last executing test programs: 1m25.526777685s ago: executing program 1 (id=139): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x41, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1000001, {0x8, 0x3d, 0x0, {0x1, 0x7fffffffffffffff, 0x0, 0x1000, 0x11, 0xfffffffffffffffd, 0x1009ec, 0x35741061, 0x10004, 0xa593e9c1ca988eda, 0x3, 0xee01, 0x0, 0x10, 0xf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000db40)="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", 0x2000, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x10001, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x1000) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0x3, 0x4}}, 0x28) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m25.362515452s ago: executing program 1 (id=140): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) preadv(r0, &(0x7f0000000140)=[{0x0, 0x2000}, {&(0x7f0000000500)=""/84, 0x54}], 0x2, 0x4, 0x8008) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) getgroups(0x2, &(0x7f0000000600)=[0x0, 0x0]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) 1m25.336964515s ago: executing program 1 (id=142): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) 1m23.615557633s ago: executing program 1 (id=146): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0x57}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r2, 0x8940, &(0x7f0000000000)=@buf={0x2, &(0x7f0000000080)="ce6c"}) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000d71000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000179000/0x2000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x7) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000007c0)={0xffffffff, 0x0, &(0x7f0000000700)=[{&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000540)=""/70, 0x46}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000000140)=""/5, 0x5}], &(0x7f0000000740)=[0xc985, 0x3, 0x3881b7d, 0x24, 0x8, 0x8, 0x2, 0x9, 0xb, 0xa2], 0x4}, 0xfffffffffffffde8) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010101, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x400000000000, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc, 0x6c}, 0x0, @in6=@empty, 0xfffffffc, 0x0, 0x2, 0x7, 0x200}}, 0xe4) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) pipe(0x0) 1m22.485085591s ago: executing program 1 (id=151): r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) set_tid_address(&(0x7f0000000280)) r5 = syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f00000001c0)) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000003c0)={0x9, "fcbd8bcbbe44a2bd1e8a1f6d57317b8d9ab0fb972cb66a78acac748fcd2e29d5354236a66d35bbf63a94ae0e0978df60666d99ab5effc01ef0a7b973d5522afcd5cf90ee74f4d5b079834d54045dc6351b4230b78ce61d35e0373f79974a04bbb419813de2e7a41b3747a75f53538e9582a8b41c7158d800759a60ee92c56c3f88116f5603e662348648f43534a5d571b29a0571d664743fe3b3c87acf7039f8e3e7d51a82752f9549552ac980cadede2c0633efe5537686ea19c137c9e2f99189009c515c03ab36b6e1f75aabedd6fe10850ac54cba13784ad68809f893d0b82492f83db16e3833639e72da20785bae4d8a8e6d925b4a8602921554731ae9412d0d5bf8046ab313dd30b7624a8b917ccabc12912c48be6d954d044f35519173b65a2214d581588b185545dc309827f964d5a5324446b6b9c2bafc6471b35d900b60c316c5681085cc63ef6225bf208822529eb5a54aceb38f85dfeefc0b41302cb5f5ca80093963c1fc6657a4f67cba81c5efb5bed4cd90603c55aff74d7eda1fa734a772136a69ca2931c3378298c9604f6ea999de4c13349dcff24f4a91006f6a9d77a86de18380af684d31633650d51422358266566a6e3c1f112044f3f07a7a8c53da0cb80b14e6ec76369b3d1e48d87669c06c64bfeb16e9779d035aaf1b62799c3dc61db44057ec37b4ec29fd9619016b753f80279be9539b9f47e34c"}) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000014001b5729bd7000fedbdf251014"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) ptrace$peekuser(0x3, r5, 0x7) 1m22.167253142s ago: executing program 1 (id=152): r0 = syz_open_dev$mouse(&(0x7f0000000380), 0x9, 0x400) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000004c0)={'broute\x00', 0x0, 0x4, 0x54, [0x9, 0x80, 0x7fffffff, 0x2, 0x81, 0x7], 0x5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], &(0x7f0000000440)=""/84}, &(0x7f00000005c0)=0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f031c0003e54de40214000680f3", 0xe, 0x24008040, &(0x7f0000000540)={0xc9, 0x1, r2, 0x1, 0xff, 0x6, @remote}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'macvtap0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "91cee5d1aaab0bdae71fa083cdb51f81695df41766cb3cafb1fda3fa3e6025f2", "56ec92082cf2860d356454fa90602d519e8f47084b09891636f43dddd16435c0", "d868f3eda7bf2ab8a883c3720bd152932480f95fec0f7a20d2b6e1f604a4654a", "1133a33fd4d60bebed50cc1c19d0e83eba095ed99278ccc2c5e88011c3cdfe3d", "1bc3408a3c5ea8292fdf8fb811f5bbbcd52edb4579baf553bf793e47fdbf58cd", "e57f46ce962396e1eb375f67", 0x0, 0x8ef, 0x7ff, 0x8, 0x401}}) r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r6 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f00000000c0)={0x5, 0x4, 0xda56}) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRESHEX=r4, @ANYRES32=r5], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r8, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000340)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r9, &(0x7f0000000580)='7', 0x1) syz_usb_disconnect(r7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) r10 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x2, 0x1, 0x1, 0x9, 0xd}, 0x20) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8daf, 0x4, 0x2, 0x20002f7}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000001340)=0x3500, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) 1m22.151084108s ago: executing program 32 (id=152): r0 = syz_open_dev$mouse(&(0x7f0000000380), 0x9, 0x400) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f00000004c0)={'broute\x00', 0x0, 0x4, 0x54, [0x9, 0x80, 0x7fffffff, 0x2, 0x81, 0x7], 0x5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], &(0x7f0000000440)=""/84}, &(0x7f00000005c0)=0x50) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f031c0003e54de40214000680f3", 0xe, 0x24008040, &(0x7f0000000540)={0xc9, 0x1, r2, 0x1, 0xff, 0x6, @remote}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'macvtap0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "91cee5d1aaab0bdae71fa083cdb51f81695df41766cb3cafb1fda3fa3e6025f2", "56ec92082cf2860d356454fa90602d519e8f47084b09891636f43dddd16435c0", "d868f3eda7bf2ab8a883c3720bd152932480f95fec0f7a20d2b6e1f604a4654a", "1133a33fd4d60bebed50cc1c19d0e83eba095ed99278ccc2c5e88011c3cdfe3d", "1bc3408a3c5ea8292fdf8fb811f5bbbcd52edb4579baf553bf793e47fdbf58cd", "e57f46ce962396e1eb375f67", 0x0, 0x8ef, 0x7ff, 0x8, 0x401}}) r5 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r6 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r6, 0x402c5639, &(0x7f00000000c0)={0x5, 0x4, 0xda56}) r7 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRESHEX=r4, @ANYRES32=r5], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r8, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x3, &(0x7f0000000340)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r9, &(0x7f0000000580)='7', 0x1) syz_usb_disconnect(r7) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x20002f7}) r10 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x2, 0x1, 0x1, 0x9, 0xd}, 0x20) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8daf, 0x4, 0x2, 0x20002f7}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r11, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000001340)=0x3500, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) 24.416754195s ago: executing program 0 (id=463): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0x8, 0x1, 0x6, 0x7, 0x8, 0x3, 0x4, 0x5, 0xd, 0x6, 0x3, 0x8, 0x80000000, 0x7, 0x6, 0xf080efd], 0xc000, 0x49850}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x4180, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/65, 0x41}], 0x1}, 0x101) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x1, 0x0) 23.514154492s ago: executing program 0 (id=468): r0 = openat$cdrom(0xffffff9c, &(0x7f00000000c0), 0xc00, 0x0) ioctl$CDROMPLAYMSF(r0, 0x5303, 0x0) (fail_nth: 2) 23.284688281s ago: executing program 0 (id=469): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x48000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r3, &(0x7f0000000040)=[{&(0x7f00000002c0)="80fd0200004010e3d0706bf66a4505e430cd4a0edaf9e9a393b8ce789d5e465a5ed7a3a185251208e9652a3bf726261c0d15973bf89dd09aa531f59a39c317d9ae06", 0x42}], 0x1, 0x0, 0x5) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000002040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002000)={&(0x7f00000015c0)={0x9c8, 0x0, 0x305, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x5, 0x40, 0x4, 0x8c1, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x7, 0x7}, {0x2}, {}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0xe}, {0x7, 0x7}, {0x1, 0x8}, {0x1, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x6}, {0x4}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2a2, 0x1, 0x1, 0x2, 0x5, 0x3, 0x6, 0x5]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x5}, {}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x4, 0x2}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x3, 0x8}, {0x7}, {0x5, 0x3}, {0x3}, {0x5, 0x8}, {0x2, 0x8}, {0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0xa}, {0x0, 0x6}, {0x7, 0x9}, {0x7}, {0x2, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x4}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1}, {0x6, 0x6}, {0x4, 0x12}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x3, 0x1}, {}, {0x2, 0x2}, {0x6, 0x9}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x1, 0x2}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x8000, 0x4, 0x7ff, 0x78, 0x1, 0x4]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x9, 0x36, 0x30, 0x16, 0x48, 0x9, 0x2, 0x12, 0x18, 0x5, 0x3, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9f, 0x4, 0x7, 0x5, 0x4, 0x69, 0x6, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x10, 0x6654, 0x8, 0x8, 0x1, 0x41]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfffd, 0x1, 0x6, 0x7, 0xb6, 0x1ff, 0x2eb6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x8}, {0x5, 0x9}, {0x1}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x4}, {0x5}, {}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x2, 0x4}, {0x1}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x8}, {0x4, 0xa}, {0x5, 0x1}, {0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x3}, {0x3}, {0x2, 0x3}, {0x0, 0x9}, {0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x7, 0x8}, {0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x2, 0x4, 0x4, 0x4, 0x1, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x5, 0x401, 0x401, 0xc, 0x76b, 0xfeff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x40, 0x6, 0x8, 0x4, 0x2, 0x18, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0x1, 0x4, 0x9, 0x36, 0x16, 0x30, 0x4, 0x30, 0x9, 0x9, 0x4, 0x48, 0x18, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x118, 0xf, 0x2, 0x2, 0x34a6, 0x9, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x6, 0xfff8, 0x0, 0x4, 0x47, 0x2]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x3}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x7}, {0x3}, {0x3, 0x7}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x4}, {0x4}, {0x3, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x3, 0x24, 0x21, 0xb, 0x1b, 0x1, 0x36, 0x60, 0x18, 0x12, 0x36, 0x36, 0x12, 0x10, 0x5, 0x1, 0x12]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x16, 0x6c, 0x16, 0x24, 0x12, 0x9, 0x3, 0xb, 0x60, 0x36, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x9, 0x6, 0x48, 0x36, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x5, 0x5, 0x8, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5e, 0x0, 0xe1, 0x1, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x1b, 0xb, 0x1b, 0x6c, 0x0, 0x16, 0x4, 0xb, 0xc, 0x24, 0x3, 0x3]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x7, 0x16, 0x1b, 0x3, 0x6c, 0x1, 0x60, 0x2, 0x30, 0xb, 0x1b, 0x31, 0x24]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfcb9, 0x1, 0x79, 0x55, 0x70, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x3, 0x0, 0x96, 0x9, 0x7ff, 0x0, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x15, 0x8001, 0x5, 0x9, 0x9, 0x200]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6c, 0x36, 0xc, 0x18, 0x1b, 0x9, 0x18, 0x1, 0xc, 0x9, 0x30, 0xb, 0x4, 0x0, 0x3, 0x4, 0x9, 0xc, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x5, 0x4, 0x800, 0x5, 0x9, 0xdf58]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x5, 0x48, 0x30, 0x6, 0xc, 0x2, 0x36, 0x24, 0x6, 0x16, 0x1, 0x12, 0xb, 0x12, 0x5, 0x48, 0x36, 0x48, 0x6, 0x48, 0x9, 0x18, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf1e5, 0x0, 0x493b, 0x5, 0x40, 0x1, 0x200, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1, 0x7fe2, 0x1, 0x0, 0x800, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x1, 0x10, 0x0, 0x2, 0xe5f, 0xfff7, 0x3]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x6}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe4, 0xb19, 0x7, 0x0, 0x4, 0x4, 0x5, 0x5a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x9, 0x5, 0x9, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x4}, {0x3, 0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0x9}, {0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x3}, {}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x2, 0xd80, 0x8001, 0x2d, 0xfffd, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xff, 0x5, 0x2, 0xf5e, 0x7fff, 0x8000, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x2}, {0x5}, {0x1, 0x19}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x6}, {0x7, 0xa}, {0x7}, {0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x6}, {0x6, 0x7}, {0x1}, {0x5, 0x2}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x7}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x2, 0x3}, {0x4}, {0x6}, {0x3, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb, 0x2, 0x2, 0x7fff, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x5}, {0x2}, {0x5, 0x6}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x9, 0x3, 0x5, 0x7199, 0x9, 0xe58e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xaf0e, 0x8, 0xfffa, 0x8, 0x7, 0x7, 0x565e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x644, 0x1, 0x1000, 0x6016, 0x8fe, 0x401, 0xc00]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x2, 0x6, 0x16, 0x4, 0x36, 0x1b, 0x1, 0x3, 0x1, 0x1b, 0x12, 0x3, 0x1b, 0x30, 0x6, 0x4, 0x9, 0x6c, 0x1, 0x5a, 0x12, 0x18, 0x9, 0x9, 0x60, 0xb, 0x6c, 0x18, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4f83, 0x0, 0x200, 0x0, 0x5, 0x4, 0x255, 0xf000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0xefb, 0x1ff, 0x8000, 0x111, 0x7d, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x763, 0x2, 0x8, 0x6, 0x0, 0x534, 0xbb3f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x1, 0x1, 0x3ff, 0xc298, 0x1c]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xc4f, 0x70d0, 0xe3e, 0x59, 0x8, 0x9, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x36, 0x4, 0x12, 0x30, 0x3, 0x3, 0x30, 0x6, 0x4, 0x17, 0x1, 0x0, 0x3e, 0x16, 0x1b, 0x36, 0xed, 0x60, 0x9, 0x48, 0x18, 0xc, 0x36, 0x16, 0x5]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x9, 0x8, 0x0, 0xfbff, 0xad66, 0x3]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x2, 0x1, 0x16, 0x1b, 0x16, 0x30, 0x18, 0x1, 0x18, 0x6c, 0x5, 0x2, 0x1b, 0x18, 0xd, 0x6c, 0x24, 0x48, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe00, 0x30, 0x9, 0x6, 0x3ff, 0x9, 0x4, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x3ff, 0x5, 0x7fff, 0x8, 0x2, 0x3d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x0, 0x6, 0x3, 0xfff9, 0x7, 0xfe]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x1ff, 0xaf, 0x1, 0x0, 0x8000, 0x8]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x5, 0x4, 0x1, 0x1000, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x7, 0x8, 0x9, 0xff, 0x7fff, 0x4]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa57b, 0x3ff, 0x2, 0x80, 0x7, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xb43, 0x8, 0xddd, 0x8, 0xd0e, 0x40c2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x3, 0xcecf, 0x40, 0x4, 0x8, 0x6, 0x8001]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x9}, {0x3, 0xa}, {0x2, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0xa}, {0x6, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x5}, {0x7, 0x8}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x19}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe01, 0x100, 0x1000, 0x7, 0x7b, 0x0, 0xb00, 0xf855]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x6, 0x8, 0x9, 0x7f, 0xd, 0xa]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x9, 0x2, 0xa, 0xfb3, 0xd5b9, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x5, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x9}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0x8}, {0x3, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {}, {0x5, 0xa}, {0x1, 0x8}, {0x0, 0xa}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0x9}, {0x6, 0x7}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0x2}, {}, {0x5, 0x4}, {0x7, 0x2}, {0x2, 0x5}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x0, 0x9, 0x32, 0x12, 0xb, 0x60, 0x3, 0xc, 0xc]}]}]}]}, 0x9c8}, 0x1, 0x0, 0x0, 0x4000800}, 0x20010000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000011000000850000000700000095"], 0x0, 0x2a7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0xffff7fff}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r11, r9, 0x25, 0x4, @val=@netkit}, 0x1c) syz_emit_ethernet(0x108e, &(0x7f0000000c00)=ANY=[], 0x0) writev(r5, &(0x7f0000001540)=[{&(0x7f00000001c0)="0fe0397181f8895573d24302619d8ac4ee92fba35fe394dd3850b23dd89b7d095920f8196a4f7ba29446d1dc86a25dbf2463a1fb30beda9629c0663b6b582000f5403791b2f4bcc930861a69f2b08000ef8eb6652d59ff39a824a68062780bf4c429948e6106416ce0bf24cc2d6b1e902873e6cfd3ffae530eab2fecc5f6edd2550d3c587d3c6bbaee0d0e54193b4418e12a5fb960b83ee26073ab9453de05681241586133dd0b17dcaec026df5a0466c99ee2bef9462006687622edd74bb0c5f1014c", 0xc3}, {&(0x7f00000002c0)="55464b86a35a62d3893086737b6e399d969e4fb9c283ecaef2b32efba9c20a0ada20c9c1163398fea0237d7d3d28583ea4cb2235269ec42574431018c6ba11a1676824e105e3cc7023dc679f6dc66e26ce764fbcac3231c6c11cfb8fc00d1e47244df22538020fffc0f68f54a39069a8040085215f191d9c7f654d7a0a985d13", 0x80}, {&(0x7f0000000400)="a719e34268892cc934b45b39e1fb000e9a4d", 0x12}, {&(0x7f0000000440)="b6805904c5feb162d5e33cb381f52d2e784a6284f2ca57987922098fc2abecd85f7aa48d6a8e100031d3eba8a43236962ec68f52662ec1e7aaf6b2428f212e457701bd99c597fdc4a58767a2fda94384a9520751ff7ecfabc24be3ce7bae7783f5693f232f6244130f9b991495ab394ce98f1a46602e6ddd7332b32df9ca96c96d212c7cf4c8bfefefe049217863b14b511ca263da7de32b065b021ae2", 0x9d}, {&(0x7f0000000500)="6a39f11f877aa80b9491636a", 0xc}, {&(0x7f0000000540)="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", 0x1000}], 0x6) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4c880) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x1100, 0x1f, 0x1, 0x202, 0x8, 0xfd, 0x3, 0x20000000, 0xa, 0x2000000e, 0x2, 0xb51, 0x1, 0x6, 0x10001, 0x2, 0x200, 0xa, 0x7, 0x402, 0x5, 0x3, 0x7, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x2, 0x7, 0xa]}) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 23.037267523s ago: executing program 0 (id=471): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREADDIR(r2, &(0x7f0000000640)={0xb, 0x29, 0x2, {0xf}}, 0xfffffc95) (async) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000002440)="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", 0x1000}], 0x47, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 32) mkdir(&(0x7f0000000140)='./sys/bus/pci/rescan\x00', 0x8) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) (rerun: 32) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r5, &(0x7f00000000c0)='1\x00', 0x1) (async, rerun: 64) r6 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) (rerun: 64) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000003c0)={0xd2, 0x405, 0x87, "757ec1471be8f8f93fd5e142eaf9cfd60c3eeb2be0de6a65860fd51df7bd4ad05d2e47a4311d59ff71b7393433e9fa5814913b02c46958961dab41eaf5ff41f17906ce0883498e542d5689f2f724a3c9346fe51101a197d212796eef655ff935f473d81a011e607a31ec47095549b6e20190e5b9daaecaeb7f7ecfdb47dd6e711ed28f125f5748bd051bb4c2d4ad915259138e07f79a13c528babbdccb83e2c92aa54006e802a791042ff39a41bfde9ba4956a744d2a33b938a9a4c73cb3cca453dd7340fd3e51ac63fbc7636be0027ae0f6"}) (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) (rerun: 32) write(r7, &(0x7f00000001c0)='1\x00', 0x1) 22.872037624s ago: executing program 0 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0xc, @remote, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}], 0x1, 0x2400c082) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x2b, 0x2c}, 0x44004) 22.795369935s ago: executing program 0 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0/file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000003c0)=@filename='./file0\x00', r4, &(0x7f0000000600)={0x2, 0xe26, 0x1, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 6.686568877s ago: executing program 33 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0100000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0/file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000003c0)=@filename='./file0\x00', r4, &(0x7f0000000600)={0x2, 0xe26, 0x1, 0x5}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 5.591215569s ago: executing program 2 (id=552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000400000004000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0/file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000003c0)=@filename='./file0\x00', r6, &(0x7f0000000600)={0x2, 0xe26, 0x1, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 5.298067026s ago: executing program 4 (id=554): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) (fail_nth: 7) 5.190542402s ago: executing program 