last executing test programs: 2.618251822s ago: executing program 1 (id=545): ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x0, 0x300fdfd, 0x8, 0x1, 0x100, &(0x7f00000004c0)="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"}) 2.617589229s ago: executing program 1 (id=547): r0 = socket(0x10, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r3 = fanotify_init(0x202, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_raw(r6, &(0x7f00000004c0)={&(0x7f0000000140)={0x1d, r7}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) (async) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) (async) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x7, 0xffffffff, 0x4f565559, 0x4, 0x7f, 0xbd, 0x5, 0x20080f9b, 0x0, 0x4, 0x0, 0x3}}) r8 = dup2(r3, r2) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x110, 0x220, 0x330, 0x330, 0x330, 0x4, &(0x7f0000000280), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010100, 0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @empty, @local, @local, 0x4, 0xffffffff}}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x13}, 0xff000000, 0x0, 0xb, 0x4, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0x81, 0x2, 0x0, 0xfff7, 0x6, 0xce, 'wg0\x00', 'veth1_virt_wifi\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) read$FUSE(r8, 0x0, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x11c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}, @IFLA_VF_PORTS={0x90, 0x18, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_HOST_UUID={0x14}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1468a17e658c40ca44f8f08102b2c97e"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, '\x00\x00 \x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xf}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x51}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "674cc34192c6d332cea8ad7a77a731e9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b6e3e9b6407b67f722f224dfad90facf"}, @IFLA_PORT_VF={0x8, 0x1, 0x81}]}]}, @IFLA_MAP={0x24, 0xe, {0x100000001, 0x401, 0x6, 0xf6e, 0x2}}, @IFLA_TXQLEN={0x8, 0xd, 0x5}, @IFLA_IFALIASn={0x4}, @IFLA_PORT_SELF={0x20, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e66f47083e3c215842fa35463eb22676"}, @IFLA_PORT_PROFILE={0x7, 0x2, '&#\x00'}]}]}, 0x11c}, 0x1, 0x4801000000000000}, 0x0) 1.629931432s ago: executing program 1 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x4288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x26040090) write(r0, &(0x7f0000000000)="8489ebaa6406e639057a7f86ef93d803ec5796f9038841416e426cc47443b39087e40a", 0x23) (async) write(r0, &(0x7f0000000480)='usbip-vudc.0', 0xc) (async, rerun: 64) write(r0, &(0x7f00000004c0)='\n', 0x1) (rerun: 64) 1.290340196s ago: executing program 1 (id=564): socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./myproc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./myproc\x00', 0x20) lseek(r0, 0x2000000008, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYBLOB="90f8568829610c192f7b96854f3e95d08821fc2c35fd4fb4ac50f302722d07c865b2658cedee2f6ee3c3f58dfa8d4d4079f8adeefca8aff0c6483d4b05595c561dad17cd3953efd6f4f5a8281b6cfc6ac52669b3"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0x401}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0xdb2, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x20040800, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000040)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x6, 0xcc, &(0x7f0000000600)=""/204, 0x41000, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20084884) r6 = socket(0x11, 0x3, 0xb36) sendmsg$nl_generic(r6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/printer.usb0/file0\x00', 0x36) socket$nl_route(0x10, 0x3, 0x0) 1.253426845s ago: executing program 0 (id=565): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0xae7, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x127}}}, &(0x7f0000000300)=0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0x3e0e, 0x400, 0x0, 0x28e}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8bf, 0x40, 0x2, 0x9a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x200, 0x0, 0x3b2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x800, 0x0, 0x16a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x400, 0x3, 0x201}}], 0x4, &(0x7f0000001f40)={0x2e, 0x44, 0x600, r8, 0xc0107523, 0x0, 0x0, 0x0, 0x0, {0x10}, 0x0, r6, '\x00', {0x3, 0xb59, 0x100104, 0x0}}, &(0x7f0000000280)) 1.147131657s ago: executing program 0 (id=569): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x22240, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000040000009e"]) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x8091) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x4e) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) close_range(r0, 0xffffffffffffffff, 0x0) 1.010316851s ago: executing program 0 (id=572): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x2000fb) 896.404927ms ago: executing program 0 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x54}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2004d004}, 0x8000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x2000fb) 769.561741ms ago: executing program 3 (id=575): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480), 0x0) 767.668928ms ago: executing program 3 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)="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", 0x6200) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000090}, 0x4090) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r8, 0x0, 0xffff, 0x3, &(0x7f00000002c0)="f0f7b9", 0x4}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42001800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000700)={0x8a8, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x254, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x2, 0xc6, 0x1, 0xc, 0x24, 0x0, 0x2, 0x6, 0x18, 0x4, 0x30, 0x12, 0x3, 0x2b, 0x6, 0x2, 0xb, 0x6, 0x1, 0xb, 0x5, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x6, 0x4, 0x14, 0x60, 0x48, 0x2, 0x3, 0x30, 0x5, 0x12, 0x1, 0x1, 0x12, 0x36, 0x26, 0x6, 0x12, 0x16, 0x9, 0x18, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x36, 0x6, 0x6, 0x30, 0x30, 0x5, 0x6c, 0x3, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0xc, 0xb, 0x60, 0x60, 0x24, 0x2, 0xc, 0x2]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0xfff8, 0x8, 0x1, 0x7, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x18, 0x30, 0x16, 0xb, 0xa, 0x60, 0x5, 0x77, 0xb, 0x16, 0x22, 0x6, 0x48, 0x12, 0x6c, 0x18, 0x4, 0x14, 0x5, 0x3, 0x12, 0x18, 0x9, 0x18, 0x6, 0x1b, 0x48, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x0, 0x5, 0x8, 0xc, 0x1, 0x8001, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x18, 0x6c, 0x36, 0x3, 0x6, 0x1, 0x36, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x12, 0x48, 0x9, 0x4, 0x24, 0x6c]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff6, 