [ 200.239152][ T5249] usb 5-1: string descriptor 0 read error: -22 [ 200.242169][ T5249] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 200.245884][ T5249] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.251781][ T5249] usb 5-1: config 0 descriptor?? [ 200.416137][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.419149][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.421920][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.424839][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.427608][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.430460][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.433261][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.436093][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.438649][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.441135][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.444082][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.446948][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.449814][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.452633][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.455465][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.458695][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.461531][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.464244][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.467117][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 200.469965][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 200.476302][ T8500] FAULT_INJECTION: forcing a failure. [ 200.476302][ T8500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.482893][ T8500] CPU: 0 PID: 8500 Comm: syz.2.723 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 200.489891][ T8500] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 200.494465][ T8500] Call Trace: [ 200.496041][ T8500] [ 200.497343][ T8500] dump_stack_lvl+0x16c/0x1f0 [ 200.499531][ T8500] should_fail_ex+0x497/0x5b0 [ 200.501627][ T8500] _copy_to_user+0x30/0xc0 [ 200.503593][ T8500] simple_read_from_buffer+0xd0/0x160 [ 200.505950][ T8500] proc_fail_nth_read+0x1b0/0x290 [ 200.508136][ T8500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.510541][ T8500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.512953][ T8500] vfs_read+0x1d4/0xbd0 [ 200.514859][ T8500] ? __fdget_pos+0xeb/0x180 [ 200.516902][ T8500] ? __pfx_vfs_read+0x10/0x10 [ 200.518969][ T8500] ? __pfx___mutex_lock+0x10/0x10 [ 200.521243][ T8500] ? __fget_files+0x256/0x400 [ 200.523389][ T8500] ksys_read+0x12f/0x260 [ 200.525252][ T8500] ? __pfx_ksys_read+0x10/0x10 [ 200.527371][ T8500] __do_fast_syscall_32+0x73/0x120 [ 200.529583][ T8500] do_fast_syscall_32+0x32/0x80 [ 200.531684][ T8500] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.534411][ T8500] RIP: 0023:0xf73d2579 [ 200.536008][ T8500] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 200.543136][ T8500] RSP: 002b:00000000f5cea5b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 200.546911][ T8500] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f5cea630 [ 200.550265][ T8500] RDX: 000000000000000f RSI: 00000000f73bcff4 RDI: 0000000000000000 [ 200.553825][ T8500] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 200.557127][ T8500] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 200.560438][ T8500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.563752][ T8500] [ 200.565882][ T10] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 200.744050][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 200.752440][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 200.762222][ T10] usb 8-1: string descriptor 0 read error: -22 [ 200.765360][ T10] usb 8-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 200.769295][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.776665][ T10] usb 8-1: config 0 descriptor?? [ 201.071799][ T5249] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 201.077096][ T5249] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 201.080002][ T5249] dib0700: firmware download failed at 7 with -22 [ 201.081822][ T8582] FAULT_INJECTION: forcing a failure. [ 201.081822][ T8582] name failslab, interval 1, probability 0, space 0, times 0 [ 201.085447][ T5249] usb 5-1: USB disconnect, device number 29 [ 201.091677][ T8582] CPU: 1 PID: 8582 Comm: syz.1.735 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 201.095127][ T8582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 201.098823][ T8582] Call Trace: [ 201.099921][ T8582] [ 201.100894][ T8582] dump_stack_lvl+0x16c/0x1f0 [ 201.102835][ T8582] should_fail_ex+0x497/0x5b0 [ 201.104964][ T8582] should_failslab+0x9/0x20 [ 201.106977][ T8582] kmem_cache_alloc_node_noprof+0x71/0x310 [ 201.109542][ T8582] ? __alloc_skb+0x2b3/0x380 [ 201.111610][ T8582] __alloc_skb+0x2b3/0x380 [ 201.113593][ T8582] ? __pfx___alloc_skb+0x10/0x10 [ 201.115790][ T8582] ? genl_rcv_msg+0x520/0x800 [ 201.117863][ T8582] ? genl_rcv_msg+0x4bd/0x800 [ 201.119943][ T8582] netlink_ack+0x164/0xb20 [ 201.121985][ T8582] netlink_rcv_skb+0x327/0x410 [ 201.124092][ T8582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.126288][ T8582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.128544][ T8582] ? down_read+0xc9/0x330 [ 201.130474][ T8582] ? __pfx_down_read+0x10/0x10 [ 201.132625][ T8582] ? netlink_deliver_tap+0x1ae/0xcf0 [ 201.134958][ T8582] genl_rcv+0x28/0x40 [ 201.136607][ T8582] netlink_unicast+0x542/0x820 [ 201.138821][ T8582] ? __pfx_netlink_unicast+0x10/0x10 [ 201.141191][ T8582] ? __phys_addr_symbol+0x30/0x80 [ 201.143259][ T8582] ? __check_object_size+0x48e/0x720 [ 201.145388][ T8582] netlink_sendmsg+0x8b8/0xd70 [ 201.147303][ T8582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.149670][ T8582] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 201.151870][ T8582] ____sys_sendmsg+0x9b4/0xb50 [ 201.153816][ T8582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.156107][ T8582] ? get_compat_msghdr+0x11b/0x170 [ 201.158251][ T8582] ? __pfx___lock_acquire+0x10/0x10 [ 201.160021][ T8582] ___sys_sendmsg+0x135/0x1e0 [ 201.161989][ T8582] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.164164][ T8582] ? ksys_write+0x21c/0x260 [ 201.165990][ T8582] ? __fget_light+0x173/0x210 [ 201.167997][ T8582] __sys_sendmsg+0x117/0x1f0 [ 201.170073][ T8582] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.172290][ T8582] __do_fast_syscall_32+0x73/0x120 [ 201.174326][ T8582] do_fast_syscall_32+0x32/0x80 [ 201.176023][ T8582] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.178234][ T8582] RIP: 0023:0xf7440579 [ 201.179764][ T8582] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 201.187743][ T8582] RSP: 002b:00000000f5d5857c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 201.191237][ T8582] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000180 [ 201.194669][ T8582] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.198136][ T8582] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.201485][ T8582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 201.205001][ T8582] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.208461][ T8582] [ 201.317040][ T8593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.325170][ T5208] Bluetooth: hci3: ACL packet for unknown connection handle 1993 [ 201.924114][ T10] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 201.931115][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 201.938945][ T10] dib0700: firmware download failed at 7 with -22 [ 201.947750][ T10] usb 8-1: USB disconnect, device number 31 [ 203.123844][ T8671] binder: 8670:8671 ioctl c0306201 20000000 returned -14 [ 203.209808][ T8672] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 203.924148][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 204.117183][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 204.124932][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 204.142077][ T10] usb 5-1: string descriptor 0 read error: -22 [ 204.145523][ T10] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 204.149538][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.162355][ T10] usb 5-1: config 0 descriptor?? [ 204.238660][ T8690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.748'. [ 204.248754][ T8690] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 204.251856][ T8690] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 204.259239][ T8690] vhci_hcd vhci_hcd.0: Device attached [ 204.269899][ T8691] vhci_hcd: cannot find the pending unlink 5 [ 204.354823][ T8691] vhci_hcd: connection closed [ 204.359030][ T1090] vhci_hcd: stop threads [ 204.363615][ T1090] vhci_hcd: release socket [ 204.366165][ T1090] vhci_hcd: disconnect device [ 204.766509][ T10] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 204.772959][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 204.776028][ T10] dib0700: firmware download failed at 7 with -22 [ 204.782126][ T10] usb 5-1: USB disconnect, device number 30 [ 205.045585][ T8716] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 205.158653][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.751'. [ 205.424148][ C0] wdm_int_callback: 26436 callbacks suppressed [ 205.424166][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.429535][ C0] wdm_int_callback: 26436 callbacks suppressed [ 205.429545][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.434821][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.437503][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.440152][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.442825][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.445473][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.448240][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.450756][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.453374][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.456015][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.458641][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.461304][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.463938][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.466556][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.469070][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.471410][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.473925][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.476234][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 205.478733][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 205.512777][ T8737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.521511][ T5208] Bluetooth: hci3: ACL packet for unknown connection handle 1993 [ 205.634006][ T5272] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 205.824753][ T5272] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 205.829811][ T5272] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.835564][ T5272] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.840340][ T5272] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 205.851236][ T5272] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 205.855964][ T5272] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 205.860287][ T5272] usb 8-1: Manufacturer: syz [ 205.867072][ T5272] usb 8-1: config 0 descriptor?? [ 206.327810][ T5272] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 