4 (id=555): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000800000008000000004dbee1000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0x11, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x1, 0x4f4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, 0x0) r6 = openat$drirender128(0xffffff9c, &(0x7f0000000240), 0x1610c2, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000002c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0], 0x1, r7}) 4.745137199s ago: executing program 4 (id=558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4044810}, 0x20040000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x48840}, 0x10) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) syz_open_procfs(0x0, 0x0) fchdir(r5) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) readlink(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)=""/104, 0x68) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000073, 0x0, 0x8001}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r8, 0x4068aea3, &(0x7f0000000140)) 4.021699332s ago: executing program 3 (id=561): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x10001, 0x3}) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x2, 0x2, 0x1, 0x9}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)=0x40) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000e80), 0xffffffffffffffff) r3 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$kcm(0x29, 0x1, 0x0) (async) r5 = socket$kcm(0x29, 0x1, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') (async) chdir(&(0x7f00000000c0)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) close(r5) (async) close(r5) lseek(r6, 0x5, 0x4) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001480)={0x3c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) 4.020366417s ago: executing program 2 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="010000000400000004000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41100, 0x2b}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(0x0, &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01}}, './file0/file0\x00'}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f00000003c0)=@filename='./file0\x00', r6, &(0x7f0000000600)={0x2, 0xe26, 0x1, 0x5}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) r8 = socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd28, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004091}, 0x808) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) 2.173010843s ago: executing program 2 (id=563): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mkdirat(r0, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x114) rmdir(&(0x7f0000000100)='./config/usb_gadget/g1/functions/ffs.usb0\x00') mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x2622814, 0x0) r1 = socket(0x2b, 0x1, 0x1) r2 = memfd_create(&(0x7f0000000300)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2A7:n\x8c\xa7P\x1a\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x19M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xff\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\bB\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \x90\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2o\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xff\x0f\x00\x00\x00\x00\x00\x00Li\r\x95Z\x89\"_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b)\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca\x00\x00\x00\x00\x00\x03\xfcWZ!<\x16a5ZL.\xe6\x15]\xebY\xaa\xbea\x8e\xdc\xc52r\"\xea\x9e\x03\x11&\xc3JU\xa7\xd6\x8a\xf8\xae>S\xde', 0x0) write(r2, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r2, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x28}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x6000000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000200], 0x29, 0x0, 0x0}, 0x108) syz_emit_ethernet(0x60, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00 \x00', 0x2a, 0x2f, 0x1, @private0, @mcast1, {[], {{0x0, 0x8906, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}, {"881ba4ea2a7651f33888add221e30c0c17f8eceab131"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r3 = open$dir(&(0x7f0000000000)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x149480, 0x85) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x1, 0x8001, {{0x7, 0x4, 0x0, 0x7, 0x1c, 0x68, 0x0, 0xb0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@ra={0x94, 0x4}, @noop]}}}}}) r5 = syz_io_uring_setup(0x3b05, &(0x7f0000000140)={0x0, 0xfffffffe, 0x13580, 0x1, 0xc4}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) r6 = eventfd(0x8) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000080)=r6, 0x1) io_uring_enter(r5, 0x54, 0x4, 0x5, 0x0, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4, @in=@empty}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000840)=0xe4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b000000000006007a6105d7163051800022a300", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=r4, @ANYRES32=r7, @ANYBLOB="00000000020000000500"/28], 0x50) openat(r3, &(0x7f0000000080)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1c1000, 0x40) 2.050456393s ago: executing program 2 (id=564): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') write$nci(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x102) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x3, 0x0, 0x0, 0x9000, 0xffffffffffffffff, 0x74000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3, 0x8, @value=r4}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 1.889224187s ago: executing program 3 (id=565): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x280, 0x1000, 0x40, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x2bfbd6c1, 0xfffffffd}, {0xf4ef, 0xf}, {0x4, 0x2, 0x7fe}, 0x2, 0x1a0, 0xfffffffd, 0xd614, 0x0, 0xe61, 0x35, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3c, 0x2, 0x2, 0x8}) 1.805472789s ago: executing program 3 (id=566): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x2}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x2}, 0x10) accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c, 0x80000) (async) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c, 0x80000) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) (async) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x7}, 0x1) r1 = socket(0x2b, 0x80801, 0x1) ioctl$sock_TIOCINQ(r1, 0x8905, &(0x7f0000000040)) (async) ioctl$sock_TIOCINQ(r1, 0x8905, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f00000003c0)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() (async) getpid() socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) (async) syz_usbip_server_init(0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x9}}, 0x14}}, 0x4004804) ppoll(0x0, 0x0, &(0x7f0000002640)={0x0, 0x3938700}, 0x0, 0x0) r6 = memfd_secret(0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r6, 0x0) 1.60641922s ago: executing program 4 (id=567): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x48000) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x6}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r3, &(0x7f0000000040)=[{&(0x7f00000002c0)="80fd0200004010e3d0706bf66a4505e430cd4a0edaf9e9a393b8ce789d5e465a5ed7a3a185251208e9652a3bf726261c0d15973bf89dd09aa531f59a39c317d9ae06", 0x42}], 0x1, 0x0, 0x5) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000002040)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002000)={&(0x7f00000015c0)={0x9c8, 0x0, 0x305, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x190, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4, 0x5, 0x40, 0x4, 0x8c1, 0x1, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0xa}, {0x0, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x7, 0x7}, {0x2}, {}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x9}, {0x0, 0x6}, {0x1, 0x2}, {0x1, 0x1}, {0x3, 0x8}, {0x7, 0xa}, {0x1, 0x4}, {0x6}, {0x6, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x6, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x6}, {0x7, 0xe}, {0x7, 0x7}, {0x1, 0x8}, {0x1, 0x4}, {0x3, 0x7}, {0x3, 0x9}, {0x7, 0x1}, {0x6, 0x7}, {0x5, 0x3}, {0x0, 0x6}, {0x4, 0x8}, {0x5, 0x1}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x6}, {0x6}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x8}, {0x4, 0xa}, {0x0, 0x3}, {0x7, 0x1}, {0x3, 0x4}, {0x0, 0xa}, {0x2, 0x5}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x5}, {0x7, 0x7}, {0x4, 0x7}, {0x0, 0x6}, {0x4}, {0x2, 0x9}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x0, 0xa}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0x9}, {0x1, 0x8}, {0x5, 0x4}, {0x6, 0x2}, {0x5, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2a2, 0x1, 0x1, 0x2, 0x5, 0x3, 0x6, 0x5]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x5}, {}, {0x6, 0x5}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0x6}, {0x6, 0x5}, {0x1, 0x9}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x2, 0x6}]}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1}, {0x0, 0x4}, {0x6, 0x7}, {0x0, 0x8}, {0x2, 0x1}, {0x4, 0x2}, {0x4, 0x7}, {0x1, 0x1}, {0x0, 0x8}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x5}, {0x5, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x3, 0x8}, {0x7}, {0x5, 0x3}, {0x3}, {0x5, 0x8}, {0x2, 0x8}, {0x4}, {0x4, 0x6}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0xa}, {0x0, 0x6}, {0x7, 0x9}, {0x7}, {0x2, 0x9}, {0x6, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x7}, {0x4}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0xa}, {0x3, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x3, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1}, {0x6, 0x6}, {0x4, 0x12}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x2}, {0x4, 0x6}, {0x3, 0x9}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x8}, {0x0, 0x2}, {0x1, 0x4}, {0x4, 0x7}, {0x4, 0x7}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x2, 0x6}, {0x1, 0xa}, {0x3, 0x7}, {0x7, 0x4}, {0x5, 0x3}, {0x4, 0x3}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x9}, {0x1, 0xa}, {0x5, 0x7}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x4}, {0x4, 0x4}, {0x5, 0x8}, {0x1, 0x8}, {0x0, 0xa}, {0x7, 0x7}, {0x0, 0x1}, {0x6, 0x5}, {0x5, 0x1}, {0x4, 0x4}, {0x4, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x3, 0x1}, {}, {0x2, 0x2}, {0x6, 0x9}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x6, 0x4}, {0x1, 0x1}, {0x2, 0x6}, {0x0, 0xa}, {0x3, 0x6}, {0x7, 0x6}, {0x1, 0x2}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x8000, 0x4, 0x7ff, 0x78, 0x1, 0x4]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1, 0x9, 0x36, 0x30, 0x16, 0x48, 0x9, 0x2, 0x12, 0x18, 0x5, 0x3, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9f, 0x4, 0x7, 0x5, 0x4, 0x69, 0x6, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x4, 0x10, 0x6654, 0x8, 0x8, 0x1, 0x41]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfffd, 0x1, 0x6, 0x7, 0xb6, 0x1ff, 0x2eb6]}}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x6}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x8}, {0x5, 0x9}, {0x1}, {0x3, 0x6}, {0x6, 0x2}, {0x4, 0x4}, {0x5}, {}, {0x4, 0x4}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x6}, {0x2, 0x4}, {0x1}, {0x1, 0x4}, {0x5, 0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x3}, {0x2, 0x2}, {0x0, 0x8}, {0x4, 0xa}, {0x5, 0x1}, {0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x4}, {0x5, 0x6}, {0x4, 0x2}, {0x7, 0x2}, {0x1, 0x7}, {0x1, 0x3}, {0x3}, {0x2, 0x3}, {0x0, 0x9}, {0x6}, {0x1, 0x8}, {0x0, 0x8}, {0x3, 0xa}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x7}, {0x2, 0x8}, {0x3, 0x3}, {0x4, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x7, 0x8}, {0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x8}, {0x4, 0x4}, {0x2, 0x5}, {0x1, 0x3}]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x2, 0x4, 0x4, 0x4, 0x1, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8, 0x5, 0x401, 0x401, 0xc, 0x76b, 0xfeff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff9, 0x40, 0x6, 0x8, 0x4, 0x2, 0x18, 0x5]}}]}]}, @NL80211_ATTR_TX_RATES={0x8c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0x1, 0x4, 0x9, 0x36, 0x16, 0x30, 0x4, 0x30, 0x9, 0x9, 0x4, 0x48, 0x18, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x118, 0xf, 0x2, 0x2, 0x34a6, 0x9, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x6, 0xfff8, 0x0, 0x4, 0x47, 0x2]}}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x1}, {0x3, 0x9}, {0x4, 0x2}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x9}, {0x4, 0x3}, {0x4, 0x3}, {0x0, 0xa}, {0x0, 0x7}, {0x3}, {0x3, 0x7}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x7}, {0x5, 0x7}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x4}, {0x4}, {0x3, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x3, 0x24, 0x21, 0xb, 0x1b, 0x1, 0x36, 0x60, 0x18, 0x12, 0x36, 0x36, 0x12, 0x10, 0x5, 0x1, 0x12]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x124, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x16, 0x6c, 0x16, 0x24, 0x12, 0x9, 0x3, 0xb, 0x60, 0x36, 0x0]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x1b, 0x9, 0x6, 0x48, 0x36, 0x1]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x80, 0x5, 0x5, 0x8, 0x8, 0x0, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5e, 0x0, 0xe1, 0x1, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0x1b, 0xb, 0x1b, 0x6c, 0x0, 0x16, 0x4, 0xb, 0xc, 0x24, 0x3, 0x3]}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x9, 0x7, 0x16, 0x1b, 0x3, 0x6c, 0x1, 0x60, 0x2, 0x30, 0xb, 0x1b, 0x31, 0x24]}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xfcb9, 0x1, 0x79, 0x55, 0x70, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x3, 0x0, 0x96, 0x9, 0x7ff, 0x0, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7f, 0x15, 0x8001, 0x5, 0x9, 0x9, 0x200]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6c, 0x9, 0x6c, 0x36, 0xc, 0x18, 0x1b, 0x9, 0x18, 0x1, 0xc, 0x9, 0x30, 0xb, 0x4, 0x0, 0x3, 0x4, 0x9, 0xc, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x5, 0x4, 0x800, 0x5, 0x9, 0xdf58]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x5, 0x48, 0x30, 0x6, 0xc, 0x2, 0x36, 0x24, 0x6, 0x16, 0x1, 0x12, 0xb, 0x12, 0x5, 0x48, 0x36, 0x48, 0x6, 0x48, 0x9, 0x18, 0x12]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf1e5, 0x0, 0x493b, 0x5, 0x40, 0x1, 0x200, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x3, 0x1}, {0x1, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0x1, 0x7fe2, 0x1, 0x0, 0x800, 0x5, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x1, 0x10, 0x0, 0x2, 0xe5f, 0xfff7, 0x3]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x7, 0x1}, {0x0, 0x6}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x3, 0xa}, {0x1, 0xa}, {0x0, 0x5}, {0x1, 0x4}, {0x5, 0x6}, {0x1, 0x7}]}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe4, 0xb19, 0x7, 0x0, 0x4, 0x4, 0x5, 0x5a]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x2, 0x9, 0x5, 0x9, 0x7, 0x6, 0x3]}}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x7, 0x9}, {0x7, 0x3}, {0x0, 0x8}, {0x1, 0x1}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x9}, {0x1, 0x3}, {0x6, 0x4}, {0x3, 0x3}, {0x4, 0x9}, {0x0, 0xa}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x0, 0x5}, {0x1, 0x6}, {0x4, 0x7}, {0x5, 0x4}, {0x7, 0x3}, {0x0, 0x4}, {0x5, 0x7}, {0x3, 0x9}, {0x2, 0x5}, {0x3, 0x9}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x5, 0x9}, {0x1, 0x9}, {0x2, 0x2}, {0x2, 0x4}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0x9}, {0x2}, {0x7, 0x9}, {0x5, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x9}, {0x3, 0x9}, {0x0, 0x4}, {0x5, 0x8}, {0x2, 0x2}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x5}, {0x6, 0x1}, {0x5, 0x6}, {0x4, 0x1}, {0x6, 0x3}, {}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x2, 0xd80, 0x8001, 0x2d, 0xfffd, 0x2]}}]}]}, @NL80211_ATTR_TX_RATES={0xb8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xff, 0x5, 0x2, 0xf5e, 0x7fff, 0x8000, 0x4]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x2}, {0x5}, {0x1, 0x19}, {0x1, 0xa}, {0x0, 0x2}, {}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x7, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x2, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x8}, {0x4, 0xa}, {0x6}, {0x7, 0xa}, {0x7}, {0x1}, {0x4, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x6}, {0x6, 0x7}, {0x1}, {0x5, 0x2}, {0x1, 0x4}, {0x6, 0x3}, {0x1, 0xa}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0xa}, {0x6, 0xa}, {0x3, 0x9}, {0x2, 0x3}, {0x3, 0x7}, {0x3, 0x1}, {0x5, 0x3}, {0x4, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0xa}, {0x2, 0x3}, {0x4}, {0x6}, {0x3, 0x8}, {0x2, 0x8}, {0x5, 0x6}, {0x4, 0x6}, {0x0, 0x1}, {0x4, 0xa}, {0x4, 0x6}, {0x4, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xb, 0x2, 0x2, 0x7fff, 0x0, 0x0, 0x6]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x0, 0x9}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0x5}, {0x2}, {0x5, 0x6}, {0x2, 0x7}, {0x6, 0x9}, {0x7, 0x3}, {0x2, 0x5}, {0x5, 0x6}, {0x0, 0x7}, {0x5, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x7}, {0x7, 0x6}, {0x5, 0x4}, {0x6, 0x8}, {0x0, 0x4}, {0x3, 0x4}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x6}, {0x3, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x9, 0x3, 0x5, 0x7199, 0x9, 0xe58e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xaf0e, 0x8, 0xfffa, 0x8, 0x7, 0x7, 0x565e]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x644, 0x1, 0x1000, 0x6016, 0x8fe, 0x401, 0xc00]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x2, 0x6, 0x16, 0x4, 0x36, 0x1b, 0x1, 0x3, 0x1, 0x1b, 0x12, 0x3, 0x1b, 0x30, 0x6, 0x4, 0x9, 0x6c, 0x1, 0x5a, 0x12, 0x18, 0x9, 0x9, 0x60, 0xb, 0x6c, 0x18, 0x60, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4f83, 0x0, 0x200, 0x0, 0x5, 0x4, 0x255, 0xf000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x20, 0xefb, 0x1ff, 0x8000, 0x111, 0x7d, 0x3]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x763, 0x2, 0x8, 0x6, 0x0, 0x534, 0xbb3f]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x1, 0x1, 0x3ff, 0xc298, 0x1c]}}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xc4f, 0x70d0, 0xe3e, 0x59, 0x8, 0x9, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x36, 0x4, 0x12, 0x30, 0x3, 0x3, 0x30, 0x6, 0x4, 0x17, 0x1, 0x0, 0x3e, 0x16, 0x1b, 0x36, 0xed, 0x60, 0x9, 0x48, 0x18, 0xc, 0x36, 0x16, 0x5]}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x9, 0x8, 0x0, 0xfbff, 0xad66, 0x3]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x16, 0x2, 0x1, 0x16, 0x1b, 0x16, 0x30, 0x18, 0x1, 0x18, 0x6c, 0x5, 0x2, 0x1b, 0x18, 0xd, 0x6c, 0x24, 0x48, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x204, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe00, 0x30, 0x9, 0x6, 0x3ff, 0x9, 0x4, 0xffff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x3ff, 0x5, 0x7fff, 0x8, 0x2, 0x3d]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x0, 0x6, 0x3, 0xfff9, 0x7, 0xfe]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffc, 0x2, 0x1ff, 0xaf, 0x1, 0x0, 0x8000, 0x8]}}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x5, 0x4, 0x1, 0x1000, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x7, 0x8, 0x9, 0xff, 0x7fff, 0x4]}}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xa57b, 0x3ff, 0x2, 0x80, 0x7, 0x1, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xb43, 0x8, 0xddd, 0x8, 0xd0e, 0x40c2, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x3, 0xcecf, 0x40, 0x4, 0x8, 0x6, 0x8001]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x2}, {0x2, 0x2}, {0x6, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0xa}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x8}, {0x0, 0x2}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x9}, {0x3, 0xa}, {0x2, 0x7}, {0x3, 0x5}, {0x7, 0x2}, {0x1, 0x7}, {0x3, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0x7}, {0x7, 0x6}, {0x0, 0x9}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x2, 0x6}, {0x1, 0x6}, {0x2, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0xa}, {0x6, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x3}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x5, 0x5}, {0x7, 0x8}, {0x3, 0x9}, {0x0, 0x6}, {0x7, 0x19}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfe01, 0x100, 0x1000, 0x7, 0x7b, 0x0, 0xb00, 0xf855]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x6, 0x8, 0x9, 0x7f, 0xd, 0xa]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x9, 0x9, 0x2, 0xa, 0xfb3, 0xd5b9, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x3, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x3}, {0x4}, {0x1, 0x4}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x5, 0x7}, {0x5, 0x1}, {0x6, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0xa}, {0x3, 0x9}, {0x1}, {0x1, 0x9}, {0x3, 0x7}, {0x6}, {0x1, 0x5}, {0x0, 0x2}, {0x1, 0x5}, {0x4, 0x8}, {0x6, 0x9}, {0x4, 0x2}, {0x1, 0x8}, {0x3, 0x1}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x0, 0x2}, {0x6, 0x4}, {0x0, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x4, 0x5}, {0x1, 0x4}, {0x6, 0xa}, {0x0, 0x3}, {0x5, 0x2}, {0x2, 0x2}, {0x1, 0x8}, {0x5, 0x6}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x2, 0x3}, {0x1, 0x7}, {0x0, 0xa}, {0x1, 0xa}, {0x0, 0x4}, {0x5, 0x7}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x3, 0x1}, {}, {0x5, 0xa}, {0x1, 0x8}, {0x0, 0xa}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x6, 0x9}, {0x1}, {0x0, 0x6}, {0x6, 0x1}, {0x6, 0x9}, {0x6, 0x7}, {0x6, 0x9}, {0x3, 0x3}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x2}, {0x0, 0x3}, {0x0, 0x4}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x7, 0x9}, {0x3, 0x5}, {0x0, 0x5}, {0x6, 0x5}, {0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x2}, {0x5, 0x2}, {}, {0x5, 0x4}, {0x7, 0x2}, {0x2, 0x5}, {0x4, 0x6}, {0x4, 0x8}, {0x1, 0x7}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x7}, {0x0, 0x4}]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x0, 0x9, 0x32, 0x12, 0xb, 0x60, 0x3, 0xc, 0xc]}]}]}]}, 0x9c8}, 0x1, 0x0, 0x0, 0x4000800}, 