0x70, 0x0, 0xf1a7, 0xff, 0x2, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x6, 0x4, 0x0, 0x5, 0x60, 0x3, 0xc, 0x24, 0x24, 0x7, 0x5, 0x30, 0x2, 0xc, 0x16, 0x48, 0xb, 0x16, 0x9, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xa, 0x6, 0x30, 0x60, 0x48, 0x30, 0x6c, 0x6, 0xb, 0x48, 0x60, 0x4, 0x1, 0xc, 0x5, 0x12, 0x18, 0x4, 0x16, 0x30, 0x24, 0x4, 0x19, 0x1b, 0x6, 0x4, 0x24, 0x12, 0x30, 0x4, 0xd]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x2, 0x1b, 0xb, 0x48, 0x2, 0x30, 0xc, 0x4, 0x3, 0xb, 0x24, 0x0, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff, 0xd396, 0xfff, 0xb, 0xd, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x8001, 0x0, 0x1, 0x101, 0xc000, 0x400, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6fb, 0x5, 0x5, 0x1, 0x3, 0x1, 0xad, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x7}, {0x7, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x6, 0x5}, {}, {0x3, 0x1}, {0x7}, {0x5, 0xa}, {0x5, 0xa}, {0x4}, {0x1, 0x9}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x6c, 0x60, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x2, 0x7, 0x6, 0x4, 0x2, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x12, 0x12, 0x60, 0x0, 0x6c, 0x6, 0x12, 0x1, 0x12, 0x48, 0x1, 0x4, 0x36, 0x28, 0x1d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x5, 0x82, 0x4, 0x100, 0x2, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x80, 0xe, 0xfff8, 0x18, 0x401, 0xd37b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0x0, 0x4, 0x8, 0x0, 0xa, 0x7]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x6}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xc, 0x2, 0x6c, 0xc, 0x4, 0x24, 0xc, 0x16, 0x6c, 0x12, 0xb, 0x9, 0x2, 0xb, 0x5, 0x24, 0x18, 0x6, 0x9, 0x24, 0x3, 0x18, 0x3, 0x1b, 0x12, 0xb, 0x12, 0xc]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xf6305385614a50aa, 0x2, 0x9, 0xb, 0x4, 0x18, 0x36, 0x5, 0x24, 0x5, 0x2, 0x18, 0xb, 0x18, 0x0, 0x30, 0xc, 0x24, 0x6, 0x40, 0x4, 0xb, 0x12, 0x2f, 0x6]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x3}, {0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x18}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x9}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x30, 0x1b, 0x6c, 0x2, 0xb, 0xc, 0x36, 0x18, 0xc, 0xc, 0x1, 0x5, 0x9, 0x6c, 0x24, 0x3, 0x18, 0x30, 0x4, 0x30, 0x1b, 0x2fcab79d487567b4, 0x12, 0x2, 0x28]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x1}, {0x2, 0x8}, {0x2, 0x2}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x7}, {0x4}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x7}, {0x5}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x60, 0xb, 0x4, 0x60, 0x12, 0x5, 0x30, 0x5, 0x24, 0x0, 0x6c]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x5, 0x4, 0x60, 0x6, 0x1, 0xc, 0xb, 0x30, 0x30, 0xc, 0x6c, 0xb, 0x0, 0x6c, 0x2, 0xc, 0x24, 0x24, 0xb, 0x6, 0x60, 0x1b, 0x24, 0x9, 0x18, 0x60, 0x16, 0x2, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x12, 0xb, 0x9, 0x0, 0x25, 0x18, 0x24, 0x9]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x2e, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0x3, 0xfc01, 0x7, 0x8, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf0, 0xfffb, 0x1, 0x200, 0x0, 0x200, 0x3d, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9, 0x0, 0x4, 0x5, 0x548b, 0x10, 0x1e0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x846, 0xbe, 0x9, 0xc383, 0xdac, 0x1db, 0x8001, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x38d, 0xe4fe, 0x400, 0x1, 0x8000, 0x1000, 0x5, 0x80]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x1b, 0xc, 0x16, 0x30, 0x16, 0x4, 0x5, 0x12, 0x6, 0x36, 0x1b, 0x6, 0x1, 0x30, 0x4, 0x24, 0x1, 0x1]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x9}, {0x4, 0x5}, {0x7, 0x6}, {0x7, 0x7}, {0x4}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x1f}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x7, 0x1}, {0x6, 0x7}, {0x6, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x2, 0x5}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0xa}, {0x6, 0xa}, {0x6, 0x1}, {}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x6}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x5}, {0x2, 0x1}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x587e, 0x7, 0xf, 0x8, 0x0, 0xf951, 0x5, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x4}, {0x0, 0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x2}, {0x7, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x2}, {0x4, 0x3}, {0x2, 0x5}, {0x5, 0x7}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x5}, {0x1}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x0, 0x3, 0x3, 0x10, 0x0, 0x8, 0x6]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x6, 0x5, 0x9, 0x3, 0x9, 0xad]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x24, 0x5, 0x16, 0x0, 0x12, 0x12, 0xc, 0x54, 0x12, 0x16, 0x4, 0x24, 0x30, 0xb, 0x6c, 0x1, 0x6c, 0xc, 0x6c, 0x36, 0x1b, 0x6, 0x48, 0x4, 0x36, 0x12, 0x4, 0x30, 0x60, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xa, 0x101, 0x3, 0x861, 0x3, 0x1]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x8}, {0x5, 0x6}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0xa}, {0x3, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x0, 0x813d3f71a53b5e3b, 0xb, 0xc, 0x1b, 0x1b, 0xb, 0x30, 0x6c, 0x4, 0x2, 0x6c, 0x2, 0x4, 0x3, 0x48, 0x48, 0x16, 0x48, 0x4, 0x32, 0x60, 0x5, 0x48, 0x12, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x18}, {0x7, 0x1}, {0x2, 0x7}, {}, {0x0, 0x1}, {0x3, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x7, 0x8}, {0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {}, {0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {}, {0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x5, 0x9}, {0x2, 0x2}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x1}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0xd33, 0x1000, 0x9, 0x7, 0x2, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x6}, {0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {0x1}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x7}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x5, 0x48, 0x0, 0x3, 0x3, 0xb, 0x18, 0x18, 0x16, 0x3, 0x12, 0x36, 0x5, 0x3, 0x2, 0x6, 0x36, 0x60, 0x6c, 0x9, 0x7f, 0x18, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x200, 0x392, 0x6, 0x3ff, 0xff80, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x2}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {}, {0x2, 0x4}, {0x3, 0x2}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x4, 0x7}, {}, {0x0, 0x2}, {0x3}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x0, 0x9}, {0x1}, {0x2, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x4, 0x7}, {0x5}, {0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x7, 0x2}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x5}, {0x6}, {0x7, 0x5}, {0x3}, {0x1, 0x4}, {0x3, 0x1}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x30, 0x1, 0x3, 0x60, 