206.335096][ T5272] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 206.363217][ T5272] appleir 0003:05AC:8243.0002: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 206.482794][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.494416][ T5208] Bluetooth: hci3: ACL packet for unknown connection handle 1993 [ 206.759058][ T8786] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 206.997511][ T8730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.003597][ T8730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.184129][ T25] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 207.362236][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 207.375651][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 207.380684][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.389928][ T25] usb 5-1: string descriptor 0 read error: -22 [ 207.392952][ T25] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 207.397552][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.402944][ T25] usb 5-1: config 0 descriptor?? [ 207.762260][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 208.281944][ T25] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 208.289937][ T25] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 208.293444][ T25] dib0700: firmware download failed at 7 with -22 [ 208.311773][ T25] usb 5-1: USB disconnect, device number 31 [ 208.450788][ T5272] usb 8-1: USB disconnect, device number 32 [ 208.464052][ T826] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 208.653945][ T826] usb 6-1: Using ep0 maxpacket: 8 [ 208.657921][ T826] usb 6-1: unable to get BOS descriptor or descriptor too short [ 208.669217][ T826] usb 6-1: string descriptor 0 read error: -22 [ 208.672044][ T826] usb 6-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 208.675634][ T826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.679862][ T826] usb 6-1: config 0 descriptor?? [ 208.924076][ T5272] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 209.120997][ T5272] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 209.125504][ T5272] usb 8-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 209.130343][ T5272] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 209.136034][ T5272] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 209.141869][ T5272] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 209.156106][ T5272] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.160964][ T5272] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.166200][ T5272] usb 8-1: Product: syz [ 209.168208][ T5272] usb 8-1: Manufacturer: syz [ 209.173716][ T8833] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 209.182536][ T5272] cdc_wdm 8-1:1.0: skipping garbage [ 209.185057][ T5272] cdc_wdm 8-1:1.0: skipping garbage [ 209.191466][ T5272] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 209.202236][ T5272] cdc_wdm 8-1:1.0: Unknown control protocol [ 209.321896][ T826] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 209.328596][ T826] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 209.332178][ T826] dib0700: firmware download failed at 7 with -22 [ 209.339530][ T826] usb 6-1: USB disconnect, device number 36 [ 209.409322][ T5272] usb 8-1: USB disconnect, device number 33 [ 209.875073][ T4640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.880790][ T4640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.884439][ T4640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.889356][ T4640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.892876][ T4640] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.896948][ T4640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.968174][ T8901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 210.003558][ T8875] netfs: Couldn't get user pages (rc=-14) [ 210.071312][ T8876] chnl_net:caif_netlink_parms(): no params data found [ 210.296883][ T8876] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.301016][ T9057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.305753][ T8876] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.308757][ T8876] bridge_slave_0: entered allmulticast mode [ 210.313781][ T8876] bridge_slave_0: entered promiscuous mode [ 210.320089][ T8876] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.323052][ T8876] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.328929][ T8876] bridge_slave_1: entered allmulticast mode [ 210.337365][ T8876] bridge_slave_1: entered promiscuous mode [ 210.354033][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 210.358380][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.776'. [ 210.420475][ T5208] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 210.434014][ C0] wdm_int_callback: 26317 callbacks suppressed [ 210.434032][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.439301][ C0] wdm_int_callback: 26317 callbacks suppressed [ 210.439314][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.444196][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.446536][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.449902][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.452513][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.455286][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.458079][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.465134][ T8876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.475969][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.482321][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.485178][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.487946][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.490781][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.493577][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.496426][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.499165][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.499286][ T8876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.502144][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.508622][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.511543][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 210.514252][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 210.603147][ T8876] team0: Port device team_slave_0 added [ 210.616055][ T8876] team0: Port device team_slave_1 added [ 210.685529][ T9271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.777'. [ 210.722499][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.726214][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.736999][ T8876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.741929][ T8876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.746626][ T8876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.757105][ T8876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.856840][ T8876] hsr_slave_0: entered promiscuous mode [ 210.860468][ T8876] hsr_slave_1: entered promiscuous mode [ 210.866543][ T8876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.869806][ T8876] Cannot create hsr debugfs directory [ 211.142060][ T8876] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.276433][ T8876] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.394882][ T8876] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.463584][ T8876] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.484145][ T5273] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 211.585341][ T8876] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.591402][ T8876] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.598811][ T8876] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.604926][ T8876] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.666504][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.783'. [ 211.693988][ T5273] usb 5-1: Using ep0 maxpacket: 8 [ 211.715289][ T5273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 211.729738][ T5273] usb 5-1: string descriptor 0 read error: -22 [ 211.732956][ T5273] usb 5-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 211.733861][ T8876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.746958][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.765360][ T5273] usb 5-1: config 0 descriptor?? [ 211.766477][ T8876] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.778445][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.781823][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.799410][ T826] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.802543][ T826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.882597][ T9935] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 211.914195][ T5208] Bluetooth: hci1: command tx timeout [ 212.012168][ T8876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.081965][ T8876] veth0_vlan: entered promiscuous mode [ 212.097892][ T8876] veth1_vlan: entered promiscuous mode [ 212.133761][ T8876] veth0_macvtap: entered promiscuous mode [ 212.142695][ T8876] veth1_macvtap: entered promiscuous mode [ 212.158382][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.161699][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.165915][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.169905][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.173811][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.180033][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.183575][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.187489][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.192002][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.196655][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.205042][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.214321][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.219118][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.223202][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.227879][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.247743][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.252742][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.258568][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.263580][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.268580][ T8876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.273535][ T8876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.280422][ T8876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.291371][ T8876] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.295888][ T8876] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.300235][ T8876] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.304817][ T8876] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.370001][ T93] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.374950][ T93] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.397386][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.400881][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.094047][ T5255] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 213.178677][ T5273] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 213.200808][ T5273] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 213.224957][ T5273] dib0700: firmware download failed at 7 with -22 [ 213.254378][ T5273] usb 5-1: USB disconnect, device number 32 [ 213.284643][ T5255] usb 