0x20010000) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1802007ffd2f20b1dd156c00000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000011000000850000000700000095"], 0x0, 0x2a7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0xffff7fff}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r11, r9, 0x25, 0x4, @val=@netkit}, 0x1c) syz_emit_ethernet(0x108e, &(0x7f0000000c00)=ANY=[], 0x0) writev(r5, &(0x7f0000001540)=[{&(0x7f00000001c0)="0fe0397181f8895573d24302619d8ac4ee92fba35fe394dd3850b23dd89b7d095920f8196a4f7ba29446d1dc86a25dbf2463a1fb30beda9629c0663b6b582000f5403791b2f4bcc930861a69f2b08000ef8eb6652d59ff39a824a68062780bf4c429948e6106416ce0bf24cc2d6b1e902873e6cfd3ffae530eab2fecc5f6edd2550d3c587d3c6bbaee0d0e54193b4418e12a5fb960b83ee26073ab9453de05681241586133dd0b17dcaec026df5a0466c99ee2bef9462006687622edd74bb0c5f1014c", 0xc3}, {&(0x7f00000002c0)="55464b86a35a62d3893086737b6e399d969e4fb9c283ecaef2b32efba9c20a0ada20c9c1163398fea0237d7d3d28583ea4cb2235269ec42574431018c6ba11a1676824e105e3cc7023dc679f6dc66e26ce764fbcac3231c6c11cfb8fc00d1e47244df22538020fffc0f68f54a39069a8040085215f191d9c7f654d7a0a985d13", 0x80}, {&(0x7f0000000400)="a719e34268892cc934b45b39e1fb000e9a4d", 0x12}, {&(0x7f0000000440)="b6805904c5feb162d5e33cb381f52d2e784a6284f2ca57987922098fc2abecd85f7aa48d6a8e100031d3eba8a43236962ec68f52662ec1e7aaf6b2428f212e457701bd99c597fdc4a58767a2fda94384a9520751ff7ecfabc24be3ce7bae7783f5693f232f6244130f9b991495ab394ce98f1a46602e6ddd7332b32df9ca96c96d212c7cf4c8bfefefe049217863b14b511ca263da7de32b065b021ae2", 0x9d}, {&(0x7f0000000500)="6a39f11f877aa80b9491636a", 0xc}, {&(0x7f0000000540)="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", 0x1000}], 0x6) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4c880) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x1100, 0x1f, 0x1, 0x202, 0x8, 0xfd, 0x3, 0x20000000, 0xa, 0x2000000e, 0x2, 0xb51, 0x1, 0x6, 0x10001, 0x2, 0x200, 0xa, 0x7, 0x402, 0x5, 0x3, 0x7, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x2, 0x7, 0xa]}) socket$inet6_sctp(0xa, 0x5, 0x84) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 1.477415706s ago: executing program 2 (id=568): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x3, 0x0, @vifc_lcl_addr=@rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x80}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1f, 0x803, 0x80100) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000280)=0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c800000080000137dd7977497052a5212fe286e888700000000000000000000040000001800000000000024308dd882f97d18a79ab89967164b3db4c120dc87d4dab7936b", @ANYRES16=r6, @ANYBLOB="00012abd7000fbdbdf250c0000000500080003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406d042dc2000000000001090224288e6dce500c0904000ffe0300020009210c00fc01222800090581034000b481fc"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000001c0)={0x18, &(0x7f0000000140)=ANY=[@ANYRESHEX=r3, @ANYRESHEX=r1, @ANYRES16=r2], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000120001032cbd7000fcdbdf250007002d4e230004000000000800000081000000000000000100", @ANYBLOB="d79dc8378c138221f74f18f57c317203cdba59b45bbc9475a4099bc8fc790125118416181b727c6b4e093873fc3ac9a31d1860a5d871c7cbd24ce09ee75036a93b9fb96a9e4c5e90b40c6db1ce84520f361a15f7598dcbf0ac3296f3bfc6cfe65326bb34e537e5ffad59b31e2dc9872cab3e9980f602391e438066a2344cdf7ca6204b6e133a5ff37e7b7fc5d3dfe3e4d3aa316489517c3638c7c38938888c87702517a9d4c3672b9f77d87799", @ANYBLOB="03000000ff5c00000700000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x3dd66fec0ddfba6f}, 0x40000) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffffff, 0x0, 0x501821, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g1/functions/rndis.usb0/dev_addr\x00', 0x1, 0x0) write(r11, &(0x7f0000000f00)='00:11:22:33:44:55', 0x11) 1.387269971s ago: executing program 4 (id=569): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6, 0x2c00) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000fd3f000000000000090000001801000020646ca500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0000008500000006000000850000001100000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0xa401) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f00000002c0)={0xfffffffb, "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"}) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000080)=0xffffffff) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x280, 0x1000, 0x40, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x2bfbd6c1, 0xfffffffc}, {0xf4ef, 0xf}, {0x3, 0x2, 0x7fe}, 0x2, 0x1a0, 0xfffffffd, 0xd614, 0x0, 0xe61, 0x35, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3c, 0x2, 0x0, 0x8}) 1.006669506s ago: executing program 5 (id=547): r0 = socket$inet(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r4, 0x0, 0x100000000000000}, 0x38) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_RESEND(r6, &(0x7f0000000100)={0x14}, 0x14) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000012000/0x3000)=nil], 0x0, 0x0, 0x6) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000011f000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00') bind$inet(r0, &(0x7f0000000000)={0x2, 0x6f, @broadcast}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/export\x00', &(0x7f0000000100), &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,proto=udp,mountproto=udp,retry=0,timeo=5,retrans=1\x00') (async) recvfrom$inet(r0, &(0x7f0000000140)=""/32, 0x20, 0x0, &(0x7f0000000600)={0x2, 0x0, @empty}, 0x10) 855.085705ms ago: executing program 3 (id=570): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = socket(0x28, 0x5, 0x0) connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x9, @mcast1, 0x8}}}, 0x32) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0x1c}}, 0x0) r3 = gettid() sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x40015) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000040)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) r5 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) r6 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000140)={r12, 0x4}, 0x8) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r7, 0x80083314, 0x0) 854.629662ms ago: executing program 4 (id=571): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(&(0x7f0000000280)='./file0/file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x0, 0x5, 0x20, @local, @private2, 0x700, 0x7, 0x95, 0x3}}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="03ffffe2", @ANYRES16=r7, @ANYBLOB="20002abd7000fedbdf25180000000500060001000000480001800800030002000000140002007663616e3000000000000000000000001400020067656e6576653000000000000000000014000200776c616e3100000000000000000000000c00028008000200a70000002400018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000300030000000800030001000000080007000200000005000600010000000500060000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4005044}, 0x8000) pipe2$9p(&(0x7f0000000080), 0x0) write$tun(r4, &(0x7f0000000840)=ANY=[], 0x11b0) 468.626729ms ago: executing program 3 (id=572): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8001, 0x12) chdir(&(0x7f0000000240)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) (fail_nth: 7) 315.787882ms ago: executing program 3 (id=573): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = msgget$private(0x0, 0x1c0) mq_open(0x0, 0x40, 0x170, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x1003, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x34) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000300), 0x10, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc044565d, &(0x7f0000000100)=@multiplanar_mmap={0x3, 0x0, 0x4, 0x800000, 0x6, {}, {0x2, 0xc, 0xf7, 0x9, 0x1, 0xfb, "ea89bf5b"}, 0x5, 0x1, {&(0x7f0000000180)=[{0x0, 0x9, {0x2}, 0xf7}, {0x3, 0x0, {0x9}, 0x4}]}, 0x9}) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x8000000, r2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96, 0xfffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x5}) ioctl$TCFLSH(r0, 0x5608, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) 0s ago: executing program 2 (id=574): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='44+00,48000,88200,96000,176400,1920', 0x23) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): .425610][ T7061] ? find_held_lock+0x2b/0x80 [ 134.425633][ T7061] __sys_sendmsg+0x160/0x210 [ 134.425650][ T7061] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.425669][ T7061] ? __pfx_ksys_write+0x10/0x10 [ 134.425683][ T7061] __do_fast_syscall_32+0xe7/0x970 [ 134.425701][ T7061] ? lockdep_hardirqs_on+0x78/0x100 [ 134.425717][ T7061] do_fast_syscall_32+0x32/0x70 [ 134.425733][ T7061] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.425748][ T7061] RIP: 0023:0xf702efec [ 134.425762][ T7061] Code: Unable to access opcode bytes at 0xf702efc2. [ 134.425767][ T7061] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 134.425778][ T7061] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 134.425784][ T7061] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.425791][ T7061] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.425797][ T7061] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 134.425803][ T7061] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.425816][ T7061] [ 134.928630][ T7078] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 134.945771][ T7078] qnx6: unable to read the first superblock [ 134.949083][ T7078] qnx6: unable to read the first superblock [ 134.951376][ T7078] qnx6: unable to read the first superblock [ 134.988336][ T5844] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 135.140520][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 135.145092][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 135.149803][ T5844] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 135.153894][ T5844] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 135.160640][ T5844] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 135.174592][ T5844] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.179148][ T5844] usb 9-1: config 0 descriptor?? [ 135.669345][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.279'. [ 136.535347][ T5844] usbhid 9-1:0.0: can't add hid device: -71 [ 136.541703][ T5844] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 136.552355][ T5844] usb 9-1: USB disconnect, device number 5 [ 138.217088][ T7091] syz0: rxe_newlink: already configured on bond_slave_1 [ 138.226891][ T7091] qnx6: unable to read the first superblock [ 138.229119][ T7091] qnx6: unable to read the first superblock [ 138.230988][ T7091] qnx6: unable to read the first superblock [ 138.321791][ T7099] random: crng reseeded on system resumption [ 138.493035][ T34] IPVS: starting estimator thread 0... [ 138.588350][ T7101] IPVS: using max 43 ests per chain, 103200 per kthread [ 138.903307][ T7107] syz0: rxe_newlink: already configured on bond_slave_1 [ 138.922586][ T7107] qnx6: unable to read the first superblock [ 138.926031][ T7107] qnx6: unable to read the first superblock [ 138.928742][ T7107] qnx6: unable to read the first superblock [ 139.348524][ T5924] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 139.513281][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.521503][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.526283][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.530966][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.536696][ T5924] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.540986][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.549433][ T5924] usb 5-1: config 0 descriptor?? [ 140.340467][ T7128] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 140.349275][ T7128] qnx6: unable to read the first superblock [ 140.351643][ T7128] qnx6: unable to read the first superblock [ 140.353598][ T7128] qnx6: unable to read the first superblock [ 140.855982][ T7132] Option 'dnserror' to dns_resolver key: bad/missing value [ 141.637947][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.0.290'. [ 142.043894][ T7156] random: crng reseeded on system resumption [ 142.048307][ T7149] nbd3: detected capacity change from 0 to 63 [ 142.051999][ T7150] block nbd3: NBD_DISCONNECT [ 142.054110][ T7150] block nbd3: Disconnected due to user request. [ 142.062237][ T7150] block nbd3: shutting down sockets [ 142.069390][ T11] blk_print_req_error: 78 callbacks suppressed [ 142.069406][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 142.075837][ T11] buffer_io_error: 138 callbacks suppressed [ 142.075850][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 142.081436][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 142.084427][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 142.087258][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 142.090602][ T239] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.094684][ T239] Buffer I/O error on dev nbd3, logical block 0, async page read [ 142.098022][ T239] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 142.102305][ T7158] binder: 7157:7158 ioctl 4018620d 0 returned -22 [ 142.106849][ T7158] binder: 7157:7158 ioctl 80306e85 800002c0 returned -22 [ 142.112368][ T239] Buffer I/O error on dev nbd3, logical block 1, async page read [ 142.115775][ T239] Buffer I/O error on dev nbd3, logical block 2, async page read [ 142.119939][ T239] Buffer I/O error on dev nbd3, logical block 3, async page read [ 142.125137][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.129099][ T11] Buffer I/O error on dev nbd3, logical block 0, async page read [ 142.132534][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.136147][ T11] Buffer I/O error on dev nbd3, logical block 1, async page read [ 142.144221][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.148503][ T11] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.152206][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.156232][ T11] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 142.162241][ T11] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 142.166789][ T5992] ldm_validate_partition_table(): Disk read failed. [ 142.170671][ T5992] Dev nbd3: unable to read RDB block 0 [ 142.173289][ T5992] nbd3: unable to read partition table [ 142.181515][ T5992] ldm_validate_partition_table(): Disk read failed. [ 142.184342][ T5992] Dev nbd3: unable to read RDB block 0 [ 142.186830][ T5992] nbd3: unable to read partition table [ 142.321398][ T5924] usbhid 5-1:0.0: can't add hid device: -71 [ 142.323351][ T5924] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 142.336552][ T5924] usb 5-1: USB disconnect, device number 9 [ 142.536397][ T7166] capability: warning: `syz.4.303' uses deprecated v2 capabilities in a way that may be insecure [ 142.911517][ T7173] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 142.919913][ T7173] qnx6: unable to set blocksize [ 142.949554][ T7175] FAULT_INJECTION: forcing a failure. [ 142.949554][ T7175] name failslab, interval 1, probability 0, space 0, times 0 [ 142.955025][ T7175] CPU: 3 UID: 0 PID: 7175 Comm: syz.0.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.955047][ T7175] Tainted: [L]=SOFTLOCKUP [ 142.955052][ T7175] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 142.955059][ T7175] Call Trace: [ 142.955064][ T7175] [ 142.955069][ T7175] dump_stack_lvl+0x100/0x190 [ 142.955089][ T7175] should_fail_ex.cold+0x5/0xa [ 142.955103][ T7175] should_failslab+0xc2/0x120 [ 142.955120][ T7175] __kmalloc_cache_noprof+0x91/0x6c0 [ 142.955132][ T7175] ? __lock_acquire+0x49f/0x1a40 [ 142.955151][ T7175] ? nsim_fib_event_nb+0x1a8/0xe40 [ 142.955168][ T7175] nsim_fib_event_nb+0x1a8/0xe40 [ 142.955179][ T7175] ? lock_acquire+0x1b9/0x370 [ 142.955190][ T7175] notifier_call_chain+0x99/0x3f0 [ 142.955239][ T7175] atomic_notifier_call_chain+0x71/0x1c0 [ 142.955257][ T7175] call_fib_notifiers+0x33/0x70 [ 142.955277][ T7175] fib6_add_rt2node+0x14e3/0x3df0 [ 142.955300][ T7175] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 142.955316][ T7175] ? fib6_add_1+0xe1c/0x1700 [ 142.955334][ T7175] ? fib6_add+0x60e/0x1eb0 [ 142.955347][ T7175] fib6_add+0x60e/0x1eb0 [ 142.955363][ T7175] ? do_raw_spin_lock+0x128/0x260 [ 142.955375][ T7175] ? __pfx_fib6_add+0x10/0x10 [ 142.955388][ T7175] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.955401][ T7175] ? __asan_memcpy+0x3c/0x60 [ 142.955415][ T7175] ip6_route_add+0xf9/0x1d0 [ 142.955436][ T7175] inet6_rtm_newroute+0x157/0x160 [ 142.955448][ T7175] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 142.955467][ T7175] ? find_held_lock+0x2b/0x80 [ 142.955480][ T7175] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 142.955498][ T7175] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 142.955521][ T7175] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 142.955533][ T7175] rtnetlink_rcv_msg+0x95e/0xe90 [ 142.955551][ T7175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.955572][ T7175] ? ref_tracker_free+0x37e/0x6c0 [ 142.955587][ T7175] netlink_rcv_skb+0x159/0x420 [ 142.955602][ T7175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.955620][ T7175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.955637][ T7175] ? netlink_deliver_tap+0x1ae/0xcc0 [ 142.955652][ T7175] netlink_unicast+0x585/0x850 [ 142.955667][ T7175] ? __pfx_netlink_unicast+0x10/0x10 [ 142.955683][ T7175] netlink_sendmsg+0x8b0/0xda0 [ 142.955698][ T7175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.955713][ T7175] ? apparmor_socket_sendmsg+0x15b/0x270 [ 142.955728][ T7175] ____sys_sendmsg+0xa4d/0xbe0 [ 142.955740][ T7175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.955754][ T7175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.955772][ T7175] ___sys_sendmsg+0x190/0x1e0 [ 142.955785][ T7175] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.955804][ T7175] ? find_held_lock+0x2b/0x80 [ 142.955826][ T7175] __sys_sendmsg+0x160/0x210 [ 142.955843][ T7175] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.955862][ T7175] ? __pfx_ksys_write+0x10/0x10 [ 142.955877][ T7175] __do_fast_syscall_32+0xe7/0x970 [ 142.955895][ T7175] ? lockdep_hardirqs_on+0x78/0x100 [ 142.955911][ T7175] do_fast_syscall_32+0x32/0x70 [ 142.955928][ T7175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.955943][ T7175] RIP: 0023:0xf7f45fec [ 142.955959][ T7175] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 142.955963][ T7175] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 142.955975][ T7175] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 142.955982][ T7175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.955988][ T7175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.955994][ T7175] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 142.956013][ T7175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.956028][ T7175] [ 143.408394][ T34] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 143.570561][ T34] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.575846][ T34] usb 5-1: not running at top speed; connect to a high speed hub [ 143.581909][ T34] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 143.584510][ T34] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 143.587014][ T34] usb 5-1: config 14 has no interface number 0 [ 143.589413][ T34] usb 5-1: config 14 has no interface number 1 [ 143.591872][ T34] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 143.595260][ T34] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB [ 143.599175][ T34] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 143.603979][ T34] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 143.607448][ T34] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 143.621832][ T34] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 143.792846][ T34] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.006511][ T34] usb 5-1: config 14 interface 57 has no altsetting 0 [ 144.009120][ T34] usb 5-1: config 14 interface 228 has no altsetting 0 [ 144.012968][ T34] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 144.015978][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.018755][ T34] usb 5-1: Product: syz [ 144.020122][ T34] usb 5-1: Manufacturer: syz [ 144.022074][ T34] usb 5-1: SerialNumber: syz [ 144.298410][ T5742] Bluetooth: hci0: command 0x0405 tx timeout [ 144.412669][ T7187] syzkaller0: entered promiscuous mode [ 144.416450][ T7187] syzkaller0: entered allmulticast mode [ 144.465488][ T34] legousbtower 5-1:14.57: interrupt endpoints not found [ 144.633394][ T7197] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 144.637103][ T7190] gadgetfs: bound to dummy_udc driver [ 144.732876][ T7202] FAULT_INJECTION: forcing a failure. [ 144.732876][ T7202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.738505][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: syz.2.315 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.738534][ T7202] Tainted: [L]=SOFTLOCKUP [ 144.738539][ T7202] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 144.738557][ T7202] Call Trace: [ 144.738563][ T7202] [ 144.738571][ T7202] dump_stack_lvl+0x100/0x190 [ 144.738599][ T7202] should_fail_ex.cold+0x5/0xa [ 144.738621][ T7202] _copy_to_user+0x32/0xd0 [ 144.738650][ T7202] simple_read_from_buffer+0xcb/0x170 [ 144.738682][ T7202] proc_fail_nth_read+0x1af/0x230 [ 144.738709][ T7202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.738737][ T7202] ? rw_verify_area+0xce/0x6d0 [ 144.738764][ T7202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.738787][ T7202] vfs_read+0x1e4/0xb40 [ 144.738808][ T7202] ? __pfx_vfs_read+0x10/0x10 [ 144.738823][ T7202] ? find_held_lock+0x2b/0x80 [ 144.738852][ T7202] ? __fget_files+0x215/0x3d0 [ 144.738873][ T7202] ? __fget_files+0x21f/0x3d0 [ 144.738897][ T7202] ksys_read+0x12a/0x250 [ 144.738914][ T7202] ? __pfx_ksys_read+0x10/0x10 [ 144.738938][ T7202] do_int80_emulation+0x14b/0x720 [ 144.738966][ T7202] asm_int80_emulation+0x1a/0x20 [ 144.738985][ T7202] RIP: 0023:0xf71374eb [ 144.738998][ T7202] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 144.739014][ T7202] RSP: 002b:00000000f53f64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 144.739032][ T7202] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53f65d0 [ 144.739044][ T7202] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 144.739053][ T7202] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.739067][ T7202] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 144.739076][ T7202] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.739101][ T7202] [ 144.888358][ T50] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 144.890943][ C3] gadgetfs: connected [ 145.005248][ T34] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 145.061366][ T7211] netlink: 20 bytes leftover after parsing attributes in process `syz.4.318'. [ 145.339569][ T7216] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 145.347835][ T7216] qnx6: unable to set blocksize [ 145.379424][ T50] gadgetfs: disconnected [ 145.586653][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.602564][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.131902][ C3] gadgetfs: connected [ 146.198890][ T50] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 146.211782][ T50] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 146.216890][ T34] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 146.220002][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.231271][ C3] gadgetfs: configuration #1 [ 146.268075][ T7189] gadgetfs: suspended from state 3 [ 146.268417][ T50] usb 6-1: can't set config #1, error -71 [ 146.271064][ T7189] gadgetfs: disconnected [ 146.277175][ T50] usb 6-1: USB disconnect, device number 3 [ 146.580068][ T7227] netlink: 'syz.2.324': attribute type 4 has an invalid length. [ 146.583164][ T7227] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.324'. [ 146.589295][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 146.611337][ T42] audit: type=1800 audit(1786173925.559:2): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.325" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 146.665114][ T1343] usb 5-1: USB disconnect, device number 10 [ 146.681388][ T1343] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 146.851651][ T7238] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 146.854225][ T7238] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 147.016905][ T7242] netlink: 'syz.3.329': attribute type 12 has an invalid length. [ 147.020180][ T7242] netlink: 'syz.3.329': attribute type 29 has an invalid length. [ 147.023002][ T7242] netlink: 148 bytes leftover after parsing attributes in process `syz.3.329'. [ 147.026411][ T7242] netlink: 'syz.3.329': attribute type 3 has an invalid length. [ 147.033586][ T7242] netlink: 'syz.3.329': attribute type 2 has an invalid length. [ 147.040322][ T7242] netlink: 35 bytes leftover after parsing attributes in process `syz.3.329'. [ 147.078112][ T7246] FAULT_INJECTION: forcing a failure. [ 147.078112][ T7246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.083666][ T7246] CPU: 1 UID: 0 PID: 7246 Comm: syz.4.331 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.083693][ T7246] Tainted: [L]=SOFTLOCKUP [ 147.083698][ T7246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.083708][ T7246] Call Trace: [ 147.083713][ T7246] [ 147.083720][ T7246] dump_stack_lvl+0x100/0x190 [ 147.083747][ T7246] should_fail_ex.cold+0x5/0xa [ 147.083766][ T7246] _copy_from_user+0x2e/0xd0 [ 147.083790][ T7246] get_compat_msghdr+0xb3/0x480 [ 147.083815][ T7246] ? __pfx_get_compat_msghdr+0x10/0x10 [ 147.083845][ T7246] ___sys_sendmsg+0x1b6/0x1e0 [ 147.083863][ T7246] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.083888][ T7246] ? find_held_lock+0x2b/0x80 [ 147.083920][ T7246] __sys_sendmsg+0x160/0x210 [ 147.083942][ T7246] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.083968][ T7246] ? __pfx_ksys_write+0x10/0x10 [ 147.083988][ T7246] __do_fast_syscall_32+0xe7/0x970 [ 147.084010][ T7246] ? lockdep_hardirqs_on+0x78/0x100 [ 147.084032][ T7246] do_fast_syscall_32+0x32/0x70 [ 147.084052][ T7246] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.084080][ T7246] RIP: 0023:0xf7ff3fec [ 147.084100][ T7246] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 147.084107][ T7246] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 147.084127][ T7246] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800002c0 [ 147.084136][ T7246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.084145][ T7246] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.084154][ T7246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.084162][ T7246] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.084181][ T7246] [ 147.333043][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'. [ 147.333072][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 147.438541][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 147.460192][ T7263] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 147.694228][ T42] audit: type=1326 audit(1786173926.639:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.702953][ T42] audit: type=1326 audit(1786173926.639:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.712298][ T42] audit: type=1326 audit(1786173926.649:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.721450][ T42] audit: type=1326 audit(1786173926.649:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.730873][ T5924] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 147.750828][ T42] audit: type=1326 audit(1786173926.649:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.768338][ T42] audit: type=1326 audit(1786173926.659:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.784637][ T42] audit: type=1326 audit(1786173926.659:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.793382][ T42] audit: type=1326 audit(1786173926.659:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.830970][ T42] audit: type=1326 audit(1786173926.669:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7271 comm="syz.3.338" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf702efec code=0x7ffc0000 [ 147.878389][ T5924] usb 5-1: device descriptor read/64, error -71 [ 147.931019][ T7283] FAULT_INJECTION: forcing a failure. [ 147.931019][ T7283] name failslab, interval 1, probability 0, space 0, times 0 [ 147.938434][ T7283] CPU: 3 UID: 0 PID: 7283 Comm: syz.4.342 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.938465][ T7283] Tainted: [L]=SOFTLOCKUP [ 147.938472][ T7283] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 147.938482][ T7283] Call Trace: [ 147.938488][ T7283] [ 147.938496][ T7283] dump_stack_lvl+0x100/0x190 [ 147.938525][ T7283] should_fail_ex.cold+0x5/0xa [ 147.938547][ T7283] should_failslab+0xc2/0x120 [ 147.938574][ T7283] __kmalloc_noprof+0xfc/0x820 [ 147.938596][ T7283] ? find_held_lock+0x2b/0x80 [ 147.938618][ T7283] ? sock_kmalloc+0x111/0x170 [ 147.938641][ T7283] sock_kmalloc+0x111/0x170 [ 147.938661][ T7283] cmsghdr_from_user_compat_to_kern+0x5f7/0x7d0 [ 147.938698][ T7283] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 147.938727][ T7283] ? __import_iovec+0x1d2/0x640 [ 147.938763][ T7283] ____sys_sendmsg+0x607/0xbe0 [ 147.938785][ T7283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.938808][ T7283] ? _kstrtoull+0x13c/0x1f0 [ 147.938828][ T7283] ? __pfx__kstrtoull+0x10/0x10 [ 147.938849][ T7283] ___sys_sendmsg+0x190/0x1e0 [ 147.938869][ T7283] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.938887][ T7283] ? __lock_acquire+0x49f/0x1a40 [ 147.938943][ T7283] __sys_sendmmsg+0x309/0x440 [ 147.938972][ T7283] ? __pfx___sys_sendmmsg+0x10/0x10 [ 147.938995][ T7283] ? find_held_lock+0x2b/0x80 [ 147.939019][ T7283] ? __mutex_unlock_slowpath+0x35d/0x930 [ 147.939055][ T7283] ? fput+0x79/0x100 [ 147.939077][ T7283] ? ksys_write+0x1ac/0x250 [ 147.939097][ T7283] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 147.939115][ T7283] ? lockdep_hardirqs_on+0x78/0x100 [ 147.939140][ T7283] __do_fast_syscall_32+0xe7/0x970 [ 147.939165][ T7283] ? lockdep_hardirqs_on+0x78/0x100 [ 147.939218][ T7283] do_fast_syscall_32+0x32/0x70 [ 147.939245][ T7283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.939268][ T7283] RIP: 0023:0xf7ff3fec [ 147.939290][ T7283] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 147.939298][ T7283] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 147.939316][ T7283] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003980 [ 147.939328][ T7283] RDX: 0000000000000001 RSI: 0000000000000040 RDI: 0000000000000000 [ 147.939337][ T7283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.939347][ T7283] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 147.939363][ T7283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.939387][ T7283] [ 148.078417][ T7286] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 148.082547][ T7286] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.087689][ T7286] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.093797][ T7286] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.130160][ T7286] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 148.135578][ T7286] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 148.144424][ T7286] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 148.152424][ T7286] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.165913][ T7286] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 148.185266][ T7286] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.188501][ T7286] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.192131][ T7286] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.198082][ T7286] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.204600][ T7286] virt_wifi0 speed is unknown, defaulting to 1000 [ 148.488587][ T5924] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.628520][ T5924] usb 5-1: device descriptor read/64, error -71 [ 148.632455][ T7291] nbd0: detected capacity change from 0 to 256 [ 148.676889][ T6989] block nbd0: Receive control failed (result -104) [ 148.885655][ T5924] usb usb5-port1: attempt power cycle [ 149.238268][ T5924] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 149.258808][ T5924] usb 5-1: device descriptor read/8, error -71 [ 149.503220][ T5924] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.529049][ T5924] usb 5-1: device descriptor read/8, error -71 [ 149.648755][ T5924] usb usb5-port1: unable to enumerate USB device [ 150.415557][ T7335] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 150.520286][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.356'. [ 150.544123][ T7335] qnx6: unable to set blocksize [ 150.723114][ T7341] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 150.780950][ T7341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.812274][ T7343] bond1: (slave veth3): Enslaving as an active interface with a down link [ 150.829480][ T7345] syzkaller0: entered promiscuous mode [ 150.833959][ T7345] syzkaller0: entered allmulticast mode [ 150.868029][ T7347] netlink: 'syz.4.360': attribute type 1 has an invalid length. [ 150.907333][ T7347] bond1: entered promiscuous mode [ 150.912250][ T7347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.920426][ T7347] FAULT_INJECTION: forcing a failure. [ 150.920426][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 150.930484][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.4.360 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.930514][ T7347] Tainted: [L]=SOFTLOCKUP [ 150.930520][ T7347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 150.930529][ T7347] Call Trace: [ 150.930542][ T7347] [ 150.930550][ T7347] dump_stack_lvl+0x100/0x190 [ 150.930578][ T7347] should_fail_ex.cold+0x5/0xa [ 150.930601][ T7347] should_failslab+0xc2/0x120 [ 150.930627][ T7347] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 150.930651][ T7347] ? __d_alloc+0x35/0xa50 [ 150.930677][ T7347] __d_alloc+0x35/0xa50 [ 150.930697][ T7347] d_alloc+0x4a/0x1e0 [ 150.930716][ T7347] lookup_one_qstr_excl+0x171/0x250 [ 150.930740][ T7347] start_dirop+0x59/0xb0 [ 150.930755][ T7347] simple_start_creating+0xf9/0x110 [ 150.930771][ T7347] ? __pfx_simple_start_creating+0x10/0x10 [ 150.930787][ T7347] ? mntput+0x70/0xa0 [ 150.930802][ T7347] ? simple_pin_fs+0xa3/0x190 [ 150.930827][ T7347] debugfs_start_creating.part.0+0x82/0x170 [ 150.930855][ T7347] __debugfs_create_file+0xb3/0x4f0 [ 150.930879][ T7347] debugfs_create_file_full+0x41/0x60 [ 150.930904][ T7347] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 150.930921][ T7347] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 150.930969][ T7347] ? lockdep_init_map_type+0x5c/0x250 [ 150.930989][ T7347] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 150.931011][ T7347] alloc_netdev_mqs+0x314/0x15c0 [ 150.931042][ T7347] rtnl_create_link+0xc13/0xf80 [ 150.931071][ T7347] rtnl_newlink+0x13bd/0x2380 [ 150.931106][ T7347] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.931129][ T7347] ? rcu_is_watching+0x12/0xc0 [ 150.931152][ T7347] ? kasan_quarantine_put+0x104/0x240 [ 150.931210][ T7347] ? kfree_skbmem+0x19a/0x210 [ 150.931228][ T7347] ? kmem_cache_free+0x127/0x6b0 [ 150.931259][ T7347] ? find_held_lock+0x2b/0x80 [ 150.931290][ T7347] ? find_held_lock+0x2b/0x80 [ 150.931311][ T7347] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 150.931335][ T7347] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 150.931361][ T7347] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.931383][ T7347] rtnetlink_rcv_msg+0x95e/0xe90 [ 150.931408][ T7347] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.931439][ T7347] ? ref_tracker_free+0x37e/0x6c0 [ 150.931460][ T7347] netlink_rcv_skb+0x159/0x420 [ 150.931483][ T7347] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.931510][ T7347] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.931541][ T7347] ? netlink_deliver_tap+0x1ae/0xcc0 [ 150.931563][ T7347] netlink_unicast+0x585/0x850 [ 150.931583][ T7347] ? __pfx_netlink_unicast+0x10/0x10 [ 150.931612][ T7347] netlink_sendmsg+0x8b0/0xda0 [ 150.931640][ T7347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.931662][ T7347] ? apparmor_socket_sendmsg+0x15b/0x270 [ 150.931685][ T7347] ____sys_sendmsg+0xa4d/0xbe0 [ 150.931702][ T7347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.931723][ T7347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.931751][ T7347] ___sys_sendmsg+0x190/0x1e0 [ 150.931773][ T7347] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.931805][ T7347] ? find_held_lock+0x2b/0x80 [ 150.931843][ T7347] __sys_sendmsg+0x160/0x210 [ 150.931867][ T7347] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.931896][ T7347] ? __pfx_ksys_write+0x10/0x10 [ 150.931922][ T7347] __do_fast_syscall_32+0xe7/0x970 [ 150.931951][ T7347] ? lockdep_hardirqs_on+0x78/0x100 [ 150.931974][ T7347] do_fast_syscall_32+0x32/0x70 [ 150.931997][ T7347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.932020][ T7347] RIP: 0023:0xf7ff3fec [ 150.932041][ T7347] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 150.932048][ T7347] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 150.932064][ T7347] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 150.932074][ T7347] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.932083][ T7347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.932092][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.932101][ T7347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.932123][ T7347] [ 151.092846][ T7347] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.095768][ T7347] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 151.099519][ T7347] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 151.107199][ T7347] bond1: (slave ipip0): making interface the new active one [ 151.109786][ T7347] ipip0: entered promiscuous mode [ 151.113303][ T7347] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 151.212387][ T7356] netlink: 36 bytes leftover after parsing attributes in process `syz.0.364'. [ 151.219277][ T999] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 151.230625][ T7356] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 151.343423][ T7361] netlink: 'syz.0.366': attribute type 12 has an invalid length. [ 151.346605][ T7361] netlink: 'syz.0.366': attribute type 29 has an invalid length. [ 151.350454][ T7361] netlink: 148 bytes leftover after parsing attributes in process `syz.0.366'. [ 151.354766][ T7361] netlink: 'syz.0.366': attribute type 3 has an invalid length. [ 151.357324][ T7361] netlink: 35 bytes leftover after parsing attributes in process `syz.0.366'. [ 151.360362][ T7361] FAULT_INJECTION: forcing a failure. [ 151.360362][ T7361] name failslab, interval 1, probability 0, space 0, times 0 [ 151.364409][ T7361] CPU: 3 UID: 0 PID: 7361 Comm: syz.0.366 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.364437][ T7361] Tainted: [L]=SOFTLOCKUP [ 151.364441][ T7361] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 151.364449][ T7361] Call Trace: [ 151.364454][ T7361] [ 151.364458][ T7361] dump_stack_lvl+0x100/0x190 [ 151.364478][ T7361] should_fail_ex.cold+0x5/0xa [ 151.364491][ T7361] should_failslab+0xc2/0x120 [ 151.364509][ T7361] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 151.364525][ T7361] ? __alloc_skb+0x5b7/0x710 [ 151.364540][ T7361] ? __alloc_skb+0x140/0x710 [ 151.364556][ T7361] __alloc_skb+0x140/0x710 [ 151.364570][ T7361] ? __alloc_skb+0x5b7/0x710 [ 151.364585][ T7361] ? __pfx___alloc_skb+0x10/0x10 [ 151.364603][ T7361] netlink_ack+0x117/0xb80 [ 151.364620][ T7361] netlink_rcv_skb+0x333/0x420 [ 151.364633][ T7361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.364652][ T7361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.364670][ T7361] ? netlink_deliver_tap+0x1ae/0xcc0 [ 151.364698][ T7361] netlink_unicast+0x585/0x850 [ 151.364713][ T7361] ? __pfx_netlink_unicast+0x10/0x10 [ 151.364729][ T7361] netlink_sendmsg+0x8b0/0xda0 [ 151.364744][ T7361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.364759][ T7361] ? apparmor_socket_sendmsg+0x15b/0x270 [ 151.364774][ T7361] ____sys_sendmsg+0xa4d/0xbe0 [ 151.364786][ T7361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.364799][ T7361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.364817][ T7361] ___sys_sendmsg+0x190/0x1e0 [ 151.364830][ T7361] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.364849][ T7361] ? find_held_lock+0x2b/0x80 [ 151.364873][ T7361] __sys_sendmsg+0x160/0x210 [ 151.364889][ T7361] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.364909][ T7361] ? __pfx_ksys_write+0x10/0x10 [ 151.364923][ T7361] __do_fast_syscall_32+0xe7/0x970 [ 151.364941][ T7361] ? lockdep_hardirqs_on+0x78/0x100 [ 151.364961][ T7361] do_fast_syscall_32+0x32/0x70 [ 151.364984][ T7361] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.365005][ T7361] RIP: 0023:0xf7f45fec [ 151.365030][ T7361] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 151.365038][ T7361] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 151.365063][ T7361] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 151.365074][ T7361] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.365082][ T7361] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.365089][ T7361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.365096][ T7361] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.365110][ T7361] [ 151.370223][ T999] usb 7-1: unable to get BOS descriptor or descriptor too short [ 151.415551][ T7364] fuse: Unknown parameter '5mG îï5U‹Ÿ- Ø>5ÕÁV[ו˜MTuCú椳Ly™*' [ 151.419364][ T999] usb 7-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 151.468945][ T999] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.471761][ T999] usb 7-1: Product: syz [ 151.473113][ T999] usb 7-1: Manufacturer: syz [ 151.474563][ T999] usb 7-1: SerialNumber: syz [ 151.527060][ T7367] bond2: entered promiscuous mode [ 151.530080][ T7367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.558647][ T7367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.561864][ T7367] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 151.566063][ T7367] bond2: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 151.575488][ T7367] bond2: (slave ipip0): making interface the new active one [ 151.578983][ T7367] ipip0: entered promiscuous mode [ 151.582392][ T7367] bond2: (slave ipip0): Enslaving as an active interface with an up link [ 151.704343][ T7375] usb 7-1: Unknown version 0x0000 [ 151.803787][ T7379] openvswitch: netlink: Duplicate key (type 6). [ 152.354341][ T61] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 152.588580][ T5924] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 152.713686][ T6385] usb 7-1: USB disconnect, device number 16 [ 152.736281][ T61] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.738536][ T5924] usb 8-1: Using ep0 maxpacket: 8 [ 152.746255][ T5924] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.746352][ T61] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 152.750365][ T5924] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 152.756617][ T5924] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.760481][ T61] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.761046][ T5924] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.769450][ T61] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 152.771804][ T61] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.773767][ T5924] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.776171][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.782126][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.788268][ T61] usb 9-1: Product: syz [ 152.789563][ T61] usb 9-1: Manufacturer: syz [ 152.792606][ T61] usb 9-1: SerialNumber: syz [ 152.808401][ T61] cdc_mbim 9-1:1.0: skipping garbage [ 152.942027][ T7392] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 152.942630][ T7393] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 153.000301][ T5924] usb 8-1: GET_CAPABILITIES returned 0 [ 153.002331][ T5924] usbtmc 8-1:16.0: can't read capabilities [ 153.016572][ T7372] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.202366][ T7383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.208616][ T7383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.345047][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.356411][ T7403] veth1_macvtap: entered promiscuous mode [ 153.359403][ T7403] macsec0: left promiscuous mode [ 153.362968][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.366840][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.370633][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.380540][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.384493][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.388379][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.393961][ T7409] syz.0.380 uses obsolete (PF_INET,SOCK_PACKET) [ 153.394118][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.400705][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.404602][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.408409][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.412306][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.418723][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.422602][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.426533][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.430440][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 153.552922][ T7415] dvmrp0: entered allmulticast mode [ 153.600234][ T5879] usb 8-1: USB disconnect, device number 8 [ 153.701186][ T7372] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 153.828364][ T999] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 153.876021][ T7424] validate_nla: 2 callbacks suppressed [ 153.876038][ T7424] netlink: 'syz.0.384': attribute type 1 has an invalid length. [ 153.894775][ T7424] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.928131][ T7372] libceph: resolve '400' (ret=-3): failed [ 153.933350][ T61] cdc_mbim 9-1:1.0: bind() failure [ 153.936393][ T7424] bond3: (slave veth5): Enslaving as an active interface with a down link [ 153.941853][ T61] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 153.944836][ T61] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 153.947926][ T61] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 153.952569][ T61] usb 9-1: USB disconnect, device number 6 [ 153.981748][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 153.987778][ T7424] bond3: (slave batadv1): making interface the new active one [ 153.992845][ T7424] batadv1: entered promiscuous mode [ 153.993548][ T999] usb 7-1: config index 0 descriptor too short (expected 10276, got 36) [ 153.998337][ T999] usb 7-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 154.002160][ T999] usb 7-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 154.002206][ T7424] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 154.005915][ T999] usb 7-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 154.013675][ T999] usb 7-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 154.019964][ T999] usb 7-1: config 109 interface 0 has no altsetting 0 [ 154.022907][ T999] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 154.026682][ T999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.236403][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.368654][ T7439] netlink: 32 bytes leftover after parsing attributes in process `syz.0.389'. [ 154.447386][ T7415] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.467485][ T999] usb 7-1: string descriptor 0 read error: -71 [ 154.474556][ T999] usbhid 7-1:109.0: can't add hid device: -71 [ 154.477105][ T999] usbhid 7-1:109.0: probe with driver usbhid failed with error -71 [ 154.485031][ T7445] jffs2: notice: (7445) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 154.485278][ T999] usb 7-1: USB disconnect, device number 17 [ 154.627637][ T38] Bluetooth: hci4: Frame reassembly failed (-84) [ 154.719051][ T5924] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 154.870033][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 154.874255][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 154.877689][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 154.881610][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.885704][ T5924] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.888896][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.894533][ T5924] usb 9-1: config 0 descriptor?? [ 155.119964][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 155.223601][ T7464] FAULT_INJECTION: forcing a failure. [ 155.223601][ T7464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.229308][ T7464] CPU: 2 UID: 0 PID: 7464 Comm: syz.0.397 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.229337][ T7464] Tainted: [L]=SOFTLOCKUP [ 155.229344][ T7464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.229376][ T7464] Call Trace: [ 155.229384][ T7464] [ 155.229391][ T7464] dump_stack_lvl+0x100/0x190 [ 155.229420][ T7464] should_fail_ex.cold+0x5/0xa [ 155.229441][ T7464] _copy_from_user+0x2e/0xd0 [ 155.229468][ T7464] get_compat_msghdr+0xb3/0x480 [ 155.229496][ T7464] ? __pfx_get_compat_msghdr+0x10/0x10 [ 155.229530][ T7464] ___sys_sendmsg+0x1b6/0x1e0 [ 155.229551][ T7464] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.229580][ T7464] ? find_held_lock+0x2b/0x80 [ 155.229620][ T7464] __sys_sendmsg+0x160/0x210 [ 155.229644][ T7464] ? __pfx___sys_sendmsg+0x10/0x10 [ 155.229673][ T7464] ? __pfx_ksys_write+0x10/0x10 [ 155.229695][ T7464] __do_fast_syscall_32+0xe7/0x970 [ 155.229716][ T7464] ? lockdep_hardirqs_on+0x78/0x100 [ 155.229733][ T7464] do_fast_syscall_32+0x32/0x70 [ 155.229750][ T7464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.229765][ T7464] RIP: 0023:0xf7f45fec [ 155.229780][ T7464] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 155.229785][ T7464] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 155.229797][ T7464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 155.229804][ T7464] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.229810][ T7464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.229817][ T7464] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.229823][ T7464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.229837][ T7464] [ 155.333124][ T7475] netlink: 36 bytes leftover after parsing attributes in process `syz.0.400'. [ 155.353977][ T7475] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 155.436387][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 155.449954][ T5924] usbhid 9-1:0.0: can't add hid device: -71 [ 155.451930][ T5924] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 155.456120][ T7482] random: crng reseeded on system resumption [ 155.459884][ T5924] usb 9-1: USB disconnect, device number 7 [ 155.462076][ T7484] jffs2: notice: (7484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.577023][ T7492] FAULT_INJECTION: forcing a failure. [ 155.577023][ T7492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.583530][ T7492] CPU: 0 UID: 0 PID: 7492 Comm: syz.0.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.583551][ T7492] Tainted: [L]=SOFTLOCKUP [ 155.583555][ T7492] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.583562][ T7492] Call Trace: [ 155.583567][ T7492] [ 155.583571][ T7492] dump_stack_lvl+0x100/0x190 [ 155.583591][ T7492] should_fail_ex.cold+0x5/0xa [ 155.583604][ T7492] _copy_to_user+0x32/0xd0 [ 155.583623][ T7492] simple_read_from_buffer+0xcb/0x170 [ 155.583645][ T7492] proc_fail_nth_read+0x1af/0x230 [ 155.583662][ T7492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.583679][ T7492] ? rw_verify_area+0xce/0x6d0 [ 155.583696][ T7492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 155.583713][ T7492] vfs_read+0x1e4/0xb40 [ 155.583725][ T7492] ? __pfx_vfs_read+0x10/0x10 [ 155.583734][ T7492] ? find_held_lock+0x2b/0x80 [ 155.583750][ T7492] ? __fget_files+0x215/0x3d0 [ 155.583763][ T7492] ? __fget_files+0x21f/0x3d0 [ 155.583777][ T7492] ksys_read+0x12a/0x250 [ 155.583787][ T7492] ? __pfx_ksys_read+0x10/0x10 [ 155.583801][ T7492] do_int80_emulation+0x14b/0x720 [ 155.583821][ T7492] asm_int80_emulation+0x1a/0x20 [ 155.583833][ T7492] RIP: 0023:0xf71474eb [ 155.583842][ T7492] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 155.583853][ T7492] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 155.583864][ T7492] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54065d0 [ 155.583871][ T7492] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 155.583877][ T7492] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.583883][ T7492] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 155.583890][ T7492] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.583903][ T7492] [ 155.610693][ T7495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.079237][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.414'. [ 156.294221][ T7524] netlink: 24 bytes leftover after parsing attributes in process `syz.0.417'. [ 156.632369][ T5738] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 157.093249][ T42] kauditd_printk_skb: 124 callbacks suppressed [ 157.093270][ T42] audit: type=1326 audit(1786173936.039:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7539 comm="syz.3.421" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x0 [ 157.096733][ T7538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.420'. [ 157.881427][ T7546] FAULT_INJECTION: forcing a failure. [ 157.881427][ T7546] name failslab, interval 1, probability 0, space 0, times 0 [ 157.886208][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: syz.2.422 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.886230][ T7546] Tainted: [L]=SOFTLOCKUP [ 157.886234][ T7546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.886241][ T7546] Call Trace: [ 157.886246][ T7546] [ 157.886251][ T7546] dump_stack_lvl+0x100/0x190 [ 157.886272][ T7546] should_fail_ex.cold+0x5/0xa [ 157.886285][ T7546] should_failslab+0xc2/0x120 [ 157.886308][ T7546] __kmalloc_noprof+0xfc/0x820 [ 157.886331][ T7546] ? tomoyo_encode2+0xfb/0x3c0 [ 157.886361][ T7546] tomoyo_encode2+0xfb/0x3c0 [ 157.886387][ T7546] tomoyo_encode+0x29/0x50 [ 157.886408][ T7546] tomoyo_realpath_from_path+0x18c/0x690 [ 157.886428][ T7546] tomoyo_path_number_perm+0x23c/0x580 [ 157.886442][ T7546] ? tomoyo_path_number_perm+0x22e/0x580 [ 157.886457][ T7546] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 157.886473][ T7546] ? get_pid_task+0x106/0x250 [ 157.886500][ T7546] ? find_held_lock+0x2b/0x80 [ 157.886515][ T7546] ? __fget_files+0x215/0x3d0 [ 157.886526][ T7546] ? hook_file_ioctl_common+0x140/0x440 [ 157.886541][ T7546] ? __fget_files+0x215/0x3d0 [ 157.886554][ T7546] ? __fget_files+0x21f/0x3d0 [ 157.886566][ T7546] security_file_ioctl_compat+0xd3/0x230 [ 157.886584][ T7546] __ia32_compat_sys_ioctl+0xc2/0x360 [ 157.886605][ T7546] __do_fast_syscall_32+0xe7/0x970 [ 157.886623][ T7546] ? lockdep_hardirqs_on+0x78/0x100 [ 157.886639][ T7546] do_fast_syscall_32+0x32/0x70 [ 157.886656][ T7546] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.886671][ T7546] RIP: 0023:0xf7f38fec [ 157.886685][ T7546] Code: Unable to access opcode bytes at 0xf7f38fc2. [ 157.886690][ T7546] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 157.886702][ T7546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400445a0 [ 157.886708][ T7546] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.886715][ T7546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.886721][ T7546] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 157.886728][ T7546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.886741][ T7546] [ 157.886753][ T7546] ERROR: Out of memory at tomoyo_realpath_from_path. [ 157.933934][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'. [ 158.028931][ T7550] loop0: detected capacity change from 0 to 32768 [ 158.136387][ T7550] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 158.188647][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.427'. [ 158.431391][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 158.465188][ T7570] FAULT_INJECTION: forcing a failure. [ 158.465188][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 158.476003][ T7570] CPU: 2 UID: 0 PID: 7570 Comm: syz.3.431 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.476035][ T7570] Tainted: [L]=SOFTLOCKUP [ 158.476042][ T7570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.476052][ T7570] Call Trace: [ 158.476059][ T7570] [ 158.476065][ T7570] dump_stack_lvl+0x100/0x190 [ 158.476093][ T7570] should_fail_ex.cold+0x5/0xa [ 158.476114][ T7570] should_failslab+0xc2/0x120 [ 158.476140][ T7570] __kmalloc_cache_noprof+0x91/0x6c0 [ 158.476161][ T7570] ? nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 158.476186][ T7570] nf_nat_masq_schedule.part.0+0x3bb/0x7a0 [ 158.476205][ T7570] ? __pfx_inet_cmp+0x10/0x10 [ 158.476223][ T7570] ? __pfx_nf_nat_masq_schedule.part.0+0x10/0x10 [ 158.476243][ T7570] ? addr_event.isra.0+0x396/0x560 [ 158.476268][ T7570] masq_inet6_event+0x205/0x250 [ 158.476287][ T7570] ? __pfx_masq_inet6_event+0x10/0x10 [ 158.476307][ T7570] ? ieee80211_ifa6_changed+0xe9/0x440 [ 158.476338][ T7570] notifier_call_chain+0x99/0x3f0 [ 158.476368][ T7570] atomic_notifier_call_chain+0x71/0x1c0 [ 158.476394][ T7570] ipv6_del_addr+0x4e5/0xb00 [ 158.476419][ T7570] ? __pfx_ipv6_del_addr+0x10/0x10 [ 158.476445][ T7570] ? __local_bh_enable_ip+0x9e/0x120 [ 158.476471][ T7570] inet6_addr_del.isra.0+0x2d6/0x6b0 [ 158.476499][ T7570] addrconf_del_ifaddr+0x11e/0x190 [ 158.476516][ T7570] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 158.476539][ T7570] inet6_ioctl+0x166/0x2b0 [ 158.476552][ T7570] ? kasan_quarantine_put+0x104/0x240 [ 158.476567][ T7570] ? __pfx_inet6_ioctl+0x10/0x10 [ 158.476579][ T7570] ? find_held_lock+0x2b/0x80 [ 158.476593][ T7570] ? tomoyo_path_number_perm+0x28f/0x580 [ 158.476610][ T7570] ? tomoyo_path_number_perm+0x28f/0x580 [ 158.476627][ T7570] ? tomoyo_path_number_perm+0x188/0x580 [ 158.476643][ T7570] sock_do_ioctl+0x118/0x280 [ 158.476662][ T7570] ? __pfx_sock_do_ioctl+0x10/0x10 [ 158.476684][ T7570] ? do_vfs_ioctl+0x226/0x13e0 [ 158.476702][ T7570] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 158.476720][ T7570] compat_sock_ioctl+0x568/0x760 [ 158.476735][ T7570] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 158.476746][ T7570] ? hook_file_ioctl_common+0x140/0x440 [ 158.476765][ T7570] ? __fget_files+0x21f/0x3d0 [ 158.476779][ T7570] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 158.476792][ T7570] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 158.476811][ T7570] __do_fast_syscall_32+0xe7/0x970 [ 158.476834][ T7570] ? lockdep_hardirqs_on+0x78/0x100 [ 158.476851][ T7570] do_fast_syscall_32+0x32/0x70 [ 158.476867][ T7570] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.476884][ T7570] RIP: 0023:0xf702efec [ 158.476898][ T7570] Code: Unable to access opcode bytes at 0xf702efc2. [ 158.476904][ T7570] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 158.476916][ T7570] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008936 [ 158.476923][ T7570] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.476929][ T7570] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.476936][ T7570] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.476942][ T7570] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.476956][ T7570] [ 158.478289][ T7569] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 158.692260][ T7569] qnx6: unable to set blocksize [ 158.863753][ T7587] FAULT_INJECTION: forcing a failure. [ 158.863753][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.867789][ T7587] CPU: 3 UID: 0 PID: 7587 Comm: syz.3.435 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.867807][ T7587] Tainted: [L]=SOFTLOCKUP [ 158.867811][ T7587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 158.867818][ T7587] Call Trace: [ 158.867823][ T7587] [ 158.867828][ T7587] dump_stack_lvl+0x100/0x190 [ 158.867847][ T7587] should_fail_ex.cold+0x5/0xa [ 158.867861][ T7587] _copy_to_user+0x32/0xd0 [ 158.867880][ T7587] simple_read_from_buffer+0xcb/0x170 [ 158.867901][ T7587] proc_fail_nth_read+0x1af/0x230 [ 158.867919][ T7587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.867937][ T7587] ? rw_verify_area+0xce/0x6d0 [ 158.867954][ T7587] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.867970][ T7587] vfs_read+0x1e4/0xb40 [ 158.867983][ T7587] ? __pfx_vfs_read+0x10/0x10 [ 158.867992][ T7587] ? find_held_lock+0x2b/0x80 [ 158.868009][ T7587] ? __fget_files+0x215/0x3d0 [ 158.868022][ T7587] ? __fget_files+0x21f/0x3d0 [ 158.868036][ T7587] ksys_read+0x12a/0x250 [ 158.868047][ T7587] ? __pfx_ksys_read+0x10/0x10 [ 158.868061][ T7587] do_int80_emulation+0x14b/0x720 [ 158.868081][ T7587] asm_int80_emulation+0x1a/0x20 [ 158.868093][ T7587] RIP: 0023:0xf71674eb [ 158.868103][ T7587] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 158.868114][ T7587] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 158.868126][ T7587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f541d5d0 [ 158.868132][ T7587] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 158.868138][ T7587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.868145][ T7587] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 158.868151][ T7587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.868177][ T7587] [ 159.150853][ T7596] FAULT_INJECTION: forcing a failure. [ 159.150853][ T7596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.156637][ T7596] CPU: 3 UID: 0 PID: 7596 Comm: syz.3.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.156665][ T7596] Tainted: [L]=SOFTLOCKUP [ 159.156671][ T7596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.156681][ T7596] Call Trace: [ 159.156700][ T7596] [ 159.156707][ T7596] dump_stack_lvl+0x100/0x190 [ 159.156734][ T7596] should_fail_ex.cold+0x5/0xa [ 159.156755][ T7596] _copy_from_iter+0x1f4/0x1690 [ 159.156782][ T7596] ? _copy_from_iter+0x350/0x1690 [ 159.156805][ T7596] ? _copy_from_iter+0x270/0x1690 [ 159.156829][ T7596] ? __pfx__copy_from_iter+0x10/0x10 [ 159.156855][ T7596] ? __pfx__copy_from_iter+0x10/0x10 [ 159.156880][ T7596] ? _copy_from_iter+0x270/0x1690 [ 159.156929][ T7596] copy_page_from_iter+0x238/0x300 [ 159.156959][ T7596] skb_copy_datagram_from_iter+0x399/0x720 [ 159.156994][ T7596] packet_sendmsg+0x224f/0x4eb0 [ 159.157028][ T7596] ? __pfx___might_resched+0x10/0x10 [ 159.157062][ T7596] ? aa_sk_perm+0x309/0xaa0 [ 159.157086][ T7596] ? __pfx_aa_sk_perm+0x10/0x10 [ 159.157101][ T7596] ? __pfx_packet_sendmsg+0x10/0x10 [ 159.157117][ T7596] ? __might_fault+0xc5/0x140 [ 159.157135][ T7596] ? apparmor_socket_sendmsg+0x15b/0x270 [ 159.157150][ T7596] __sys_sendto+0x48b/0x4e0 [ 159.157165][ T7596] ? __pfx_packet_sendmsg+0x10/0x10 [ 159.157181][ T7596] ? __pfx___sys_sendto+0x10/0x10 [ 159.157207][ T7596] ? fput+0x79/0x100 [ 159.157221][ T7596] ? ksys_write+0x1ac/0x250 [ 159.157234][ T7596] __ia32_sys_sendto+0xdd/0x1b0 [ 159.157249][ T7596] ? __do_fast_syscall_32+0x98/0x970 [ 159.157267][ T7596] ? lockdep_hardirqs_on+0x78/0x100 [ 159.157283][ T7596] __do_fast_syscall_32+0xe7/0x970 [ 159.157301][ T7596] ? lockdep_hardirqs_on+0x78/0x100 [ 159.157318][ T7596] do_fast_syscall_32+0x32/0x70 [ 159.157336][ T7596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 159.157352][ T7596] RIP: 0023:0xf702efec [ 159.157367][ T7596] Code: Unable to access opcode bytes at 0xf702efc2. [ 159.157372][ T7596] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 159.157385][ T7596] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 159.157392][ T7596] RDX: 000000000001fffc RSI: 0000000000000000 RDI: 0000000080000140 [ 159.157399][ T7596] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 159.157405][ T7596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.157412][ T7596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.157427][ T7596] [ 159.501960][ T7604] syz0: rxe_newlink: already configured on bond_slave_1 [ 159.506147][ T7604] qnx6: unable to read the first superblock [ 159.508383][ T7604] qnx6: unable to read the first superblock [ 159.510423][ T7604] qnx6: unable to read the first superblock [ 159.554481][ T7606] __nla_validate_parse: 3 callbacks suppressed [ 159.554504][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 159.561516][ T7606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 159.705433][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.442'. [ 159.712541][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.442'. [ 160.005097][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.444'. [ 160.009743][ T7611] FAULT_INJECTION: forcing a failure. [ 160.009743][ T7611] name failslab, interval 1, probability 0, space 0, times 0 [ 160.015554][ T7611] CPU: 0 UID: 0 PID: 7611 Comm: syz.4.444 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.015574][ T7611] Tainted: [L]=SOFTLOCKUP [ 160.015578][ T7611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 160.015586][ T7611] Call Trace: [ 160.015591][ T7611] [ 160.015597][ T7611] dump_stack_lvl+0x100/0x190 [ 160.015617][ T7611] should_fail_ex.cold+0x5/0xa [ 160.015632][ T7611] should_failslab+0xc2/0x120 [ 160.015650][ T7611] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 160.015668][ T7611] ? __alloc_skb+0x140/0x710 [ 160.015690][ T7611] __alloc_skb+0x140/0x710 [ 160.015705][ T7611] ? __alloc_skb+0x5b7/0x710 [ 160.015720][ T7611] ? __pfx___alloc_skb+0x10/0x10 [ 160.015739][ T7611] xfrm_alloc_compat+0x780/0x1200 [ 160.015757][ T7611] ? xfrm_get_translator+0xeb/0x290 [ 160.015774][ T7611] dump_one_policy+0x60a/0x820 [ 160.015790][ T7611] ? __pfx_dump_one_policy+0x10/0x10 [ 160.015804][ T7611] ? do_raw_spin_lock+0x128/0x260 [ 160.015819][ T7611] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 160.015835][ T7611] xfrm_policy_walk+0x23b/0x780 [ 160.015851][ T7611] ? __pfx_dump_one_policy+0x10/0x10 [ 160.015868][ T7611] xfrm_dump_policy+0x174/0x260 [ 160.015882][ T7611] ? __pfx_xfrm_dump_policy+0x10/0x10 [ 160.015897][ T7611] ? __mutex_lock+0x26d/0x1bd0 [ 160.015917][ T7611] netlink_dump+0x532/0xd00 [ 160.015932][ T7611] ? __pfx_netlink_dump+0x10/0x10 [ 160.015952][ T7611] __netlink_dump_start+0x6d6/0x990 [ 160.015967][ T7611] ? __pfx_xfrm_dump_policy+0x10/0x10 [ 160.015980][ T7611] xfrm_user_rcv_msg+0x801/0xd00 [ 160.015996][ T7611] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 160.016010][ T7611] ? __pfx_xfrm_dump_policy_start+0x10/0x10 [ 160.016023][ T7611] ? __pfx_xfrm_dump_policy+0x10/0x10 [ 160.016036][ T7611] ? __pfx_xfrm_dump_policy_done+0x10/0x10 [ 160.016065][ T7611] ? rcu_is_watching+0x12/0xc0 [ 160.016080][ T7611] ? trace_contention_end+0x126/0x160 [ 160.016093][ T7611] ? __mutex_lock+0x26d/0x1bd0 [ 160.016111][ T7611] netlink_rcv_skb+0x159/0x420 [ 160.016125][ T7611] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 160.016140][ T7611] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.016162][ T7611] xfrm_netlink_rcv+0x71/0x90 [ 160.016175][ T7611] netlink_unicast+0x585/0x850 [ 160.016190][ T7611] ? __pfx_netlink_unicast+0x10/0x10 [ 160.016207][ T7611] netlink_sendmsg+0x8b0/0xda0 [ 160.016223][ T7611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.016238][ T7611] ? apparmor_socket_sendmsg+0x15b/0x270 [ 160.016254][ T7611] ____sys_sendmsg+0xa4d/0xbe0 [ 160.016266][ T7611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.016280][ T7611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.016299][ T7611] ___sys_sendmsg+0x190/0x1e0 [ 160.016313][ T7611] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.016332][ T7611] ? find_held_lock+0x2b/0x80 [ 160.016356][ T7611] __sys_sendmsg+0x160/0x210 [ 160.016373][ T7611] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.016393][ T7611] ? __pfx_ksys_write+0x10/0x10 [ 160.016408][ T7611] __do_fast_syscall_32+0xe7/0x970 [ 160.016425][ T7611] ? lockdep_hardirqs_on+0x78/0x100 [ 160.016443][ T7611] do_fast_syscall_32+0x32/0x70 [ 160.016465][ T7611] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 160.016481][ T7611] RIP: 0023:0xf7ff3fec [ 160.016496][ T7611] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 160.016501][ T7611] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 160.016512][ T7611] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 160.016519][ T7611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.016525][ T7611] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 160.016531][ T7611] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 160.016538][ T7611] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 160.016551][ T7611] [ 161.240547][ T7619] FAULT_INJECTION: forcing a failure. [ 161.240547][ T7619] name failslab, interval 1, probability 0, space 0, times 0 [ 161.245149][ T7619] CPU: 3 UID: 0 PID: 7619 Comm: syz.3.447 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.245169][ T7619] Tainted: [L]=SOFTLOCKUP [ 161.245173][ T7619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 161.245180][ T7619] Call Trace: [ 161.245185][ T7619] [ 161.245191][ T7619] dump_stack_lvl+0x100/0x190 [ 161.245211][ T7619] should_fail_ex.cold+0x5/0xa [ 161.245225][ T7619] should_failslab+0xc2/0x120 [ 161.245243][ T7619] __kmalloc_noprof+0xfc/0x820 [ 161.245258][ T7619] ? tomoyo_encode2+0xfb/0x3c0 [ 161.245279][ T7619] tomoyo_encode2+0xfb/0x3c0 [ 161.245297][ T7619] tomoyo_encode+0x29/0x50 [ 161.245313][ T7619] tomoyo_realpath_from_path+0x18c/0x690 [ 161.245333][ T7619] tomoyo_path_number_perm+0x23c/0x580 [ 161.245347][ T7619] ? tomoyo_path_number_perm+0x22e/0x580 [ 161.245362][ T7619] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.245377][ T7619] ? get_pid_task+0x106/0x250 [ 161.245406][ T7619] ? find_held_lock+0x2b/0x80 [ 161.245420][ T7619] ? __fget_files+0x215/0x3d0 [ 161.245431][ T7619] ? hook_file_ioctl_common+0x140/0x440 [ 161.245446][ T7619] ? __fget_files+0x215/0x3d0 [ 161.245459][ T7619] ? __fget_files+0x21f/0x3d0 [ 161.245472][ T7619] security_file_ioctl_compat+0xd3/0x230 [ 161.245489][ T7619] __ia32_compat_sys_ioctl+0xc2/0x360 [ 161.245509][ T7619] __do_fast_syscall_32+0xe7/0x970 [ 161.245526][ T7619] ? lockdep_hardirqs_on+0x78/0x100 [ 161.245543][ T7619] do_fast_syscall_32+0x32/0x70 [ 161.245560][ T7619] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.245575][ T7619] RIP: 0023:0xf702efec [ 161.245589][ T7619] Code: Unable to access opcode bytes at 0xf702efc2. [ 161.245594][ T7619] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 161.245606][ T7619] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000006407 [ 161.245613][ T7619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.245620][ T7619] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.245626][ T7619] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 161.245632][ T7619] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.245646][ T7619] [ 161.245657][ T7619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.547933][ T7635] 9p: Bad value for 'rfdno' [ 161.858491][ T999] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 161.937213][ T7652] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 162.019205][ T999] usb 5-1: Dual-Role OTG device on HNP port [ 162.021418][ T999] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 162.026981][ T999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.047151][ T999] gspca_main: spca501-2.14.0 probing 0000:0000 [ 162.052219][ T999] gspca_spca501: reg write: error -32 [ 162.055646][ T999] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 162.061433][ T999] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 162.065262][ T999] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.367760][ T7660] tipc: Started in network mode [ 162.370601][ T7660] tipc: Node identity 080211, cluster identity 4711 [ 162.374873][ T7660] tipc: Enabled bearer , priority 0 [ 162.605114][ T7668] jffs2: notice: (7668) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.128354][ T50] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 163.219061][ T7685] pim6reg: entered allmulticast mode [ 163.299627][ T7682] pim6reg: left allmulticast mode [ 163.309721][ T50] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.314046][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 163.319216][ T50] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 163.323418][ T50] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.328361][ T50] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.331934][ T50] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.346416][ T50] usb 7-1: config 0 descriptor?? [ 163.423105][ T7687] FAULT_INJECTION: forcing a failure. [ 163.423105][ T7687] name failslab, interval 1, probability 0, space 0, times 0 [ 163.428573][ T7687] CPU: 0 UID: 0 PID: 7687 Comm: syz.0.468 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.428607][ T7687] Tainted: [L]=SOFTLOCKUP [ 163.428611][ T7687] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 163.428619][ T7687] Call Trace: [ 163.428623][ T7687] [ 163.428628][ T7687] dump_stack_lvl+0x100/0x190 [ 163.428648][ T7687] should_fail_ex.cold+0x5/0xa [ 163.428662][ T7687] should_failslab+0xc2/0x120 [ 163.428679][ T7687] __kmalloc_noprof+0xfc/0x820 [ 163.428695][ T7687] ? tomoyo_encode2+0xfb/0x3c0 [ 163.428717][ T7687] tomoyo_encode2+0xfb/0x3c0 [ 163.428735][ T7687] tomoyo_encode+0x29/0x50 [ 163.428751][ T7687] tomoyo_realpath_from_path+0x18c/0x690 [ 163.428791][ T7687] tomoyo_path_number_perm+0x23c/0x580 [ 163.428806][ T7687] ? tomoyo_path_number_perm+0x22e/0x580 [ 163.428821][ T7687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.428836][ T7687] ? get_pid_task+0x106/0x250 [ 163.428864][ T7687] ? find_held_lock+0x2b/0x80 [ 163.428878][ T7687] ? __fget_files+0x215/0x3d0 [ 163.428889][ T7687] ? hook_file_ioctl_common+0x140/0x440 [ 163.428904][ T7687] ? __fget_files+0x215/0x3d0 [ 163.428916][ T7687] ? __fget_files+0x21f/0x3d0 [ 163.428929][ T7687] security_file_ioctl_compat+0xd3/0x230 [ 163.428946][ T7687] __ia32_compat_sys_ioctl+0xc2/0x360 [ 163.428970][ T7687] __do_fast_syscall_32+0xe7/0x970 [ 163.428988][ T7687] ? lockdep_hardirqs_on+0x78/0x100 [ 163.429004][ T7687] do_fast_syscall_32+0x32/0x70 [ 163.429021][ T7687] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.429036][ T7687] RIP: 0023:0xf7f45fec [ 163.429050][ T7687] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 163.429055][ T7687] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 163.429067][ T7687] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005303 [ 163.429076][ T7687] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.429084][ T7687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.429093][ T7687] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 163.429102][ T7687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.429124][ T7687] [ 163.429896][ T7687] ERROR: Out of memory at tomoyo_realpath_from_path. [ 163.557371][ T61] tipc: Node number set to 134353152 [ 163.683253][ T7689] netlink: 36 bytes leftover after parsing attributes in process `syz.0.469'. [ 163.736175][ T7689] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 164.116757][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.466'. [ 164.131226][ T50] usbhid 7-1:0.0: can't add hid device: -71 [ 164.133484][ T50] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 164.155965][ T50] usb 7-1: USB disconnect, device number 18 [ 164.192172][ T6385] libceph: connect (1)[c::]:6789 error -101 [ 164.194219][ T6385] libceph: mon0 (1)[c::]:6789 connect error [ 164.288759][ T7707] ceph: No mds server is up or the cluster is laggy [ 164.531581][ T7723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.575373][ T7721] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 164.929077][ T7730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'. [ 164.946974][ T7730] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 165.208427][ T5778] batadv1: left promiscuous mode [ 165.709085][ T5924] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 165.808385][ T1343] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 165.869834][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.873666][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 165.877961][ T5924] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 165.882389][ T5924] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 165.887615][ T5924] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.890707][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.897272][ T5924] usb 9-1: config 0 descriptor?? [ 165.904238][ T7735] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.912200][ T7756] intel_xhci_usb_sw pcspkr: probe with driver intel_xhci_usb_sw failed with error -22 [ 165.917915][ T42] audit: type=1326 audit(1786173944.859:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.925180][ T42] audit: type=1326 audit(1786173944.869:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.932747][ T42] audit: type=1326 audit(1786173944.869:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.939669][ T42] audit: type=1326 audit(1786173944.869:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.946579][ T42] audit: type=1326 audit(1786173944.869:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71674eb code=0x7ffc0000 [ 165.953474][ T42] audit: type=1326 audit(1786173944.869:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.959857][ T42] audit: type=1326 audit(1786173944.869:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.966202][ T42] audit: type=1326 audit(1786173944.879:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.974696][ T42] audit: type=1326 audit(1786173944.879:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.980444][ T1343] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.983300][ T42] audit: type=1326 audit(1786173944.879:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.3.488" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efec code=0x7ffc0000 [ 165.988050][ T1343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 166.001885][ T1343] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 166.005957][ T1343] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.012011][ T1343] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.015601][ T1343] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.037708][ T1343] usb 7-1: config 0 descriptor?? [ 166.040618][ T7742] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 166.220141][ T5738] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 166.223846][ T5738] Bluetooth: hci2: Injecting HCI hardware error event [ 166.226629][ T5738] Bluetooth: hci2: hardware error 0x00 [ 166.332950][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.335615][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.338093][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.340859][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.343358][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 166.359772][ T5924] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 166.408572][ T852] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 166.446520][ T1343] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 166.449291][ T1343] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 166.452306][ T1343] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 166.456109][ T1343] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 166.458732][ T1343] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 166.470146][ T1343] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 166.559594][ T852] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.563271][ T852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.566751][ T852] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.569999][ T852] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.574107][ T852] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.577854][ T852] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.586867][ T852] usb 8-1: config 0 descriptor?? [ 166.751424][ T7765] FAULT_INJECTION: forcing a failure. [ 166.751424][ T7765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.756610][ T7765] CPU: 3 UID: 0 PID: 7765 Comm: syz.2.483 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.756642][ T7765] Tainted: [L]=SOFTLOCKUP [ 166.756649][ T7765] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 166.756661][ T7765] Call Trace: [ 166.756670][ T7765] [ 166.756679][ T7765] dump_stack_lvl+0x100/0x190 [ 166.756710][ T7765] should_fail_ex.cold+0x5/0xa [ 166.756734][ T7765] _copy_to_user+0x32/0xd0 [ 166.756766][ T7765] simple_read_from_buffer+0xcb/0x170 [ 166.756801][ T7765] proc_fail_nth_read+0x1af/0x230 [ 166.756832][ T7765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.756860][ T7765] ? rw_verify_area+0xce/0x6d0 [ 166.756887][ T7765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.756913][ T7765] vfs_read+0x1e4/0xb40 [ 166.756934][ T7765] ? __pfx_vfs_read+0x10/0x10 [ 166.756950][ T7765] ? find_held_lock+0x2b/0x80 [ 166.756984][ T7765] ? __fget_files+0x215/0x3d0 [ 166.757006][ T7765] ? __fget_files+0x21f/0x3d0 [ 166.757030][ T7765] ksys_read+0x12a/0x250 [ 166.757049][ T7765] ? __pfx_ksys_read+0x10/0x10 [ 166.757072][ T7765] do_int80_emulation+0x14b/0x720 [ 166.757102][ T7765] asm_int80_emulation+0x1a/0x20 [ 166.757122][ T7765] RIP: 0023:0xf71374eb [ 166.757137][ T7765] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 166.757154][ T7765] RSP: 002b:00000000f53d54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 166.757173][ T7765] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53d55d0 [ 166.757184][ T7765] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 166.757193][ T7765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 166.757201][ T7765] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 166.757210][ T7765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 166.757229][ T7765] [ 167.119599][ T7762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.491'. [ 167.645656][ T6385] usb 7-1: USB disconnect, device number 19 [ 167.658939][ T852] usbhid 8-1:0.0: can't add hid device: -71 [ 167.660911][ T852] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 167.670093][ T7772] netlink: 'syz.2.492': attribute type 3 has an invalid length. [ 167.670693][ T852] usb 8-1: USB disconnect, device number 9 [ 167.917742][ T7776] syz0: rxe_newlink: already configured on bond_slave_1 [ 167.926260][ T7776] qnx6: unable to read the first superblock [ 167.928358][ T7776] qnx6: unable to read the first superblock [ 167.930207][ T7776] qnx6: unable to read the first superblock [ 168.307020][ T5738] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 168.540627][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 168.554946][ T7786] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3966. macoff=82 [ 168.560350][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 168.872419][ T7781] xt_connbytes: Forcing CT accounting to be enabled [ 168.873780][ T999] usb 9-1: USB disconnect, device number 8 [ 168.875427][ T7781] xt_TPROXY: Can be used only with -p tcp or -p udp [ 168.890771][ T1343] libceph: connect (1)[c::]:6789 error -101 [ 168.893205][ T1343] libceph: mon0 (1)[c::]:6789 connect error [ 169.066199][ T7781] ceph: No mds server is up or the cluster is laggy [ 169.838413][ T999] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 169.989029][ T999] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 169.994721][ T999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 169.998329][ T999] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.002378][ T999] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.006184][ T999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.010097][ T999] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.014173][ T999] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.017161][ T999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.020264][ T999] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.023508][ T999] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.026490][ T999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.030164][ T999] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.033621][ T999] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.036707][ T999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.043832][ T999] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.047380][ T999] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.050643][ T999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.053475][ T999] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.056998][ T999] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.060107][ T999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.062898][ T999] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.066187][ T999] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.070097][ T999] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 170.072943][ T999] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 170.076233][ T999] usb 8-1: config 0 interface 0 has no altsetting 0 [ 170.080416][ T999] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 170.083323][ T999] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 170.085790][ T999] usb 8-1: Product: syz [ 170.087306][ T999] usb 8-1: Manufacturer: syz [ 170.090383][ T999] usb 8-1: SerialNumber: syz [ 170.095059][ T999] usb 8-1: config 0 descriptor?? [ 170.107200][ T999] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 170.301527][ T5738] Bluetooth: hci3: command 0x0405 tx timeout [ 170.302083][ T5743] Bluetooth: hci1: command 0x0406 tx timeout [ 170.372552][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 170.395507][ T7800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.421712][ T7849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.428501][ T7849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.433081][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.435992][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.555592][ T7800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.691604][ T7800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.818134][ T7800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.919843][ T7860] syz0: rxe_newlink: already configured on bond_slave_1 [ 170.927438][ T7860] qnx6: unable to read the first superblock [ 170.930453][ T7860] qnx6: unable to read the first superblock [ 170.932717][ T7860] qnx6: unable to read the first superblock [ 170.990716][ T7864] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 170.996967][ T7864] qnx6: unable to set blocksize [ 171.009340][ T5807] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.014704][ T5807] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.020700][ T34] usb 8-1: USB disconnect, device number 10 [ 171.027993][ T34] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 171.038618][ T5807] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.041514][ T5807] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.578975][ T7866] ip6gretap0: entered promiscuous mode [ 171.991703][ T7872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 172.014479][ T7872] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 172.236482][ T7875] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 172.334055][ T7877] netlink: 36 bytes leftover after parsing attributes in process `syz.4.512'. [ 172.369067][ T7877] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 172.668347][ T34] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 172.819543][ T34] usb 7-1: config index 0 descriptor too short (expected 10276, got 36) [ 172.822271][ T34] usb 7-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 172.825095][ T34] usb 7-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 172.828022][ T34] usb 7-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 172.831640][ T34] usb 7-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 172.835760][ T34] usb 7-1: config 109 interface 0 has no altsetting 0 [ 172.837881][ T34] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 172.840768][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.252147][ T7881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.261239][ T34] usb 7-1: string descriptor 0 read error: -71 [ 173.269479][ T34] usbhid 7-1:109.0: can't add hid device: -71 [ 173.271968][ T34] usbhid 7-1:109.0: probe with driver usbhid failed with error -71 [ 173.278416][ T34] usb 7-1: USB disconnect, device number 20 [ 174.082807][ T7899] x_tables: duplicate underflow at hook 3 [ 174.108454][ T7899] ./bus: Can't lookup blockdev [ 174.336189][ T7901] FAULT_INJECTION: forcing a failure. [ 174.336189][ T7901] name failslab, interval 1, probability 0, space 0, times 0 [ 174.341028][ T7901] CPU: 2 UID: 0 PID: 7901 Comm: syz.4.