0x39, 0x2, 0x12, 0x5, 0xc, 0xc, 0x1b, 0x1, 0x6c, 0x12, 0x6, 0xb, 0x24, 0x6, 0x12, 0x16, 0x60, 0x6c, 0x9, 0xc, 0x6, 0x12, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x6}, {0x7, 0x6}, {0x6, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x2}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x2}, {0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x6, 0x4}, {0x5}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x7}, {0x1, 0x5}, {0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x4}, {0x7, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x1}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0x8}, {0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x4, 0x6}, {0x5, 0x8}, {0x3, 0x3}, {0x5}, {0x1, 0x6}, {0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0x2}, {0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x3}, {0x7, 0x7}, {}, {0x7, 0x9}, {0x1, 0x9}, {0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x2, 0x1, 0xc9b, 0xfff, 0xf, 0xfffd, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x9, 0x5, 0x48, 0x18, 0x18, 0x24, 0x6c, 0x6, 0x6, 0x1b, 0x24, 0x18, 0x6, 0x30, 0x6c, 0x3]}]}]}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x95}, 0x20000001) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1c, 0x36, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x1c}}, 0xc000) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000500)={'security\x00', 0x54, "0522db878c8ed09077dd6fa3109c2abd217fd4b7efe7b42f88b8d03fc6d8702012cf90fd3359a31c53b7565cdb9817f4753b958578fb16e6e4d5340332a532ea61f6ac6f316c6119ac97d6857f5fa7c9b5f4b23d"}, &(0x7f0000000580)=0x78) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/dri/1/Virtual-1/edid_override\x00', 0x2, 0x0) (async) write(r2, &(0x7f00000001c0)="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", 0x6200) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000090}, 0x4090) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r0) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x1) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r8, 0x0, 0xffff, 0x3, &(0x7f00000002c0)="f0f7b9", 0x4}) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x42001800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000700)={0x8a8, r3, 0x4, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x254, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x2, 0xc6, 0x1, 0xc, 0x24, 0x0, 0x2, 0x6, 0x18, 0x4, 0x30, 0x12, 0x3, 0x2b, 0x6, 0x2, 0xb, 0x6, 0x1, 0xb, 0x5, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x36, 0x6, 0x4, 0x14, 0x60, 0x48, 0x2, 0x3, 0x30, 0x5, 0x12, 0x1, 0x1, 0x12, 0x36, 0x26, 0x6, 0x12, 0x16, 0x9, 0x18, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6c, 0x36, 0x6, 0x6, 0x30, 0x30, 0x5, 0x6c, 0x3, 0x6c, 0x24]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x16, 0xc, 0xb, 0x60, 0x60, 0x24, 0x2, 0xc, 0x2]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0xfff8, 0x8, 0x1, 0x7, 0x2, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x18, 0x30, 0x16, 0xb, 0xa, 0x60, 0x5, 0x77, 0xb, 0x16, 0x22, 0x6, 0x48, 0x12, 0x6c, 0x18, 0x4, 0x14, 0x5, 0x3, 0x12, 0x18, 0x9, 0x18, 0x6, 0x1b, 0x48, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x0, 0x5, 0x8, 0xc, 0x1, 0x8001, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xb, 0x18, 0x6c, 0x36, 0x3, 0x6, 0x1, 0x36, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x9, 0x12, 0x48, 0x9, 0x4, 0x24, 0x6c]}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff6, 0x70, 0x0, 0xf1a7, 0xff, 0x2, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x6, 0x4, 0x0, 0x5, 0x60, 0x3, 0xc, 0x24, 0x24, 0x7, 0x5, 0x30, 0x2, 0xc, 0x16, 0x48, 0xb, 0x16, 0x9, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xa, 0x6, 0x30, 0x60, 0x48, 0x30, 0x6c, 0x6, 0xb, 0x48, 0x60, 0x4, 0x1, 0xc, 0x5, 0x12, 0x18, 0x4, 0x16, 0x30, 0x24, 0x4, 0x19, 0x1b, 0x6, 0x4, 0x24, 0x12, 0x30, 0x4, 0xd]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x1, 0x2, 0x1b, 0xb, 0x48, 0x2, 0x30, 0xc, 0x4, 0x3, 0xb, 0x24, 0x0, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff, 0xd396, 0xfff, 0xb, 0xd, 0x800]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x8001, 0x0, 0x1, 0x101, 0xc000, 0x400, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6fb, 0x5, 0x5, 0x1, 0x3, 0x1, 0xad, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x15, 0x2, [{0x4, 0x7}, {0x7, 0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x0, 0x7}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x6, 0x5}, {}, {0x3, 0x1}, {0x7}, {0x5, 0xa}, {0x5, 0xa}, {0x4}, {0x1, 0x9}]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x6c, 0x60, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x2, 0x7, 0x6, 0x4, 0x2, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x12, 0x12, 0x60, 0x0, 0x6c, 0x6, 0x12, 0x1, 0x12, 0x48, 0x1, 0x4, 0x36, 0x28, 0x1d]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x184, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x9, 0x5, 0x82, 0x4, 0x100, 0x2, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x80, 0xe, 0xfff8, 0x18, 0x401, 0xd37b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x2, 0x0, 0x4, 0x8, 0x0, 0xa, 0x7]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x6}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0xc, 0x2, 0x6c, 0xc, 0x4, 0x24, 0xc, 0x16, 0x6c, 0x12, 0xb, 0x9, 0x2, 0xb, 0x5, 0x24, 0x18, 0x6, 0x9, 0x24, 0x3, 0x18, 0x3, 0x1b, 0x12, 0xb, 0x12, 0xc]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xf6305385614a50aa, 0x2, 0x9, 0xb, 0x4, 0x18, 0x36, 0x5, 0x24, 0x5, 0x2, 0x18, 0xb, 0x18, 0x0, 0x30, 0xc, 0x24, 0x6, 0x40, 0x4, 0xb, 0x12, 0x2f, 0x6]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x3, 0x1}, {0x7, 0x7}, {0x3}, {0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x2, 0x2}, {0x5, 0x1}, {0x2, 0x18}, {0x4, 0x6}, {0x1, 0xa}, {0x7, 0x6}, {0x7, 0x8}, {0x2, 0x5}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x9}, {0x2, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x3}, {0x5, 0x3}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x30, 0x1b, 0x6c, 0x2, 0xb, 0xc, 0x36, 0x18, 0xc, 0xc, 0x1, 0x5, 0x9, 0x6c, 0x24, 0x3, 0x18, 0x30, 0x4, 0x30, 0x1b, 0x2fcab79d487567b4, 0x12, 0x2, 0x28]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x9}, {0x4, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x2, 0x4}, {0x2, 0x5}, {0x4, 0x9}, {0x0, 0xa}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0x9}, {0x3, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x7}, {0x1}, {0x2, 0x8}, {0x2, 0x2}, {0x0, 0x2}, {0x6, 0x6}, {0x7, 0x7}, {0x4}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x7}, {0x5}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x5}, {0x1, 0x5}, {0x5, 0x4}, {0x1, 0x2}, {0x3, 0x7}, {0x6, 0x5}, {0x5, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x24, 0x60, 0xb, 0x4, 0x60, 0x12, 0x5, 0x30, 0x5, 0x24, 0x0, 0x6c]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x5, 0x5, 0x4, 