6-1: Using ep0 maxpacket: 32 [ 213.295145][ T5255] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.299465][ T5255] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.302708][ T5255] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.310150][ T5255] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 213.313623][ T5255] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 213.317789][ T5255] usb 6-1: Product: syz [ 213.319674][ T5255] usb 6-1: Manufacturer: syz [ 213.321939][ T5255] usb 6-1: SerialNumber: syz [ 213.329791][ T5255] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input9 [ 213.407402][ T9976] binder: 9972:9976 ioctl c0306201 20000000 returned -14 [ 213.487174][ T9989] ALSA: mixer_oss: invalid OSS volume '¢¢ð½ñL²Îýþ‰XTp0þ¥œý¦' [ 213.490527][ T9988] exFAT-fs (nullb0): invalid boot record signature [ 213.495310][ T9988] exFAT-fs (nullb0): failed to read boot sector [ 213.497622][ T9988] exFAT-fs (nullb0): failed to recognize exfat type [ 213.885574][ T25] usb 6-1: USB disconnect, device number 37 [ 213.920948][ T25] appletouch 6-1:1.0: input: appletouch disconnected [ 214.005067][ T5208] Bluetooth: hci1: command tx timeout [ 214.052937][ T4640] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.059184][ T4640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.063178][ T4640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.068343][ T4640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.072087][ T4640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.077591][ T4640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.247779][T10009] chnl_net:caif_netlink_parms(): no params data found [ 214.265348][ T39] kauditd_printk_skb: 61 callbacks suppressed [ 214.265363][ T39] audit: type=1326 audit(1720532142.106:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.275939][ T39] audit: type=1326 audit(1720532142.106:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.283793][ T39] audit: type=1326 audit(1720532142.106:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=91 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.292476][ T39] audit: type=1326 audit(1720532142.106:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.300915][ T39] audit: type=1326 audit(1720532142.106:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.309017][ T39] audit: type=1326 audit(1720532142.106:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.317899][ T39] audit: type=1326 audit(1720532142.116:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.327043][ T39] audit: type=1326 audit(1720532142.116:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.340477][ T39] audit: type=1326 audit(1720532142.116:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.350150][ T39] audit: type=1326 audit(1720532142.116:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.3.793" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7459579 code=0x7ffc0000 [ 214.526553][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.529807][T10009] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.532966][T10009] bridge_slave_0: entered allmulticast mode [ 214.538006][T10009] bridge_slave_0: entered promiscuous mode [ 214.544909][T10009] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.548125][T10009] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.552478][T10009] bridge_slave_1: entered allmulticast mode [ 214.555663][T10009] bridge_slave_1: entered promiscuous mode [ 214.642694][T10009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.650506][T10009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.703290][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 214.788467][T10009] team0: Port device team_slave_0 added [ 214.797405][T10009] team0: Port device team_slave_1 added [ 214.917854][ C0] ------------[ cut here ]------------ [ 214.918026][T10009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.918042][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.920667][ C0] WARNING: CPU: 0 PID: 10441 at kernel/kcov.c:871 kcov_remote_start+0x274/0x6e0 [ 214.923756][T10009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.934348][ C0] Modules linked in: [ 214.934367][ C0] CPU: 0 PID: 10441 Comm: syz.2.794 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 214.934396][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 214.934408][ C0] RIP: 0010:kcov_remote_start+0x274/0x6e0 [ 214.934434][ C0] Code: c0 22 49 89 47 08 e9 87 00 00 00 f6 c4 01 0f 85 06 fe ff ff e9 dc fd ff ff 44 8b 95 1c 16 00 00 45 85 d2 0f 84 d5 fe ff ff 90 <0f> 0b 90 e9 b9 00 00 00 65 8b 05 55 3a 75 7e 49 c7 c0 52 48 37 8d [ 214.934453][ C0] RSP: 0018:ffffc900000074d0 EFLAGS: 00010002 [ 214.934470][ C0] RAX: 0000000080010101 RBX: 000000000002d648 RCX: ffffffff816bcb0e [ 214.934483][ C0] RDX: 0000000000000002 RSI: ffffffff8b2cbce0 RDI: ffffffff8b8fb5e0 [ 214.934496][ C0] RBP: ffff888029fe0000 R08: 0000000000000000 R09: fffffbfff283e667 [ 214.934507][ C0] R10: 0000000000000001 R11: 0000000000000004 R12: ffff88802c02d648 [ 214.934519][ C0] R13: 0000000000000000 R14: 0100000000000007 R15: ffff888029fe0000 [ 214.934531][ C0] FS: 0000000000000000(0000) GS:ffff88802c000000(0063) knlGS:00000000f5d7bb40 [ 214.934563][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 214.934578][ C0] CR2: 0000000000000000 CR3: 000000000d62a000 CR4: 0000000000350ef0 [ 214.934589][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 214.934600][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 214.934612][ C0] Call Trace: [ 214.934620][ C0] [ 214.934629][ C0] ? show_regs+0x8c/0xa0 [ 214.934652][ C0] ? __warn+0xe5/0x3c0 [ 214.934672][ C0] ? kcov_remote_start+0x274/0x6e0 [ 214.934693][ C0] ? report_bug+0x3c0/0x580 [ 214.934730][ C0] ? handle_bug+0x3d/0x70 [ 214.934755][ C0] ? exc_invalid_op+0x17/0x50 [ 214.943498][T10009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.944102][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 214.944141][ C0] ? hlock_class+0x4e/0x130 [ 214.944166][ C0] ? kcov_remote_start+0x274/0x6e0 [ 214.947214][T10009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.950683][ C0] ? usb_hcd_unmap_urb_for_dma+0x109/0x6b0 [ 214.950728][ C0] ? dummy_timer+0x13e7/0x3530 [ 214.950746][ C0] __usb_hcd_giveback_urb+0x35b/0x6e0 [ 214.950763][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 214.950779][ C0] dummy_timer+0x13f6/0x3530 [ 214.955214][T10009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.957353][ C0] ? __pfx_lock_release+0x10/0x10 [ 215.049468][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 215.051748][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.054019][ C0] ? timerqueue_del+0x83/0x150 [ 215.056151][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.058377][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 215.060683][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.063253][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 215.065760][ C0] hrtimer_interrupt+0x31b/0x800 [ 215.067752][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 215.070087][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 215.072196][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.074785][ C0] RIP: 0010:write_comp_data+0x7d/0x90 [ 215.077118][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 [ 215.085202][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00000297 [ 215.087754][ C0] RAX: 0000000000000002 RBX: ffff88801237f2c0 RCX: ffffffff8a538c04 [ 215.090947][ C0] RDX: ffff888029fe0000 RSI: 0000000000000000 RDI: 0000000000000001 [ 215.093888][ C0] RBP: ffffc90000007c08 R08: 0000000000000001 R09: 0000000000000000 [ 215.096992][ C0] R10: 0000000000000000 R11: 0000000000000004 R12: ffff888058628840 [ 215.100114][ C0] R13: 0000000000000080 R14: ffffc90000007d30 R15: ffff8880651fc000 [ 215.103485][ C0] ? ieee80211_prepare_and_rx_handle+0x1044/0x7070 [ 215.106521][ C0] ieee80211_prepare_and_rx_handle+0x1044/0x7070 [ 215.109029][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 215.111133][ C0] ? hlock_class+0x4e/0x130 [ 215.113146][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 215.116272][ C0] ? sta_info_get_bss+0x18b/0x3a0 [ 215.118641][ C0] ? __pfx_lock_release+0x10/0x10 [ 215.120932][ C0] ieee80211_rx_for_interface+0x10a/0x1f0 [ 215.123454][ C0] ieee80211_rx_list+0x109c/0x2ec0 [ 215.125781][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 215.128287][ C0] ? lock_acquire+0x1b1/0x560 [ 215.130536][ C0] ? skb_dequeue+0x126/0x180 [ 215.132636][ C0] ieee80211_rx_napi+0xdd/0x400 [ 215.134619][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 215.136801][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.139201][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 215.141877][ C0] ieee80211_handle_queued_frames+0xd5/0x130 [ 215.144614][ C0] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 215.147514][ C0] handle_softirqs+0x216/0x8f0 [ 215.149726][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 215.152016][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 215.154254][ C0] ? __ieee80211_tx_skb_tid_band+0x2b5/0x700 [ 215.156682][ C0] do_softirq+0xb2/0xf0 [ 215.158474][ C0] [ 215.159685][ C0] [ 215.160899][ C0] __local_bh_enable_ip+0x100/0x120 [ 215.163158][ C0] ieee80211_tx_skb_tid+0x176/0x4f0 [ 215.165283][ C0] ieee80211_mgmt_tx+0x10b7/0x2260 [ 215.167660][ C0] cfg80211_mlme_mgmt_tx+0x7d4/0x1660 [ 215.170136][ C0] nl80211_tx_mgmt+0x7f9/0xd40 [ 215.172290][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 215.174659][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 215.176801][ C0] ? nl80211_pre_doit+0x1b0/0xb10 [ 215.179132][ C0] genl_family_rcv_msg_doit+0x202/0x2f0 [ 215.181671][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 215.184447][ C0] ? ns_capable+0xd7/0x110 [ 215.186517][ C0] genl_rcv_msg+0x565/0x800 [ 215.188606][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.190833][ C0] ? __dev_queue_xmit+0x85d/0x4130 [ 215.193127][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 215.195614][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 215.198028][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 215.200535][ C0] netlink_rcv_skb+0x165/0x410 [ 215.202789][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.205112][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.207541][ C0] ? down_read+0xc9/0x330 [ 215.209552][ C0] ? __pfx_down_read+0x10/0x10 [ 215.211983][ C0] ? netlink_deliver_tap+0x1ae/0xcf0 [ 215.214440][ C0] genl_rcv+0x28/0x40 [ 215.216317][ C0] netlink_unicast+0x542/0x820 [ 215.218623][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 215.221145][ C0] ? __phys_addr_symbol+0x30/0x80 [ 215.223599][ C0] ? __check_object_size+0x48e/0x720 [ 215.226115][ C0] netlink_sendmsg+0x8b8/0xd70 [ 215.228313][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.231045][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.233896][ C0] ____sys_sendmsg+0x9b4/0xb50 [ 215.236236][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.238832][ C0] ? get_compat_msghdr+0x11b/0x170 [ 215.241874][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 215.244281][ C0] ? try_to_wake_up+0x14b/0x13e0 [ 215.246581][ C0] ___sys_sendmsg+0x135/0x1e0 [ 215.248679][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.251074][ C0] ? kasan_check_range+0x111/0x1a0 [ 215.254045][ C0] ? __fget_light+0x173/0x210 [ 215.255835][ C0] __sys_sendmsg+0x117/0x1f0 [ 215.257547][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.260436][ C0] ? __ia32_sys_futex_time32+0x1da/0x460 [ 215.262923][ C0] __do_fast_syscall_32+0x73/0x120 [ 215.264904][ C0] do_fast_syscall_32+0x32/0x80 [ 215.266788][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.269214][ C0] RIP: 0023:0xf7484579 [ 215.270794][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 215.278116][ C0] RSP: 002b:00000000f5d7b57c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 215.281368][ C0] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000200 [ 215.284437][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.287508][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.290555][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.293425][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.296103][ C0] [ 215.297181][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 215.299943][ C0] CPU: 0 PID: 10441 Comm: syz.2.794 Not tainted 6.10.0-rc7-syzkaller-00003-g4376e966ecb7 #0 [ 215.303843][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.307797][ C0] Call Trace: [ 215.309085][ C0] [ 215.310235][ C0] dump_stack_lvl+0x3d/0x1f0 [ 215.312047][ C0] panic+0x6f5/0x7a0 [ 215.313531][ C0] ? __pfx_panic+0x10/0x10 [ 215.315182][ C0] ? show_trace_log_lvl+0x363/0x500 [ 215.317188][ C0] ? kcov_remote_start+0x274/0x6e0 [ 215.319127][ C0] check_panic_on_warn+0xab/0xb0 [ 215.321039][ C0] __warn+0xf1/0x3c0 [ 215.322549][ C0] ? kcov_remote_start+0x274/0x6e0 [ 215.324498][ C0] report_bug+0x3c0/0x580 [ 215.326193][ C0] handle_bug+0x3d/0x70 [ 215.327813][ C0] exc_invalid_op+0x17/0x50 [ 215.329596][ C0] asm_exc_invalid_op+0x1a/0x20 [ 215.331499][ C0] RIP: 0010:kcov_remote_start+0x274/0x6e0 [ 215.333711][ C0] Code: c0 22 49 89 47 08 e9 87 00 00 00 f6 c4 01 0f 85 06 fe ff ff e9 dc fd ff ff 44 8b 95 1c 16 00 00 45 85 d2 0f 84 d5 fe ff ff 90 <0f> 0b 90 e9 b9 00 00 00 65 8b 05 55 3a 75 7e 49 c7 c0 52 48 37 8d [ 215.341004][ C0] RSP: 0018:ffffc900000074d0 EFLAGS: 00010002 [ 215.343364][ C0] RAX: 0000000080010101 RBX: 000000000002d648 RCX: ffffffff816bcb0e [ 215.346413][ C0] RDX: 0000000000000002 RSI: ffffffff8b2cbce0 RDI: ffffffff8b8fb5e0 [ 215.349464][ C0] RBP: ffff888029fe0000 R08: 0000000000000000 R09: fffffbfff283e667 [ 215.352497][ C0] R10: 0000000000000001 R11: 0000000000000004 R12: ffff88802c02d648 [ 215.355526][ C0] R13: 0000000000000000 R14: 0100000000000007 R15: ffff888029fe0000 [ 215.358565][ C0] ? hlock_class+0x4e/0x130 [ 215.360355][ C0] ? usb_hcd_unmap_urb_for_dma+0x109/0x6b0 [ 215.362583][ C0] ? dummy_timer+0x13e7/0x3530 [ 215.364451][ C0] __usb_hcd_giveback_urb+0x35b/0x6e0 [ 215.366547][ C0] usb_hcd_giveback_urb+0x396/0x450 [ 215.368564][ C0] dummy_timer+0x13f6/0x3530 [ 215.370383][ C0] ? __pfx_lock_release+0x10/0x10 [ 215.372287][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 215.374308][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.376178][ C0] ? timerqueue_del+0x83/0x150 [ 215.377948][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 215.379872][ C0] __hrtimer_run_queues+0x20c/0xcc0 [ 215.381878][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 215.384783][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 215.387155][ C0] hrtimer_interrupt+0x31b/0x800 [ 215.389086][ C0] __sysvec_apic_timer_interrupt+0x10f/0x450 [ 215.391427][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 215.393555][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.395892][ C0] RIP: 0010:write_comp_data+0x7d/0x90 [ 215.397978][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 [ 215.405355][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00000297 [ 215.407695][ C0] RAX: 0000000000000002 RBX: ffff88801237f2c0 RCX: ffffffff8a538c04 [ 215.410588][ C0] RDX: ffff888029fe0000 RSI: 0000000000000000 RDI: 0000000000000001 [ 215.413626][ C0] RBP: ffffc90000007c08 R08: 0000000000000001 R09: 0000000000000000 [ 215.416616][ C0] R10: 0000000000000000 R11: 0000000000000004 R12: ffff888058628840 [ 215.419690][ C0] R13: 0000000000000080 R14: ffffc90000007d30 R15: ffff8880651fc000 [ 215.422733][ C0] ? ieee80211_prepare_and_rx_handle+0x1044/0x7070 [ 215.425234][ C0] ieee80211_prepare_and_rx_handle+0x1044/0x7070 [ 215.427683][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 215.429698][ C0] ? hlock_class+0x4e/0x130 [ 215.431424][ C0] ? __pfx_ieee80211_prepare_and_rx_handle+0x10/0x10 [ 215.434001][ C0] ? sta_info_get_bss+0x18b/0x3a0 [ 215.435952][ C0] ? __pfx_lock_release+0x10/0x10 [ 215.437910][ C0] ieee80211_rx_for_interface+0x10a/0x1f0 [ 215.440062][ C0] ieee80211_rx_list+0x109c/0x2ec0 [ 215.442064][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 215.444176][ C0] ? lock_acquire+0x1b1/0x560 [ 215.446017][ C0] ? skb_dequeue+0x126/0x180 [ 215.447792][ C0] ieee80211_rx_napi+0xdd/0x400 [ 215.449681][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 215.451782][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 215.453799][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 215.456043][ C0] ieee80211_handle_queued_frames+0xd5/0x130 [ 215.458386][ C0] tasklet_action_common.constprop.0+0x24c/0x3e0 [ 215.460840][ C0] handle_softirqs+0x216/0x8f0 [ 215.462730][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 215.464753][ C0] ? irqtime_account_irq+0x18d/0x2e0 [ 215.466789][ C0] ? __ieee80211_tx_skb_tid_band+0x2b5/0x700 [ 215.469109][ C0] do_softirq+0xb2/0xf0 [ 215.470746][ C0] [ 215.471901][ C0] [ 215.473042][ C0] __local_bh_enable_ip+0x100/0x120 [ 215.475058][ C0] ieee80211_tx_skb_tid+0x176/0x4f0 [ 215.477035][ C0] ieee80211_mgmt_tx+0x10b7/0x2260 [ 215.479035][ C0] cfg80211_mlme_mgmt_tx+0x7d4/0x1660 [ 215.481088][ C0] nl80211_tx_mgmt+0x7f9/0xd40 [ 215.483603][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 215.485648][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 215.487600][ C0] ? nl80211_pre_doit+0x1b0/0xb10 [ 215.489573][ C0] genl_family_rcv_msg_doit+0x202/0x2f0 [ 215.491712][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 215.494038][ C0] ? ns_capable+0xd7/0x110 [ 215.495781][ C0] genl_rcv_msg+0x565/0x800 [ 215.497555][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.499495][ C0] ? __dev_queue_xmit+0x85d/0x4130 [ 215.501479][ C0] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 215.503571][ C0] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 215.505747][ C0] ? __pfx_nl80211_post_doit+0x10/0x10 [ 215.507893][ C0] netlink_rcv_skb+0x165/0x410 [ 215.509784][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.511744][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.513829][ C0] ? down_read+0xc9/0x330 [ 215.515528][ C0] ? __pfx_down_read+0x10/0x10 [ 215.517386][ C0] ? netlink_deliver_tap+0x1ae/0xcf0 [ 215.519446][ C0] genl_rcv+0x28/0x40 [ 215.521007][ C0] netlink_unicast+0x542/0x820 [ 215.522909][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 215.524972][ C0] ? __phys_addr_symbol+0x30/0x80 [ 215.526944][ C0] ? __check_object_size+0x48e/0x720 [ 215.528996][ C0] netlink_sendmsg+0x8b8/0xd70 [ 215.530873][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.532936][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.535003][ C0] ____sys_sendmsg+0x9b4/0xb50 [ 215.536861][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.538918][ C0] ? get_compat_msghdr+0x11b/0x170 [ 215.540908][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 215.542939][ C0] ? try_to_wake_up+0x14b/0x13e0 [ 215.544881][ C0] ___sys_sendmsg+0x135/0x1e0 [ 215.546723][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.548746][ C0] ? kasan_check_range+0x111/0x1a0 [ 215.550763][ C0] ? __fget_light+0x173/0x210 [ 215.552599][ C0] __sys_sendmsg+0x117/0x1f0 [ 215.554415][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.556522][ C0] ? __ia32_sys_futex_time32+0x1da/0x460 [ 215.558699][ C0] __do_fast_syscall_32+0x73/0x120 [ 215.560684][ C0] do_fast_syscall_32+0x32/0x80 [ 215.562596][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 215.565043][ C0] RIP: 0023:0xf7484579 [ 215.566649][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 215.574183][ C0] RSP: 002b:00000000f5d7b57c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 215.577392][ C0] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000200 [ 215.580418][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 215.583470][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 215.586531][ C0] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 215.589571][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 215.592579][ C0] [ 215.594416][ C0] Kernel Offset: disabled [ 215.596260][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:35:42 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f94295 RDI=ffffffff94d59e00 RBP=ffffffff94d59dc0 RSP=ffffc90000006e38 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000008 R12=0000000000000000 R13=0000000000000065 R14=ffffffff84f94230 R15=0000000000000000 RIP=ffffffff84f942bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000d62a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88802c0462e0 RCX=ffffffff818263bb RDX=ffff888020998000 RSI=0000000000000001 RDI=0000000000000000 RBP=0000000000000003 RSP=ffffc90007567908 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed1005808c5d R13=0000000000000001 R14=ffff88802c0462e8 R15=ffff88802c13fd80 RIP=ffffffff818e8990 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b67f1922ea1b2115 91bf0cf160707423 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4810a286829be70 1df9d7ca18ebe595 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 454f810254c919dc 40b3bba54cd890e2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2357f250b3d1d016 ebe266def9627796 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001080 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000083 5bd621ea5bdd1380 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008300000083 0000008300000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000005bcf3214 000000005bcabe3e ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000a68b5be62ba6 0000008300000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5a7dd751399177c2 8477a659b4f00df6 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cfa50d127bce117c 37f52cb96eff0f40 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff888021faa440 RCX=ffffffff812f0364 RDX=ffff88801a3f2440 RSI=0000000000000008 RDI=ffff888021faa440 RBP=ffff88801a3f2440 RSP=ffffc90006dffa20 R8 =0000000000000001 R9 =ffffed10043f5488 R10=ffff888021faa447 R11=0000000000000000 R12=0000000000004002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff812f0394 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f83f9c73500 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000021750000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84f94295 RDI=ffffffff94d59e00 RBP=ffffffff94d59dc0 RSP=ffffc9002bf26db0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=0000000000000033 R14=ffffffff84f94230 R15=0000000000000000 RIP=ffffffff84f942bf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c300000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000068eae000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffff00 00000000ffffff00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000