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.341047][ T7901] Tainted: [L]=SOFTLOCKUP [ 174.341052][ T7901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.341060][ T7901] Call Trace: [ 174.341064][ T7901] [ 174.341069][ T7901] dump_stack_lvl+0x100/0x190 [ 174.341088][ T7901] should_fail_ex.cold+0x5/0xa [ 174.341103][ T7901] should_failslab+0xc2/0x120 [ 174.341120][ T7901] kmem_cache_alloc_noprof+0x91/0x6a0 [ 174.341135][ T7901] ? do_getname+0x35/0x390 [ 174.341153][ T7901] do_getname+0x35/0x390 [ 174.341168][ T7901] __ia32_sys_symlinkat+0x8a/0xe0 [ 174.341183][ T7901] __do_fast_syscall_32+0xe7/0x970 [ 174.341201][ T7901] ? lockdep_hardirqs_on+0x78/0x100 [ 174.341218][ T7901] do_fast_syscall_32+0x32/0x70 [ 174.341235][ T7901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.341250][ T7901] RIP: 0023:0xf7ff3fec [ 174.341264][ T7901] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 174.341269][ T7901] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 174.341280][ T7901] RAX: ffffffffffffffda RBX: 0000000080000880 RCX: 00000000ffffff9c [ 174.341287][ T7901] RDX: 00000000800008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.341293][ T7901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.341299][ T7901] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.341306][ T7901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.341319][ T7901] [ 174.790435][ T7908] FAULT_INJECTION: forcing a failure. [ 174.790435][ T7908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.794585][ T7908] CPU: 3 UID: 0 PID: 7908 Comm: syz.2.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.794604][ T7908] Tainted: [L]=SOFTLOCKUP [ 174.794608][ T7908] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 174.794615][ T7908] Call Trace: [ 174.794620][ T7908] [ 174.794624][ T7908] dump_stack_lvl+0x100/0x190 [ 174.794644][ T7908] should_fail_ex.cold+0x5/0xa [ 174.794657][ T7908] _copy_from_iter+0x1f4/0x1690 [ 174.794678][ T7908] ? __asan_memset+0x23/0x50 [ 174.794693][ T7908] ? __pfx__copy_from_iter+0x10/0x10 [ 174.794710][ T7908] ? __pfx___alloc_skb+0x10/0x10 [ 174.794731][ T7908] netlink_sendmsg+0x808/0xda0 [ 174.794746][ T7908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.794761][ T7908] ? apparmor_socket_sendmsg+0x15b/0x270 [ 174.794776][ T7908] ____sys_sendmsg+0xa4d/0xbe0 [ 174.794788][ T7908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.794801][ T7908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.794819][ T7908] ___sys_sendmsg+0x190/0x1e0 [ 174.794832][ T7908] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.794850][ T7908] ? find_held_lock+0x2b/0x80 [ 174.794874][ T7908] __sys_sendmsg+0x160/0x210 [ 174.794890][ T7908] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.794910][ T7908] ? __pfx_ksys_write+0x10/0x10 [ 174.794925][ T7908] __do_fast_syscall_32+0xe7/0x970 [ 174.794942][ T7908] ? lockdep_hardirqs_on+0x78/0x100 [ 174.794959][ T7908] do_fast_syscall_32+0x32/0x70 [ 174.794976][ T7908] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.794991][ T7908] RIP: 0023:0xf7f38fec [ 174.795006][ T7908] Code: Unable to access opcode bytes at 0xf7f38fc2. [ 174.795011][ T7908] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 174.795022][ T7908] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 174.795030][ T7908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 174.795036][ T7908] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.795042][ T7908] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 174.795049][ T7908] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.795079][ T7908] [ 175.632718][ T7918] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 175.635695][ T7918] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 175.640925][ T7918] vhci_hcd vhci_hcd.0: Device attached [ 175.855135][ T7921] wg2 speed is unknown, defaulting to 1000 [ 175.858987][ T7921] wg2 speed is unknown, defaulting to 1000 [ 175.861516][ T7921] wg2 speed is unknown, defaulting to 1000 [ 175.899016][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.526'. [ 175.928411][ T61] usb 46-1: SetAddress Request (2) to port 0 [ 175.933539][ T61] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 176.032395][ T852] wg2 speed is unknown, defaulting to 1000 [ 176.036442][ T7921] infiniband syz2: set active [ 176.039438][ T7921] infiniband syz2: added wg2 [ 176.055489][ T7921] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 176.061668][ T7921] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 176.067078][ T7921] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 176.084942][ T7921] RDS/IB: syz2: added [ 176.090677][ T7921] smc: adding ib device syz2 with port count 1 [ 176.092999][ T7921] smc: ib device syz2 port 1 has no pnetid [ 176.100262][ T7921] wg2 speed is unknown, defaulting to 1000 [ 176.111312][ T852] wg2 speed is unknown, defaulting to 1000 [ 176.353466][ T7921] wg2 speed is unknown, defaulting to 1000 [ 176.482489][ T7919] vhci_hcd: connection reset by peer [ 176.488090][ T5809] vhci_hcd vhci_hcd.4: stop threads [ 176.490574][ T5809] vhci_hcd vhci_hcd.4: release socket [ 176.493536][ T5809] vhci_hcd vhci_hcd.4: disconnect device [ 176.621374][ T7921] wg2 speed is unknown, defaulting to 1000 [ 176.724541][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 176.727231][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.528'. [ 176.774027][ T7921] wg2 speed is unknown, defaulting to 1000 [ 177.450738][ T7952] smpboot: CPU 1 is now offline [ 177.908267][ T5879] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 178.060515][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.064814][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 178.069703][ T5879] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.073658][ T5879] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.079174][ T5879] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.083120][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.089796][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.3.538'. [ 178.090998][ T5879] usb 9-1: config 0 descriptor?? [ 178.177841][ T7960] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 178.291766][ T7967] FAULT_INJECTION: forcing a failure. [ 178.291766][ T7967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.300969][ T7967] CPU: 2 UID: 0 PID: 7967 Comm: syz.3.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.301004][ T7967] Tainted: [L]=SOFTLOCKUP [ 178.301011][ T7967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.301022][ T7967] Call Trace: [ 178.301029][ T7967] [ 178.301037][ T7967] dump_stack_lvl+0x100/0x190 [ 178.301067][ T7967] should_fail_ex.cold+0x5/0xa [ 178.301090][ T7967] _copy_from_iter+0x1f4/0x1690 [ 178.301125][ T7967] ? __pfx__copy_from_iter+0x10/0x10 [ 178.301151][ T7967] ? trace_kmalloc+0xeb/0x110 [ 178.301177][ T7967] ? __kasan_kmalloc+0xaa/0xb0 [ 178.301202][ T7967] ? __kmalloc_noprof+0x343/0x820 [ 178.301227][ T7967] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 178.301258][ T7967] kernfs_fop_write_iter+0x186/0x5f0 [ 178.301285][ T7967] vfs_write+0x6ac/0x1050 [ 178.301306][ T7967] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 178.301332][ T7967] ? __pfx_vfs_write+0x10/0x10 [ 178.301348][ T7967] ? find_held_lock+0x2b/0x80 [ 178.301391][ T7967] ksys_pwrite64+0x161/0x1a0 [ 178.301411][ T7967] ? __pfx_ksys_pwrite64+0x10/0x10 [ 178.301429][ T7967] ? ksys_write+0x1ac/0x250 [ 178.301446][ T7967] ? __pfx_ksys_write+0x10/0x10 [ 178.301470][ T7967] __do_fast_syscall_32+0xe7/0x970 [ 178.301498][ T7967] ? lockdep_hardirqs_on+0x78/0x100 [ 178.301525][ T7967] do_fast_syscall_32+0x32/0x70 [ 178.301551][ T7967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.301575][ T7967] RIP: 0023:0xf702efec [ 178.301598][ T7967] Code: Unable to access opcode bytes at 0xf702efc2. [ 178.301606][ T7967] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000b5 [ 178.301625][ T7967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 178.301636][ T7967] RDX: 00000000000000f9 RSI: 0000000000000010 RDI: 0000000000000000 [ 178.301646][ T7967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.301657][ T7967] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.301667][ T7967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.301691][ T7967] [ 178.515890][ T7973] FAULT_INJECTION: forcing a failure. [ 178.515890][ T7973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.521572][ T7973] CPU: 0 UID: 0 PID: 7973 Comm: syz.3.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.521615][ T7973] Tainted: [L]=SOFTLOCKUP [ 178.521621][ T7973] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.521631][ T7973] Call Trace: [ 178.521638][ T7973] [ 178.521645][ T7973] dump_stack_lvl+0x100/0x190 [ 178.521673][ T7973] should_fail_ex.cold+0x5/0xa [ 178.521695][ T7973] _copy_to_user+0x32/0xd0 [ 178.521729][ T7973] simple_read_from_buffer+0xcb/0x170 [ 178.521759][ T7973] proc_fail_nth_read+0x1af/0x230 [ 178.521785][ T7973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.521809][ T7973] ? rw_verify_area+0xce/0x6d0 [ 178.521834][ T7973] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.521856][ T7973] vfs_read+0x1e4/0xb40 [ 178.521875][ T7973] ? __pfx_vfs_read+0x10/0x10 [ 178.521890][ T7973] ? find_held_lock+0x2b/0x80 [ 178.521913][ T7973] ? __fget_files+0x215/0x3d0 [ 178.521934][ T7973] ? __fget_files+0x21f/0x3d0 [ 178.521957][ T7973] ksys_read+0x12a/0x250 [ 178.521972][ T7973] ? __pfx_ksys_read+0x10/0x10 [ 178.521995][ T7973] do_int80_emulation+0x14b/0x720 [ 178.522023][ T7973] asm_int80_emulation+0x1a/0x20 [ 178.522041][ T7973] RIP: 0023:0xf71674eb [ 178.522056][ T7973] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 178.522072][ T7973] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 178.522089][ T7973] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f541d5d0 [ 178.522100][ T7973] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 178.522109][ T7973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.522119][ T7973] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.522129][ T7973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.522150][ T7973] [ 178.656303][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.536'. [ 178.690613][ T7978] FAULT_INJECTION: forcing a failure. [ 178.690613][ T7978] name failslab, interval 1, probability 0, space 0, times 0 [ 178.700811][ T11] block nbd0: Possible stuck request ffff888026d60000: control (read@0,4096B). Runtime 30 seconds [ 178.702846][ T7978] CPU: 2 UID: 0 PID: 7978 Comm: syz.3.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.702878][ T7978] Tainted: [L]=SOFTLOCKUP [ 178.702885][ T7978] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.702896][ T7978] Call Trace: [ 178.702902][ T7978] [ 178.702910][ T7978] dump_stack_lvl+0x100/0x190 [ 178.702941][ T7978] should_fail_ex.cold+0x5/0xa [ 178.702965][ T7978] should_failslab+0xc2/0x120 [ 178.702992][ T7978] __kmalloc_noprof+0xfc/0x820 [ 178.703015][ T7978] ? tomoyo_realpath_from_path+0x19c/0x690 [ 178.703072][ T7978] ? tomoyo_encode2+0xfb/0x3c0 [ 178.703103][ T7978] tomoyo_encode2+0xfb/0x3c0 [ 178.703134][ T7978] tomoyo_encode+0x29/0x50 [ 178.703158][ T7978] tomoyo_path_perm+0x3a7/0x460 [ 178.703183][ T7978] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 178.703204][ T7978] ? do_raw_spin_lock+0x128/0x260 [ 178.703227][ T7978] ? d_splice_alias_ops+0x626/0x15c0 [ 178.703262][ T7978] ? d_splice_alias_ops+0x62b/0x15c0 [ 178.703301][ T7978] ? configfs_lookup+0x6e/0x7d0 [ 178.703330][ T7978] ? lookup_one_qstr_excl+0xaf/0x250 [ 178.703357][ T7978] tomoyo_path_symlink+0x97/0xe0 [ 178.703386][ T7978] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 178.703422][ T7978] security_path_symlink+0x152/0x2d0 [ 178.703446][ T7978] filename_symlinkat+0x122/0x560 [ 178.703473][ T7978] ? __pfx_filename_symlinkat+0x10/0x10 [ 178.703494][ T7978] ? strncpy_from_user+0x19d/0x2d0 [ 178.703524][ T7978] ? do_getname+0x191/0x390 [ 178.703550][ T7978] __ia32_sys_symlinkat+0x9b/0xe0 [ 178.703573][ T7978] __do_fast_syscall_32+0xe7/0x970 [ 178.703599][ T7978] ? lockdep_hardirqs_on+0x78/0x100 [ 178.703621][ T7978] do_fast_syscall_32+0x32/0x70 [ 178.703644][ T7978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.703666][ T7978] RIP: 0023:0xf702efec [ 178.703690][ T7978] Code: Unable to access opcode bytes at 0xf702efc2. [ 178.703697][ T7978] RSP: 002b:00000000f541d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 178.703716][ T7978] RAX: ffffffffffffffda RBX: 0000000080001e00 RCX: 00000000ffffff9c [ 178.703728][ T7978] RDX: 0000000080001f00 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.703738][ T7978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.703747][ T7978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.703757][ T7978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.703781][ T7978] [ 178.736216][ T7981] FAULT_INJECTION: forcing a failure. [ 178.736216][ T7981] name failslab, interval 1, probability 0, space 0, times 0 [ 178.797251][ T7981] CPU: 2 UID: 0 PID: 7981 Comm: syz.2.543 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.797283][ T7981] Tainted: [L]=SOFTLOCKUP [ 178.797290][ T7981] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.797301][ T7981] Call Trace: [ 178.797307][ T7981] [ 178.797315][ T7981] dump_stack_lvl+0x100/0x190 [ 178.797345][ T7981] should_fail_ex.cold+0x5/0xa [ 178.797368][ T7981] should_failslab+0xc2/0x120 [ 178.797395][ T7981] __kmalloc_cache_noprof+0x91/0x6c0 [ 178.797416][ T7981] ? netlbl_mgmt_add_common+0xdb4/0x1890 [ 178.797449][ T7981] netlbl_mgmt_add_common+0xdb4/0x1890 [ 178.797473][ T7981] ? trace_kmalloc+0xeb/0x110 [ 178.797503][ T7981] netlbl_mgmt_add+0x25d/0x3d0 [ 178.797527][ T7981] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 178.797554][ T7981] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 178.797578][ T7981] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 178.797607][ T7981] genl_family_rcv_msg_doit+0x214/0x300 [ 178.797633][ T7981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 178.797653][ T7981] ? genl_get_cmd+0x3e7/0x760 [ 178.797681][ T7981] ? bpf_lsm_capable+0x9/0x10 [ 178.797703][ T7981] ? security_capable+0x80/0x260 [ 178.797727][ T7981] genl_rcv_msg+0x560/0x800 [ 178.797752][ T7981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.797774][ T7981] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 178.797802][ T7981] ? __lock_acquire+0x49f/0x1a40 [ 178.797834][ T7981] netlink_rcv_skb+0x159/0x420 [ 178.797854][ T7981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.797878][ T7981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.797908][ T7981] ? netlink_deliver_tap+0x1ae/0xcc0 [ 178.797932][ T7981] genl_rcv+0x28/0x40 [ 178.797958][ T7981] netlink_unicast+0x585/0x850 [ 178.797982][ T7981] ? __pfx_netlink_unicast+0x10/0x10 [ 178.798010][ T7981] netlink_sendmsg+0x8b0/0xda0 [ 178.798035][ T7981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.798284][ T7981] ? apparmor_socket_sendmsg+0x15b/0x270 [ 178.798409][ T7981] ____sys_sendmsg+0xa4d/0xbe0 [ 178.798512][ T7981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.798535][ T7981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.798566][ T7981] ___sys_sendmsg+0x190/0x1e0 [ 178.798587][ T7981] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.798619][ T7981] ? find_held_lock+0x2b/0x80 [ 178.798659][ T7981] __sys_sendmsg+0x160/0x210 [ 178.798687][ T7981] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.798718][ T7981] ? __pfx_ksys_write+0x10/0x10 [ 178.798743][ T7981] __do_fast_syscall_32+0xe7/0x970 [ 178.798768][ T7981] ? lockdep_hardirqs_on+0x78/0x100 [ 178.798795][ T7981] do_fast_syscall_32+0x32/0x70 [ 178.798821][ T7981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.798846][ T7981] RIP: 0023:0xf7f38fec [ 178.798867][ T7981] Code: Unable to access opcode bytes at 0xf7f38fc2. [ 178.798875][ T7981] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 178.798893][ T7981] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000500 [ 178.798904][ T7981] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.798914][ T7981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.798923][ T7981] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.798932][ T7981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.798962][ T7981] [ 178.869128][ T7984] FAULT_INJECTION: forcing a failure. [ 178.869128][ T7984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.948728][ T7984] CPU: 2 UID: 0 PID: 7984 Comm: syz.3.544 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.948759][ T7984] Tainted: [L]=SOFTLOCKUP [ 178.948765][ T7984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 178.948775][ T7984] Call Trace: [ 178.948797][ T7984] [ 178.948804][ T7984] dump_stack_lvl+0x100/0x190 [ 178.948833][ T7984] should_fail_ex.cold+0x5/0xa [ 178.948854][ T7984] _copy_to_user+0x32/0xd0 [ 178.948882][ T7984] simple_read_from_buffer+0xcb/0x170 [ 178.948913][ T7984] proc_fail_nth_read+0x1af/0x230 [ 178.948939][ T7984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.948971][ T7984] ? rw_verify_area+0xce/0x6d0 [ 178.948994][ T7984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.949019][ T7984] vfs_read+0x1e4/0xb40 [ 178.949038][ T7984] ? __pfx_vfs_read+0x10/0x10 [ 178.949052][ T7984] ? find_held_lock+0x2b/0x80 [ 178.949076][ T7984] ? __fget_files+0x215/0x3d0 [ 178.949097][ T7984] ? __fget_files+0x21f/0x3d0 [ 178.949119][ T7984] ksys_read+0x12a/0x250 [ 178.949136][ T7984] ? __pfx_ksys_read+0x10/0x10 [ 178.949160][ T7984] do_int80_emulation+0x14b/0x720 [ 178.949189][ T7984] asm_int80_emulation+0x1a/0x20 [ 178.949207][ T7984] RIP: 0023:0xf71674eb [ 178.949222][ T7984] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 178.949237][ T7984] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 178.949256][ T7984] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f541d5d0 [ 178.949266][ T7984] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 178.949276][ T7984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.949285][ T7984] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 178.949295][ T7984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.949317][ T7984] [ 179.568560][ T7996] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 179.576274][ T7996] veth1_macvtap: left promiscuous mode [ 179.578463][ T7996] macsec0: entered promiscuous mode [ 179.589021][ T7996] qnx6: unable to set blocksize [ 180.494829][ T5742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 180.500299][ T5742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 180.633579][ T5742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 180.637481][ T5742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 180.641433][ T5742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 181.017216][ T5879] usbhid 9-1:0.0: can't add hid device: -71 [ 181.036370][ T61] usb 46-1: device descriptor read/8, error -110 [ 181.055983][ T5879] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 181.065207][ T5879] usb 9-1: USB disconnect, device number 9 [ 181.073522][ T7998] virt_wifi0 speed is unknown, defaulting to 1000 [ 181.082065][ T7998] wg2 speed is unknown, defaulting to 1000 [ 181.100269][ T8009] loop5: detected capacity change from 0 to 7 [ 181.106817][ T8009] Dev loop5: unable to read RDB block 7 [ 181.110755][ T8009] loop5: unable to read partition table [ 181.112719][ T8009] loop5: partition table beyond EOD, truncated [ 181.114692][ T8009] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 181.129820][ T8009] sctp: [Deprecated]: syz.2.548 (pid 8009) Use of int in max_burst socket option deprecated. [ 181.129820][ T8009] Use struct sctp_assoc_value instead [ 181.161816][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 181.448847][ T61] usb usb46-port1: attempt power cycle [ 181.505852][ T8025] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 181.566688][ T8028] syz0: rxe_newlink: already configured on bond_slave_1 [ 181.578604][ T8028] qnx6: unable to read the first superblock [ 181.581120][ T8028] qnx6: unable to read the first superblock [ 181.583480][ T8028] qnx6: unable to read the first superblock [ 181.606459][ T8031] jffs2: notice: (8031) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 181.625942][ T8031] FAULT_INJECTION: forcing a failure. [ 181.625942][ T8031] name failslab, interval 1, probability 0, space 0, times 0 [ 181.637583][ T8031] CPU: 0 UID: 0 PID: 8031 Comm: syz.4.554 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.637606][ T8031] Tainted: [L]=SOFTLOCKUP [ 181.637610][ T8031] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 181.637618][ T8031] Call Trace: [ 181.637622][ T8031] [ 181.637628][ T8031] dump_stack_lvl+0x100/0x190 [ 181.637650][ T8031] should_fail_ex.cold+0x5/0xa [ 