0x60, 0x6, 0x1, 0xc, 0xb, 0x30, 0x30, 0xc, 0x6c, 0xb, 0x0, 0x6c, 0x2, 0xc, 0x24, 0x24, 0xb, 0x6, 0x60, 0x1b, 0x24, 0x9, 0x18, 0x60, 0x16, 0x2, 0x30]}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x12, 0xb, 0x9, 0x0, 0x25, 0x18, 0x24, 0x9]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x2e, 0xc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x4, 0x3, 0xfc01, 0x7, 0x8, 0x7, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcf0, 0xfffb, 0x1, 0x200, 0x0, 0x200, 0x3d, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x9, 0x0, 0x4, 0x5, 0x548b, 0x10, 0x1e0]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x846, 0xbe, 0x9, 0xc383, 0xdac, 0x1db, 0x8001, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x38d, 0xe4fe, 0x400, 0x1, 0x8000, 0x1000, 0x5, 0x80]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x1b, 0xc, 0x16, 0x30, 0x16, 0x4, 0x5, 0x12, 0x6, 0x36, 0x1b, 0x6, 0x1, 0x30, 0x4, 0x24, 0x1, 0x1]}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x9}, {0x4, 0x5}, {0x7, 0x6}, {0x7, 0x7}, {0x4}, {0x3, 0x3}, {0x7, 0x3}, {0x0, 0x2}, {0x4, 0x6}, {0x7, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x1f}, {0x6, 0x5}, {0x2, 0x9}, {0x6, 0x1}, {0x3, 0x6}, {0x6, 0x4}, {0x1, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x8}, {0x7, 0x1}, {0x6, 0x7}, {0x6, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x2, 0x5}, {0x4, 0x6}, {0x3, 0x6}, {0x1, 0x4}, {0x7, 0x1}, {0x6, 0x2}, {0x4, 0x9}, {0x7, 0x3}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0xa}, {0x6, 0xa}, {0x6, 0x1}, {}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x6}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0xa}, {0x3, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x7}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0x6}, {0x5, 0x7}, {0x1, 0x9}, {0x5}, {0x2, 0x1}, {0x4, 0x6}, {0x2, 0x3}, {0x4, 0x3}, {0x2, 0x8}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2c4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x587e, 0x7, 0xf, 0x8, 0x0, 0xf951, 0x5, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x5, 0x4}, {0x0, 0x3}, {0x4, 0x9}, {0x7, 0x4}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x0, 0x2}, {0x7, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x2, 0x3}, {0x5}, {0x6, 0x4}, {0x1, 0x5}, {0x7, 0x4}, {0x6, 0x8}, {0x3, 0x3}, {0x6, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0x5}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x4, 0x7}, {0x1, 0x8}, {0x2, 0xa}, {0x2}, {0x4, 0x3}, {0x2, 0x5}, {0x5, 0x7}, {0x7, 0x1}, {0x3, 0x4}, {0x3, 0xa}, {0x2, 0x3}, {0x6, 0x4}, {0x2, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x5}, {0x1}, {0x7, 0xa}, {0x3, 0x2}, {0x1, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x6, 0x2}, {0x6, 0xa}, {0x2, 0x6}, {0x1, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x0, 0x3, 0x3, 0x10, 0x0, 0x8, 0x6]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x5, 0x6, 0x5, 0x9, 0x3, 0x9, 0xad]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x16, 0x24, 0x5, 0x16, 0x0, 0x12, 0x12, 0xc, 0x54, 0x12, 0x16, 0x4, 0x24, 0x30, 0xb, 0x6c, 0x1, 0x6c, 0xc, 0x6c, 0x36, 0x1b, 0x6, 0x48, 0x4, 0x36, 0x12, 0x4, 0x30, 0x60, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x2, 0xa, 0x101, 0x3, 0x861, 0x3, 0x1]}}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x15, 0x2, [{0x2, 0x7}, {0x7, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x4, 0x9}, {0x4, 0x8}, {0x5, 0x6}, {0x3, 0x5}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x5}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0xa}, {0x3, 0x6}, {0x4, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x6c, 0x0, 0x813d3f71a53b5e3b, 0xb, 0xc, 0x1b, 0x1b, 0xb, 0x30, 0x6c, 0x4, 0x2, 0x6c, 0x2, 0x4, 0x3, 0x48, 0x48, 0x16, 0x48, 0x4, 0x32, 0x60, 0x5, 0x48, 0x12, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x18}, {0x7, 0x1}, {0x2, 0x7}, {}, {0x0, 0x1}, {0x3, 0x4}, {0x4, 0x6}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x8}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x7, 0x8}, {0x7}, {0x3, 0x8}]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x0, 0x2}, {0x7, 0x6}, {0x3, 0xa}, {0x6, 0x6}, {0x4, 0x7}, {0x7, 0x6}, {0x1, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {}, {0x2}, {0x1, 0x5}, {0x1, 0x6}, {0x6, 0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x0, 0x9}, {}, {0x3}, {0x4, 0x9}, {0x1, 0x2}, {0x1, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x7}, {0x4, 0xa}, {0x6}, {0x7, 0x1}, {0x1, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x7, 0x2}, {0x4, 0xa}, {0x4, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x5, 0x9}, {0x2, 0x2}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x8}, {0x6, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x1}, {0x7, 0x5}, {0x0, 0x1}, {0x1, 0x9}, {0x5, 0x1}]}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0, 0xd33, 0x1000, 0x9, 0x7, 0x2, 0x9, 0x5]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x4, 0x7}, {0x1, 0x8}, {0x0, 0x4}, {0x6, 0x5}, {0x6, 0x6}, {0x1}, {0x1, 0x7}, {0x3, 0x6}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x1}, {0x1}, {0x2, 0x6}, {0x6, 0x4}, {0x1, 0x4}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x0, 0x9}, {0x6, 0x8}, {0x6, 0x2}, {0x6, 0x5}, {0x1, 0x2}, {0x0, 0x3}, {0x7}, {0x2, 0x8}, {0x2, 0x4}, {0x7, 0x8}, {0x7, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x5, 0x48, 0x0, 0x3, 0x3, 0xb, 0x18, 0x18, 0x16, 0x3, 0x12, 0x36, 0x5, 0x3, 0x2, 0x6, 0x36, 0x60, 0x6c, 0x9, 0x7f, 0x18, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffa, 0x200, 0x392, 0x6, 0x3ff, 0xff80, 0x8, 0x1]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x2}, {0x6, 0x5}, {0x5, 0x8}, {0x7, 0x5}, {0x7, 0x5}, {0x2, 0xa}, {0x0, 0xa}, {0x0, 0x6}, {0x3, 0x2}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x6}, {0x1, 0x9}, {0x1, 0x6}, {0x6, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {}, {0x2, 0x4}, {0x3, 0x2}, {0x6, 0x2}, {0x5, 0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x7, 0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x2, 0x8}, {0x1, 0x7}, {0x2, 0x7}, {0x4, 0x7}, {}, {0x0, 0x2}, {0x3}, {0x3, 0x9}, {0x2, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x3, 0x2}, {0x2, 0x8}, {0x6, 0x4}, {0x0, 0x9}, {0x1}, {0x2, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x0, 0x8}, {0x4, 0x1}, {0x4, 0x7}, {0x5}, {0x4}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x3}, {0x5, 0xa}, {0x0, 0x4}, {0x4, 0xa}, {0x7, 0x2}, {0x3, 0x8}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x5}, {0x6}, {0x7, 0x5}, {0x3}, {0x1, 0x4}, {0x3, 0x1}]}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x30, 0x1, 0x3, 0x60, 0x39, 0x2, 0x12, 0x5, 0xc, 0xc, 0x1b, 0x1, 0x6c, 0x12, 0x6, 0xb, 0x24, 0x6, 0x12, 0x16, 0x60, 0x6c, 0x9, 0xc, 0x6, 0x12, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xa8, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x6, 0x6}, {0x7, 0x6}, {0x6, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x6, 0x9}, {0x1, 0x4}, {0x2}, {0x3, 0x8}, {0x3, 0x4}, {0x0, 0x8}, {0x3, 0x2}, {0x7}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0xa}, {0x5, 0x6}, {0x6, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x5, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x6, 0x4}, {0x5}, {0x7, 0x7}, {0x0, 0x8}, {0x5, 0x9}, {0x1, 0x7}, {0x1, 0x5}, {0x2}, {0x1, 0x9}, {0x4, 0x3}, {0x6, 0x2}, {0x1, 0x3}, {0x2, 0x7}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x2}, {0x7, 0x6}, {0x1, 0x6}, {0x7, 0x1}, {0x3, 0x5}, {0x0, 0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x5, 0x7}, {0x4}, {0x7, 0x8}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x0, 0x1}, {0x1, 0x8}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x2, 0x3}, {0x0, 0x7}, {0x0, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0x8}, {0x7}, {0x0, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x6, 0x7}, {0x4, 0x6}, {0x5, 0x8}, {0x3, 0x3}, {0x5}, {0x1, 0x6}, {0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x7, 0x2}, {0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x3}, {0x7, 0x7}, {}, {0x7, 0x9}, {0x1, 0x9}, {0x1}, {0x0, 0x4}, {0x7, 0x8}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x6}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x2, 0x1, 0xc9b, 0xfff, 0xf, 0xfffd, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x2, 0x9, 0x5, 0x48, 0x18, 0x18, 0x24, 0x6c, 0x6, 0x6, 0x1b, 0x24, 0x18, 0x6, 0x30, 0x6c, 0x3]}]}]}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x95}, 0x20000001) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x1c, 0x36, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x1c}}, 0xc000) (async) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000500)={'security\x00', 0x54, "0522db878c8ed09077dd6fa3109c2abd217fd4b7efe7b42f88b8d03fc6d8702012cf90fd3359a31c53b7565cdb9817f4753b958578fb16e6e4d5340332a532ea61f6ac6f316c6119ac97d6857f5fa7c9b5f4b23d"}, &(0x7f0000000580)=0x78) (async) 766.097677ms ago: executing program 0 (id=578): r0 = socket$kcm(0x29, 0x2, 0x0) (async) socketpair(0x2, 0x800, 0xfc07, &(0x7f0000000700)) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000006c0)="df", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="0e", 0x34000}], 0x61}}], 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000280)=0x14) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@type_tag={0xd, 0x0, 0x0, 0x12, 0x5}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @func={0xc, 0x0, 0x0, 0xc, 0x5}, @var={0x5, 0x0, 0x0, 0xe, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0xffffff84}}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000340)=""/225, 0x68, 0xe1, 0x1, 0x81}, 0x28) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r5, 0x400, 0x0) (async) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1a, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x56, &(0x7f00000001c0)=""/86, 0x41000, 0x18, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000480)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0xc, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r4, r5, r6, 0x1], &(0x7f0000000580)=[{0x0, 0x1, 0x8, 0x3}], 0x10, 0xffffffff}, 0x94) (async) ioctl$DVB_DVR_DMX_QUERYBUF(r6, 0xc0186f3d, &(0x7f0000000680)={0x5, 0x21ad5c54, 0x6, 0x1, 0x14, 0x3}) 709.953208ms ago: executing program 0 (id=580): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x400, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000700)={0x5, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @empty}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r4, &(0x7f0000001b80)=[{&(0x7f0000000140)=""/103, 0x67}, {&(0x7f0000000500)=""/101, 0x65}], 0x2, 0x0, 0x0) pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_timeval(r8, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) recvmmsg(r8, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/57, 0x39}], 0x1}, 0x7}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20443, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, 0x0, 0x8410, 0x0) mkdir(&(0x7f0000000940)='./file0\x00', 0x51) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$COMEDI_INSNLIST(r9, 0x8010640b, &(0x7f00000000c0)={0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) 698.760863ms ago: executing program 3 (id=581): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0], 0x0, 0x26, 0x0, 0x5}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3000000041000100fcff0700040000000100000004004880100001800c00108008000b800400138008000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x0, &(0x7f0000000380)}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xf, 0x5, 0x1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES64=0x0, @ANYRES64], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES64=r3, @ANYBLOB="050008000300000008000a00", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0xc085}, 0x800) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000380), 0x70b001, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340)=0x1, 0x4) ioctl$VIDIOC_ENUMOUTPUT(r7, 0xc0485630, &(0x7f0000000080)={0x2, "2c6dbdd6ffad607edafeae57f3d888d28bbb8e8e5448093449a633f9a8a3e728", 0x3, 0x4, 0xac, 0x4000, 0x8}) ioctl$DMA_BUF_SET_NAME_A(0xffffffffffffffff, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000540)=0x1) close_range(r2, r6, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000140)=""/252, 0x302000, 0x1000, 0x101, 0x3}, 0x4) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=@getchain={0x44, 0x66, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x4, 0x7}, {0x5, 0xffe0}, {0x3, 0x8}}, [{0xfc61}, {0x8, 0xb, 0x682}, {0x8, 0xb, 0xd68c}, {0x8, 0xb, 0x2}, {0x0, 0xb, 0x8b}, {0x0, 0xb, 0x401}, {0x0, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004090}, 0x200004c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8948, &(0x7f00000002c0)={'geneve0\x00', @remote}) 627.645137ms ago: executing program 2 (id=583): openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) close(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) 627.539621ms ago: executing program 3 (id=584): r0 = socket$netlink(0x10, 0x3, 0x14) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x844) 560.486768ms ago: executing program 2 (id=585): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480), 0x0) 510.382693ms ago: executing program 3 (id=586): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x24, 0x0, 0x4000, 0x80, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x4e23, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x4, 0x100}}}}}}}}, 0x36) 510.194802ms ago: executing program 2 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000020905040000000000000000020000000900010073797a3000000000140002800600010000020000050002002000000008000500000000002c0004800800010000000001200002800c000100706f6c696379300008000200000000020800", 0x62}], 0x1}, 0x4000) 408.322199ms ago: executing program 2 (id=588): ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x7fffffff) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8100, 0xa) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4, 0x9}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x4, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21, @loopback}}, [0x3a7e, 0x9, 0xfffffffffffffe00, 0x0, 0x4, 0x1, 0x9, 0x6, 0xa, 0x5, 0x4, 0x80000000, 0x403, 0x8000000000000001, 0x7fffffffffffffff]}, &(0x7f0000000200)=0x100) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x0, 0x9, [0x2, 0x6, 0x0, 0x9, 0x0, 0x1, 0x9, 0xfffa, 0x7f]}, 0x1a) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x0, 0x9, [0x2, 0x6, 0x0, 0x9, 0x0, 0x1, 0x9, 0xfffa, 0x7f]}, 0x1a) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x7f, 0xa}}, './file0\x00'}) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={r2, 0x83b, 0x5, [0x8c9, 0x4, 0x7, 0x1, 0x81]}, 0x12) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={r2, 0x83b, 0x5, [0x8c9, 0x4, 0x7, 0x1, 0x81]}, 0x12) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000300)) write(r0, &(0x7f0000000340)="0b1fa731dfc611d9a728bbccf9b044cdf6fad5f77728ad710991f3b9bf12105c155199320e03916c87c9bb1d172862", 0x2f) r4 = inotify_init() ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000380)) (async) ioctl$XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000380)) r5 = pidfd_getfd(r3, r4, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r1, 0xe}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000440)={r6, 0x13, "7552c1b798d29eef9d2f34e4e3faf053e41f67"}, &(0x7f0000000480)=0x1b) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000440)={r6, 0x13, "7552c1b798d29eef9d2f34e4e3faf053e41f67"}, &(0x7f0000000480)=0x1b) getsockopt$inet_mreqsrc(r5, 0x0, 0x26, &(0x7f00000004c0)={@multicast2, @empty, @local}, &(0x7f0000000500)=0xc) syz_clone(0x1000, &(0x7f0000000540)="9b3b75cd6888d721407fe2e9bc6f020c8b4aa3ad8847422c95304050ff2784cbfeb5e4d565d0ba70a3b89059d5f863b7b0d84ebf5ca750eba97dd853a5ed3d16fac2ddeb910f33ed6aff75d55c66d4034155838fbc2f376b51b63b3d70c5fab81b5615a45fa0d302691c7e45f0b89ecb392ed021ce8ebf6fec4fa8d8d89ded392f75edca31ffaab1f5d48b7f9eecc9824fb3dbaacdf0740dd865b8ef90f39f35a81ebacb57fb5831a677f92c54026068ddf168dc9a9cdb031e00b46579637e5531a36244653cf5f2a4dc12129a476b8b83c6cebf3b2a4747721bf99a9e12ed38afa2ba39a7e7bcfff8b2b5", 0xeb, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="94d6e2c6543e2444e4f767112ae106e65af86f7bf304d4240bbcda803bb1752c98de320940e648bf5acddd1693ccf0079f5788825229efb6c1d2d25f7aa260a508acdf7901f8a132bbfef9690af6ac790836f8dd9657d6c3bf21bb48b657c2fa1abcb6e7bed8f20d8e3a92befd5549743a7b495cd3f5b1d0eed401ae") (async) syz_clone(0x1000, &(0x7f0000000540)="9b3b75cd6888d721407fe2e9bc6f020c8b4aa3ad8847422c95304050ff2784cbfeb5e4d565d0ba70a3b89059d5f863b7b0d84ebf5ca750eba97dd853a5ed3d16fac2ddeb910f33ed6aff75d55c66d4034155838fbc2f376b51b63b3d70c5fab81b5615a45fa0d302691c7e45f0b89ecb392ed021ce8ebf6fec4fa8d8d89ded392f75edca31ffaab1f5d48b7f9eecc9824fb3dbaacdf0740dd865b8ef90f39f35a81ebacb57fb5831a677f92c54026068ddf168dc9a9cdb031e00b46579637e5531a36244653cf5f2a4dc12129a476b8b83c6cebf3b2a4747721bf99a9e12ed38afa2ba39a7e7bcfff8b2b5", 0xeb, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="94d6e2c6543e2444e4f767112ae106e65af86f7bf304d4240bbcda803bb1752c98de320940e648bf5acddd1693ccf0079f5788825229efb6c1d2d25f7aa260a508acdf7901f8a132bbfef9690af6ac790836f8dd9657d6c3bf21bb48b657c2fa1abcb6e7bed8f20d8e3a92befd5549743a7b495cd3f5b1d0eed401ae") r7 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) setns(r7, 0x8000000) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000780)={{@align=0x5, {0x3, 0x5, 0x0, 0x7ff}}, {{[0x80000001, 0x6, 0x8000, 0x80]}, 0x0, 0x0, 0xffffffc1, 0x0, &(0x7f0000000740)=[{{@_ha_fsid={[0x7ff, 0x8001]}, {0x98c4, 0xffff, 0x7f, 0x5}}, 0xfffffffe, 0x0, '/\x00'}]}}) syz_clone(0xa02000, &(0x7f00000007c0)="e90133", 0x3, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="5cd3c98a7a699b08") (async) syz_clone(0xa02000, &(0x7f00000007c0)="e90133", 0x3, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="5cd3c98a7a699b08") r8 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000008c0)={r0, 0x0, 0x100000000, 0x8000}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x1010, r8, 0xa3a51000) io_setup(0xd, &(0x7f0000000900)) (async) io_setup(0xd, &(0x7f0000000900)) r9 = socket$pppl2tp(0x18, 0x1, 0x1) accept4$inet6(r3, &(0x7f0000000940)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000980)=0x1c, 0x80000) (async) r10 = accept4$inet6(r3, &(0x7f0000000940)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000980)=0x1c, 0x80000) connect$pppl2tp(r9, &(0x7f00000009c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x4, 0x4, 0x2, 0x3, {0xa, 0x4e21, 0x8382, @private0, 0x4}}}, 0x3a) mkdirat(r3, &(0x7f0000000a00)='./file0/file0\x00', 0x8) fcntl$dupfd(r7, 0x0, r7) (async) r11 = fcntl$dupfd(r7, 0x0, r7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000a40)={r2, 0x5}, 0x8) 320.302626ms ago: executing program 1 (id=589): ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b1", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0x10000) (async) ioctl$KDSKBLED(r3, 0x4b65, 0x10000) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) (async) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22903) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0xbf, 0xc0006, 0x0, 0x0, 0x0, 0x4a9e47b3, 0xffffff3e, 0x0, 0x6}) sendmsg$nl_route(r5, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10804940}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@newnexthop={0x18, 0x68, 0x200, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x3, 0x0, 0x2d}}, 0x18}, 0x1, 0x0, 0x0, 0x24000901}, 0x4000040) 319.323419ms ago: executing program 3 (id=590): prctl$PR_GET_THP_DISABLE(0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r1 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x1, 0x0}) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000380)) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf3f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {}, {0xc, 0xffff}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x50d0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0x0, 0xffff}, {0x300, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5638}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x2, 0x0, 0x20, @private0, @loopback, 0x700, 0x10, 0x6e2, 0xc26}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) r12 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r12, &(0x7f0000001100)='8086 29c0 ffffffff ffffffff 0 0 1', 0x21) 220.444449ms ago: executing program 2 (id=591): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x19000, 0x0, 0x5}, 0x20) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (fail_nth: 54) socket$l2tp6(0xa, 0x2, 0x73) 59.143507ms ago: executing program 2 