181.637665][ T8031] should_failslab+0xc2/0x120 [ 181.637684][ T8031] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 181.637701][ T8031] ? jffs2_alloc_inode+0x25/0x50 [ 181.637724][ T8031] ? __pfx_jffs2_alloc_inode+0x10/0x10 [ 181.637744][ T8031] jffs2_alloc_inode+0x25/0x50 [ 181.637761][ T8031] alloc_inode+0x68/0x250 [ 181.637779][ T8031] new_inode+0x22/0x1c0 [ 181.637796][ T8031] jffs2_new_inode+0xc5/0xcc0 [ 181.637812][ T8031] ? trace_kmem_cache_alloc+0xdd/0x100 [ 181.637831][ T8031] ? __pfx_jffs2_new_inode+0x10/0x10 [ 181.637848][ T8031] ? jffs2_mkdir+0x91/0xdb0 [ 181.637869][ T8031] jffs2_mkdir+0x174/0xdb0 [ 181.637887][ T8031] ? bpf_lsm_inode_permission+0x9/0x10 [ 181.637908][ T8031] ? __pfx_jffs2_mkdir+0x10/0x10 [ 181.637929][ T8031] vfs_mkdir+0x361/0x850 [ 181.637949][ T8031] filename_mkdirat+0x48b/0x5e0 [ 181.637964][ T8031] ? __pfx_filename_mkdirat+0x10/0x10 [ 181.637978][ T8031] ? strncpy_from_user+0x19d/0x2d0 [ 181.637998][ T8031] ? do_getname+0x191/0x390 [ 181.638014][ T8031] __ia32_sys_mkdirat+0x88/0xc0 [ 181.638028][ T8031] __do_fast_syscall_32+0xe7/0x970 [ 181.638047][ T8031] ? lockdep_hardirqs_on+0x78/0x100 [ 181.638065][ T8031] do_fast_syscall_32+0x32/0x70 [ 181.638083][ T8031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.638099][ T8031] RIP: 0023:0xf7ff3fec [ 181.638115][ T8031] Code: Unable to access opcode bytes at 0xf7ff3fc2. [ 181.638120][ T8031] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000128 [ 181.638133][ T8031] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 181.638140][ T8031] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.638146][ T8031] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.638153][ T8031] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 181.638172][ T8031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.638190][ T8031] [ 181.758752][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.761715][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.764746][ T7998] bridge_slave_0: entered allmulticast mode [ 181.776026][ T7998] bridge_slave_0: entered promiscuous mode [ 181.780397][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.782898][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.785819][ T7998] bridge_slave_1: entered allmulticast mode [ 181.793756][ T7998] bridge_slave_1: entered promiscuous mode [ 181.882073][ T8034] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 181.921576][ T8034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.967418][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.996532][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.102589][ T61] usb usb46-port1: unable to enumerate USB device [ 182.130071][ T7998] team0: Port device team_slave_0 added [ 182.143777][ T7998] team0: Port device team_slave_1 added [ 182.221993][ T8039] netlink: 148 bytes leftover after parsing attributes in process `syz.3.557'. [ 182.229403][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.237657][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.265154][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.281954][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.289860][ T8039] netlink: 148 bytes leftover after parsing attributes in process `syz.3.557'. [ 182.292819][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.326137][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.400234][ T7998] hsr_slave_0: entered promiscuous mode [ 182.404341][ T7998] hsr_slave_1: entered promiscuous mode [ 182.408821][ T7998] debugfs: 'hsr0' already exists in 'hsr' [ 182.412257][ T7998] Cannot create hsr debugfs directory [ 182.501793][ T8048] netlink: 36 bytes leftover after parsing attributes in process `syz.3.559'. [ 182.603893][ T8045] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 182.632521][ T7998] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.637293][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 182.642230][ T7998] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.648003][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 182.651859][ T7998] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.656145][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 182.659575][ T7998] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.669200][ T7998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 182.699979][ T5742] Bluetooth: hci4: command tx timeout [ 182.775212][ T7998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.793528][ T7998] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.799325][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.801691][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.805980][ T8060] random: crng reseeded on system resumption [ 182.812826][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.815203][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.176026][ T8072] syz0: rxe_newlink: already configured on bond_slave_1 [ 183.182935][ T8072] qnx6: unable to read the first superblock [ 183.184963][ T8072] qnx6: unable to read the first superblock [ 183.186849][ T8072] qnx6: unable to read the first superblock [ 184.779500][ T5742] Bluetooth: hci4: command tx timeout [ 184.954659][ T8082] bochs-drm 0000:00:01.0: [drm] Unknown color mode 11; guessing buffer size. [ 185.124037][ T7998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.390081][ T8095] netlink: 36 bytes leftover after parsing attributes in process `syz.4.567'. [ 185.420100][ T8095] genirq: Flags mismatch irq 31. 00200000 (pcmmio) vs. 00200000 (eth1-tx-0) [ 185.547733][ T7998] veth0_vlan: entered promiscuous mode [ 185.559194][ T7998] veth1_vlan: entered promiscuous mode [ 185.596187][ T7998] veth0_macvtap: entered promiscuous mode [ 185.603308][ T7998] veth1_macvtap: entered promiscuous mode [ 185.620624][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.650552][ T7998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.701745][ T5807] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.705427][ T5807] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.706695][ T999] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 185.714229][ T5807] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.778466][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.778481][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.810305][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.810332][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.828780][ T5809] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.871001][ T999] usb 7-1: config index 0 descriptor too short (expected 10276, got 36) [ 185.871058][ T999] usb 7-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 185.871076][ T999] usb 7-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 185.871106][ T999] usb 7-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 185.871140][ T999] usb 7-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 185.871163][ T999] usb 7-1: config 109 interface 0 has no altsetting 0 [ 185.871191][ T999] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 185.871209][ T999] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.272188][ T8114] random: crng reseeded on system resumption [ 186.340601][ T8099] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.370514][ T999] usb 7-1: string descriptor 0 read error: -71 [ 186.379987][ T999] usbhid 7-1:109.0: can't add hid device: -71 [ 186.381988][ T999] usbhid 7-1:109.0: probe with driver usbhid failed with error -71 [ 186.397779][ T999] usb 7-1: USB disconnect, device number 21 [ 186.479173][ T8120] jffs2: notice: (8120) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.489279][ T8120] FAULT_INJECTION: forcing a failure. [ 186.489279][ T8120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.493403][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.3.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.493422][ T8120] Tainted: [L]=SOFTLOCKUP [ 186.493426][ T8120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 186.493433][ T8120] Call Trace: [ 186.493438][ T8120] [ 186.493442][ T8120] dump_stack_lvl+0x100/0x190 [ 186.493462][ T8120] should_fail_ex.cold+0x5/0xa [ 186.493475][ T8120] _copy_from_user+0x2e/0xd0 [ 186.493495][ T8120] kstrtouint_from_user+0xd6/0x1d0 [ 186.493509][ T8120] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 186.493523][ T8120] ? __lock_acquire+0x49f/0x1a40 [ 186.493548][ T8120] proc_fail_nth_write+0x83/0x220 [ 186.493567][ T8120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.493588][ T8120] vfs_write+0x2aa/0x1050 [ 186.493600][ T8120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 186.493619][ T8120] ? __pfx_vfs_write+0x10/0x10 [ 186.493628][ T8120] ? find_held_lock+0x2b/0x80 [ 186.493642][ T8120] ? __fget_files+0x215/0x3d0 [ 186.493656][ T8120] ? __fget_files+0x21f/0x3d0 [ 186.493670][ T8120] ksys_write+0x12a/0x250 [ 186.493681][ T8120] ? __pfx_ksys_write+0x10/0x10 [ 186.493695][ T8120] do_int80_emulation+0x14b/0x720 [ 186.493715][ T8120] asm_int80_emulation+0x1a/0x20 [ 186.493727][ T8120] RIP: 0023:0xf71674eb [ 186.493737][ T8120] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 186.493748][ T8120] RSP: 002b:00000000f541d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 186.493760][ T8120] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f541d5d0 [ 186.493771][ T8120] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.493777][ T8120] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.493783][ T8120] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 186.493790][ T8120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.493803][ T8120] [ 186.868118][ T5742] Bluetooth: hci4: command tx timeout [ 187.049509][ T8128] ================================================================== [ 187.052015][ T8128] BUG: KASAN: invalid-free in f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.054453][ T8128] Free of addr ffff888073a67286 by task syz.2.574/8128 [ 187.056764][ T8128] [ 187.057706][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.2.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.057730][ T8128] Tainted: [L]=SOFTLOCKUP [ 187.057735][ T8128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.057744][ T8128] Call Trace: [ 187.057750][ T8128] [ 187.057755][ T8128] dump_stack_lvl+0x100/0x190 [ 187.057773][ T8128] print_report+0x13d/0x4b0 [ 187.057792][ T8128] ? __virt_addr_valid+0x239/0x430 [ 187.058175][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.058197][ T8128] kasan_report_invalid_free+0xb8/0x190 [ 187.058214][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.058235][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.058254][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.058273][ T8128] check_slab_allocation+0xe1/0xf0 [ 187.058289][ T8128] ? f_uac2_opts_c_srate_store+0x1c0/0x260 [ 187.058308][ T8128] kfree+0x1b6/0x6c0 [ 187.058321][ T8128] ? __asan_memcpy+0x3c/0x60 [ 187.058334][ T8128] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.058353][ T8128] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 187.058372][ T8128] ? configfs_write_iter+0x388/0x4e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 187.058385][ T8128] configfs_write_iter+0x302/0x4e0 [ 187.058398][ T8128] vfs_write+0x6ac/0x1050 [ 187.058409][ T8128] ? __pfx_configfs_write_iter+0x10/0x10 [ 187.058421][ T8128] ? __pfx_vfs_write+0x10/0x10 [ 187.058431][ T8128] ? find_held_lock+0x2b/0x80 [ 187.058449][ T8128] ksys_write+0x12a/0x250 [ 187.058459][ T8128] ? __pfx_ksys_write+0x10/0x10 [ 187.058471][ T8128] __do_fast_syscall_32+0xe7/0x970 [ 187.058491][ T8128] do_fast_syscall_32+0x32/0x70 [ 187.058507][ T8128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.058521][ T8128] RIP: 0023:0xf7f38fec [ 187.058536][ T8128] Code: Unable to access opcode bytes at 0xf7f38fc2. [ 187.058541][ T8128] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 187.058553][ T8128] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 187.058560][ T8128] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.058566][ T8128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.058573][ T8128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.058579][ T8128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.058589][ T8128] [ 187.058593][ T8128] [ 187.143458][ T8128] Allocated by task 8128: [ 187.145239][ T8128] kasan_save_stack+0x30/0x50 [ 187.147132][ T8128] kasan_save_track+0x14/0x30 [ 187.148995][ T8128] __kasan_kmalloc+0xaa/0xb0 [ 187.150873][ T8128] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 187.153371][ T8128] kstrdup+0x51/0xe0 [ 187.154926][ T8128] f_uac2_opts_c_srate_store+0x113/0x260 [ 187.157134][ T8128] configfs_write_iter+0x302/0x4e0 [ 187.159180][ T8128] vfs_write+0x6ac/0x1050 [ 187.160928][ T8128] ksys_write+0x12a/0x250 [ 187.162660][ T8128] __do_fast_syscall_32+0xe7/0x970 [ 187.164714][ T8128] do_fast_syscall_32+0x32/0x70 [ 187.166658][ T8128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.169159][ T8128] [ 187.170114][ T8128] The buggy address belongs to the object at ffff888073a67280 [ 187.170114][ T8128] which belongs to the cache kmalloc-64 of size 64 [ 187.175485][ T8128] The buggy address is located 6 bytes inside of [ 187.175485][ T8128] 36-byte region [ffff888073a67280, ffff888073a672a4) [ 187.180521][ T8128] [ 187.181489][ T8128] The buggy address belongs to the physical page: [ 187.183998][ T8128] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x73a67 [ 187.187423][ T8128] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 187.190257][ T8128] page_type: f5(slab) [ 187.191882][ T8128] raw: 04fff00000000000 ffff88801bc428c0 dead000000000100 dead000000000122 [ 187.195264][ T8128] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 187.198606][ T8128] page dumped because: kasan: bad access detected [ 187.201136][ T8128] page_owner tracks the page as allocated [ 187.203374][ T8128] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5733, tgid 5733 (udevd), ts 148857716231, free_ts 148750276512 [ 187.211088][ T8128] post_alloc_hook+0xfd/0x120 [ 187.212972][ T8128] get_page_from_freelist+0xf48/0x3530 [ 187.215131][ T8128] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 187.217470][ T8128] new_slab+0xa2/0x640 [ 187.219128][ T8128] refill_objects+0xe3/0x410 [ 187.220973][ T8128] __pcs_replace_empty_main+0x376/0x680 [ 187.223167][ T8128] __kmalloc_noprof+0x66d/0x820 [ 187.225095][ T8128] tomoyo_encode2+0xfb/0x3c0 [ 187.226942][ T8128] tomoyo_encode+0x29/0x50 [ 187.228706][ T8128] tomoyo_realpath_from_path+0x18c/0x690 [ 187.230939][ T8128] tomoyo_path_perm+0x276/0x460 [ 187.232880][ T8128] security_inode_getattr+0x116/0x280 [ 187.234996][ T8128] vfs_fstat+0x4b/0xe0 [ 187.236645][ T8128] __do_sys_newfstat+0x8b/0x110 [ 187.238566][ T8128] do_syscall_64+0x115/0x840 [ 187.240421][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.242763][ T8128] page last free pid 5727 tgid 5727 stack trace: [ 187.245220][ T8128] __free_frozen_pages+0x79f/0x1090 [ 187.247293][ T8128] qlist_free_all+0x47/0xf0 [ 187.249096][ T8128] kasan_quarantine_reduce+0x1a0/0x1f0 [ 187.251240][ T8128] __kasan_slab_alloc+0x69/0x90 [ 187.253184][ T8128] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 187.255326][ T8128] ptlock_alloc+0x1f/0x70 [ 187.257050][ T8128] pte_alloc_one+0x82/0x3d0 [ 187.258845][ T8128] __pte_alloc+0x6d/0x3e0 [ 187.260582][ T8128] copy_page_range+0x3dd8/0x5b20 [ 187.262546][ T8128] dup_mmap+0xd44/0x21b0 [ 187.264225][ T8128] copy_process+0x4588/0x8030 [ 187.266074][ T8128] kernel_clone+0x176/0x9d0 [ 187.267872][ T8128] __do_compat_sys_ia32_clone+0xd4/0x120 [ 187.270085][ T8128] __do_fast_syscall_32+0xe7/0x970 [ 187.272072][ T8128] do_fast_syscall_32+0x32/0x70 [ 187.273978][ T8128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.276305][ T8128] [ 187.277242][ T8128] Memory state around the buggy address: [ 187.279329][ T8128] ffff888073a67180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 187.282501][ T8128] ffff888073a67200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 187.285498][ T8128] >ffff888073a67280: 00 00 00 00 04 fc fc fc fc fc fc fc fc fc fc fc [ 187.288636][ T8128] ^ [ 187.290259][ T8128] ffff888073a67300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 187.293410][ T8128] ffff888073a67380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 187.296465][ T8128] ================================================================== [ 187.398850][ T8128] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 187.401285][ T8128] CPU: 2 UID: 0 PID: 8128 Comm: syz.2.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.404645][ T8128] Tainted: [L]=SOFTLOCKUP [ 187.406011][ T8128] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 187.409136][ T8128] Call Trace: [ 187.410202][ T8128] [ 187.411158][ T8128] dump_stack_lvl+0x100/0x190 [ 187.412719][ T8128] vpanic+0x552/0x970 [ 187.414076][ T8128] ? __pfx_vpanic+0x10/0x10 [ 187.415526][ T8128] panic+0xd1/0xe0 [ 187.416716][ T8128] ? __pfx_panic+0x10/0x10 [ 187.418127][ T8128] ? preempt_schedule_common+0x42/0xc0 [ 187.419851][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.421688][ T8128] check_panic_on_warn.cold+0x19/0x34 [ 187.423509][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.425344][ T8128] end_report.part.0+0x3a/0x90 [ 187.426854][ T8128] kasan_report_invalid_free.cold+0xd/0x12 [ 187.428712][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.430539][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.432343][ T8128] ? f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.434174][ T8128] check_slab_allocation+0xe1/0xf0 [ 187.435744][ T8128] ? f_uac2_opts_c_srate_store+0x1c0/0x260 [ 187.437520][ T8128] kfree+0x1b6/0x6c0 [ 187.438709][ T8128] ? __asan_memcpy+0x3c/0x60 [ 187.440130][ T8128] f_uac2_opts_c_srate_store+0x1d4/0x260 [ 187.441844][ T8128] ? __pfx_f_uac2_opts_c_srate_store+0x10/0x10 [ 187.443807][ T8128] ? configfs_write_iter+0x388/0x4e0 [ 187.445446][ T8128] configfs_write_iter+0x302/0x4e0 [ 187.447018][ T8128] vfs_write+0x6ac/0x1050 [ 187.448363][ T8128] ? __pfx_configfs_write_iter+0x10/0x10 [ 187.450120][ T8128] ? __pfx_vfs_write+0x10/0x10 [ 187.451640][ T8128] ? find_held_lock+0x2b/0x80 [ 187.453123][ T8128] ksys_write+0x12a/0x250 [ 187.454467][ T8128] ? __pfx_ksys_write+0x10/0x10 [ 187.455963][ T8128] __do_fast_syscall_32+0xe7/0x970 [ 187.457539][ T8128] do_fast_syscall_32+0x32/0x70 [ 187.459058][ T8128] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.460977][ T8128] RIP: 0023:0xf7f38fec [ 187.462258][ T8128] Code: Unable to access opcode bytes at 0xf7f38fc2. [ 187.464330][ T8128] RSP: 002b:00000000f53f650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 187.466831][ T8128] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 187.469276][ T8128] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.471751][ T8128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.474241][ T8128] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 187.476713][ T8128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.479182][ T8128] [ 187.480709][ T8128] Kernel Offset: disabled [ 187.482216][ T8128] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:26:06 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff8dd5bb9c RBX=0000000000009c2e RCX=fffffffff3e41844 RDX=0000000000080000 RSI=0000000000000000 RDI=ffff888026f78000 RBP=0000000000009c1b RSP=ffffc90003dbeee0 R8 =0000000000000007 R9 =0000000000000001 R10=0000000000000027 R11=0000000000002499 R12=0000000000009c42 R13=ffffffff81b9de28 R14=0000000000009c2e R15=dffffc0000000000 RIP=ffffffff81fda11b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888096bf3000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000fffd3f9c CR3=000000006c585000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b52eaa RDX=ffff88801c73a540 RSI=ffffffff81b52ece RDI=ffff88801c73a540 RBP=0000000000000001 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200008dfc4 R15=0000000000000000 RIP=ffffffff81b52ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000008000d000 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff97fc3958 RBX=0000000000000002 RCX=0000000000000003 RDX=ffffffff9669c9a0 RSI=0000000000000003 RDI=ffffffff97fec148 RBP=0000000000000030 RSP=ffffc900040e70f8 R8 =ffffffff9669c9d0 R9 =0000000000000002 R10=ffffc900040e7288 R11=0000000000000000 R12=ffffffff81e4f7e0 R13=ffffc900040e71a0 R14=ffffffff81e505f0 R15=ffffffff97fec148 RIP=ffffffff81e510b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7f76ec0 CR3=000000004ef61000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001d1583 RBX=ffff88801c7f2540 RCX=ffffffff8bb81335 RDX=0000000000000000 RSI=ffffffff8e1a2693 RDI=ffffffff8c3fe580 RBP=ffffed10038fe4a8 RSP=ffffc9000048fe00 R8 =0000000000000001 R9 =ffffed10056a678d R10=ffff88802b533c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000091fc4 R15=dffffc0000000000 RIP=ffffffff8bb7f8ff RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f4f00008 CR3=000000004e0f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8356a81a5b3de663 3701ac02c2af10d9 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4fc5fe7cc5c3964 98b30d3170cf1118 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9b50abf8733021a3 01d84c8a062f4d23 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b1c2e608e4ec0e92 63c501282ce9a8b9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000180 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000f875ce32 3559cfa48900924e ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000721e31873d 00800100890bdad8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000072dc2789dc 7cdfe7307c5b07ec ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010000000072 000000720234d040 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 db2a699e091bbd6b fae681c7f8ffdbd1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 852ad8f38abb09df f3dc36e8d71cc864 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000