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000a40)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x2c, r6, 0x304, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000, 0x66}}}}, [@NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c896}, 0x20008800) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001060000000203040506070800000c0002000600200086dd00000c0003"], 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000003a00010027bd700004000000010040000800ec0002"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x24008094) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "a5770535b37d61ea0ebe95c6006a5b09"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x1b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4002000}, 0x4000901) 0s ago: executing program 1 (id=593): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x22240, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000040000009e"]) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x8091) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) write(r3, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000000)='./gadget/ep1in-bulk\x00', 0x2, 0x24) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ity 0, space 0, times 1 [ 53.879453][ T5970] CPU: 0 UID: 0 PID: 5970 Comm: syz.1.32 Not tainted syzkaller #0 PREEMPT(full) [ 53.879478][ T5970] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.879486][ T5970] Call Trace: [ 53.879490][ T5970] [ 53.879495][ T5970] dump_stack_lvl+0x100/0x190 [ 53.879517][ T5970] should_fail_ex.cold+0x5/0xa [ 53.879533][ T5970] should_failslab+0xc2/0x120 [ 53.879578][ T5970] __kmalloc_noprof+0xfc/0x840 [ 53.879596][ T5970] ? nsim_fib_event_nb+0x661/0xe50 [ 53.879614][ T5970] nsim_fib_event_nb+0x661/0xe50 [ 53.879629][ T5970] ? lock_acquire+0x1d1/0x380 [ 53.879643][ T5970] ? atomic_notifier_call_chain+0x2f/0x1c0 [ 53.879661][ T5970] notifier_call_chain+0x99/0x3f0 [ 53.879679][ T5970] atomic_notifier_call_chain+0x71/0x1c0 [ 53.879696][ T5970] call_fib_notifiers+0x33/0x70 [ 53.879709][ T5970] fib6_add_rt2node+0x14e3/0x3df0 [ 53.879727][ T5970] ? rcu_is_watching+0x13/0xc0 [ 53.879742][ T5970] ? trace_kmem_cache_alloc+0xdd/0x100 [ 53.879757][ T5970] ? kmem_cache_alloc_noprof+0x2d5/0x6a0 [ 53.879770][ T5970] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 53.879794][ T5970] ? fib6_add+0x60e/0x1eb0 [ 53.879809][ T5970] fib6_add+0x60e/0x1eb0 [ 53.879827][ T5970] ? do_raw_spin_lock+0x128/0x260 [ 53.879841][ T5970] ? __pfx_fib6_add+0x10/0x10 [ 53.879856][ T5970] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 53.879870][ T5970] ? __asan_memcpy+0x3c/0x60 [ 53.879888][ T5970] ip6_route_add+0xf9/0x1d0 [ 53.879901][ T5970] addrconf_prefix_route+0x2fb/0x510 [ 53.879915][ T5970] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 53.879929][ T5970] ? __lock_acquire+0x4c5/0x1ec0 [ 53.879950][ T5970] addrconf_notify+0x1548/0x1ba0 [ 53.879964][ T5970] ? __pfx_addrconf_notify+0x10/0x10 [ 53.879975][ T5970] ? ip6mr_device_event+0x1c4/0x230 [ 53.879988][ T5970] notifier_call_chain+0x99/0x3f0 [ 53.880005][ T5970] call_netdevice_notifiers_info+0xbe/0x110 [ 53.880019][ T5970] __dev_notify_flags+0x22c/0x4b0 [ 53.880037][ T5970] ? __pfx___dev_notify_flags+0x10/0x10 [ 53.880055][ T5970] ? __pfx___dev_change_flags+0x10/0x10 [ 53.880071][ T5970] ? lock_acquire+0x1d1/0x380 [ 53.880081][ T5970] ? dev_ioctl+0x331/0x10e0 [ 53.880093][ T5970] netif_change_flags+0x108/0x160 [ 53.880111][ T5970] dev_change_flags+0xba/0x260 [ 53.880124][ T5970] dev_ifsioc+0x16a4/0x1fc0 [ 53.880135][ T5970] ? __pfx_dev_ifsioc+0x10/0x10 [ 53.880148][ T5970] ? __pfx___mutex_lock+0x10/0x10 [ 53.880162][ T5970] ? lock_acquire+0x1d1/0x380 [ 53.880174][ T5970] ? dev_load+0x8e/0x240 [ 53.880190][ T5970] ? dev_load+0x8e/0x240 [ 53.880209][ T5970] dev_ioctl+0x342/0x10e0 [ 53.880220][ T5970] sock_do_ioctl+0x1a0/0x280 [ 53.880233][ T5970] ? __pfx_sock_do_ioctl+0x10/0x10 [ 53.880245][ T5970] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 53.880259][ T5970] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 53.880275][ T5970] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 53.880294][ T5970] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 53.880314][ T5970] sock_ioctl+0x599/0x6b0 [ 53.880328][ T5970] ? __pfx_sock_ioctl+0x10/0x10 [ 53.880345][ T5970] ? selinux_file_ioctl+0x13b/0x290 [ 53.880361][ T5970] ? selinux_file_ioctl+0xb6/0x290 [ 53.880378][ T5970] ? __pfx_sock_ioctl+0x10/0x10 [ 53.880392][ T5970] __x64_sys_ioctl+0x18e/0x210 [ 53.880410][ T5970] do_syscall_64+0x123/0x790 [ 53.880423][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.880434][ T5970] RIP: 0033:0x7fdac699e159 [ 53.880444][ T5970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.880454][ T5970] RSP: 002b:00007fdac78d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.880464][ T5970] RAX: ffffffffffffffda RBX: 00007fdac6c25fa0 RCX: 00007fdac699e159 [ 53.880484][ T5970] RDX: 0000200000000600 RSI: 0000000000008914 RDI: 0000000000000004 [ 53.880490][ T5970] RBP: 00007fdac78d3090 R08: 0000000000000000 R09: 0000000000000000 [ 53.880496][ T5970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.880502][ T5970] R13: 00007fdac6c26038 R14: 00007fdac6c25fa0 R15: 00007fff01a219b8 [ 53.880515][ T5970] [ 53.921020][ T5812] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 54.081044][ T5812] usb 7-1: Using ep0 maxpacket: 8 [ 54.081850][ T5812] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 54.082741][ T5812] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 54.082766][ T5812] usb 7-1: config 179 has no interface number 0 [ 54.082798][ T5812] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 54.082821][ T5812] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 54.082840][ T5812] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 54.082860][ T5812] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 54.082879][ T5812] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 54.082937][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.086030][ T5966] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.140948][ T67] Bluetooth: hci2: command tx timeout [ 54.140981][ T5734] Bluetooth: hci3: command tx timeout [ 54.298800][ T5812] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input6 [ 54.345102][ T5980] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 54.345102][ T5980] [ 54.352352][ T5980] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 54.353377][ T5980] CIFS: Attempting to mount //127.0.0.1/share [ 54.457741][ T5984] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.501977][ T5812] usb 7-1: USB disconnect, device number 2 [ 54.502069][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 54.502090][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 54.550899][ T5734] Bluetooth: hci0: command tx timeout [ 54.635572][ T5988] SELinux: unknown common  [ 54.635669][ T5988] SELinux: invalid class [ 54.635897][ T5988] SELinux: failed to load policy [ 55.173594][ T5980] CIFS: VFS: cifs_mount failed w/return code = -512 [ 55.229329][ T6013] openvswitch: netlink: Flow key attr not present in new flow. [ 55.251299][ T5832] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 55.422081][ T5832] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 55.423526][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 55.423590][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 55.429393][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.429416][ T5832] usb 8-1: Product: syz [ 55.429428][ T5832] usb 8-1: Manufacturer: syz [ 55.429440][ T5832] usb 8-1: SerialNumber: syz [ 55.436652][ T5832] usb 8-1: config 0 descriptor?? [ 55.449644][ T5832] hub 8-1:0.0: bad descriptor, ignoring hub [ 55.449658][ T5832] hub 8-1:0.0: probe with driver hub failed with error -5 [ 55.455367][ T5832] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 55.581240][ T5734] Bluetooth: hci1: command tx timeout [ 55.793820][ T5812] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.941954][ T5812] usb 6-1: Using ep0 maxpacket: 8 [ 55.943419][ T5812] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 55.945831][ T5812] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 55.945846][ T5812] usb 6-1: config 179 has no interface number 0 [ 55.945865][ T5812] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 55.945879][ T5812] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 55.945892][ T5812] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 55.945905][ T5812] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 55.945918][ T5812] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 55.945937][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.948927][ T6032] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 56.044815][ T6076] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.161720][ T5812] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input8 [ 56.220928][ T5734] Bluetooth: hci3: command tx timeout [ 56.231457][ T5734] Bluetooth: hci2: command tx timeout [ 56.251872][ T5734] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 56.583522][ T6107] __nla_validate_parse: 4 callbacks suppressed [ 56.583624][ T6107] netlink: 48 bytes leftover after parsing attributes in process `syz.2.75'. [ 56.684090][ T6114] FAULT_INJECTION: forcing a failure. [ 56.684090][ T6114] name failslab, interval 1, probability 0, space 0, times 0 [ 56.684159][ T6114] CPU: 3 UID: 0 PID: 6114 Comm: syz.3.79 Not tainted syzkaller #0 PREEMPT(full) [ 56.684194][ T6114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 56.684206][ T6114] Call Trace: [ 56.684212][ T6114] [ 56.684220][ T6114] dump_stack_lvl+0x100/0x190 [ 56.684258][ T6114] should_fail_ex.cold+0x5/0xa [ 56.684284][ T6114] should_failslab+0xc2/0x120 [ 56.684307][ T6114] __kmalloc_cache_noprof+0x91/0x6d0 [ 56.684336][ T6114] ? ipv6_add_addr+0x536/0x1fb0 [ 56.684369][ T6114] ipv6_add_addr+0x536/0x1fb0 [ 56.684395][ T6114] ? mark_held_locks+0x40/0x70 [ 56.684414][ T6114] ? __local_bh_enable_ip+0xa5/0x120 [ 56.684435][ T6114] ? lockdep_hardirqs_on+0x7d/0x110 [ 56.684460][ T6114] ? __local_bh_enable_ip+0x71/0x120 [ 56.684484][ T6114] ? __pfx_ipv6_add_addr+0x10/0x10 [ 56.684509][ T6114] ? __pfx_sha1_blocks_ni+0x10/0x10 [ 56.684565][ T6114] ? lock_acquire+0x1d1/0x380 [ 56.684586][ T6114] ? do_raw_spin_lock+0x128/0x260 [ 56.684615][ T6114] ? addrconf_add_linklocal+0x2a5/0x500 [ 56.684643][ T6114] addrconf_add_linklocal+0x2a5/0x500 [ 56.684671][ T6114] ? __local_bh_enable_ip+0xa5/0x120 [ 56.684692][ T6114] ? __pfx_addrconf_add_linklocal+0x10/0x10 [ 56.684720][ T6114] ? ipv6_generate_stable_address+0x306/0x730 [ 56.684743][ T6114] ? __local_bh_enable_ip+0xa5/0x120 [ 56.684775][ T6114] addrconf_addr_gen+0x338/0x3b0 [ 56.684805][ T6114] ? __pfx_addrconf_addr_gen+0x10/0x10 [ 56.684843][ T6114] ? addrconf_init_auto_addrs+0x1cb/0x780 [ 56.684871][ T6114] addrconf_init_auto_addrs+0x1cb/0x780 [ 56.684902][ T6114] addrconf_notify+0x10af/0x1ba0 [ 56.684934][ T6114] ? __pfx_addrconf_notify+0x10/0x10 [ 56.684956][ T6114] ? ip6mr_device_event+0x1c4/0x230 [ 56.684981][ T6114] notifier_call_chain+0x99/0x3f0 [ 56.685014][ T6114] call_netdevice_notifiers_info+0xbe/0x110 [ 56.685044][ T6114] __dev_notify_flags+0x22c/0x4b0 [ 56.685097][ T6114] ? __pfx___dev_notify_flags+0x10/0x10 [ 56.685133][ T6114] ? __pfx___dev_change_flags+0x10/0x10 [ 56.685164][ T6114] ? lock_acquire+0x1d1/0x380 [ 56.685183][ T6114] ? dev_ioctl+0x331/0x10e0 [ 56.685207][ T6114] netif_change_flags+0x108/0x160 [ 56.685247][ T6114] dev_change_flags+0xba/0x260 [ 56.685271][ T6114] dev_ifsioc+0x16a4/0x1fc0 [ 56.685293][ T6114] ? __pfx_dev_ifsioc+0x10/0x10 [ 56.685311][ T6114] ? __pfx___mutex_lock+0x10/0x10 [ 56.685339][ T6114] ? lock_acquire+0x1d1/0x380 [ 56.685363][ T6114] ? dev_load+0x8e/0x240 [ 56.685390][ T6114] ? dev_load+0x8e/0x240 [ 56.685427][ T6114] dev_ioctl+0x342/0x10e0 [ 56.685449][ T6114] sock_do_ioctl+0x1a0/0x280 [ 56.685475][ T6114] ? __pfx_sock_do_ioctl+0x10/0x10 [ 56.685498][ T6114] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.685526][ T6114] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 56.685554][ T6114] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 56.685588][ T6114] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 56.685624][ T6114] sock_ioctl+0x599/0x6b0 [ 56.685651][ T6114] ? __pfx_sock_ioctl+0x10/0x10 [ 56.685683][ T6114] ? selinux_file_ioctl+0x13b/0x290 [ 56.685713][ T6114] ? selinux_file_ioctl+0xb6/0x290 [ 56.685745][ T6114] ? __pfx_sock_ioctl+0x10/0x10 [ 56.685772][ T6114] __x64_sys_ioctl+0x18e/0x210 [ 56.685804][ T6114] do_syscall_64+0x123/0x790 [ 56.685828][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.685849][ T6114] RIP: 0033:0x7f8da639e159 [ 56.685865][ T6114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.685883][ T6114] RSP: 002b:00007f8da7184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.685904][ T6114] RAX: ffffffffffffffda RBX: 00007f8da6625fa0 RCX: 00007f8da639e159 [ 56.685916][ T6114] RDX: 0000200000000600 RSI: 0000000000008914 RDI: 0000000000000004 [ 56.685928][ T6114] RBP: 00007f8da7184090 R08: 0000000000000000 R09: 0000000000000000 [ 56.685940][ T6114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 56.685952][ T6114] R13: 00007f8da6626038 R14: 00007f8da6625fa0 R15: 00007ffc98044a88 [ 56.685979][ T6114] [ 57.050562][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.052025][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.052037][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.055240][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.055422][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.055430][ T6136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.86'. [ 57.137072][ T6143] netlink: 'syz.3.87': attribute type 1 has an invalid length. [ 57.137124][ T6143] netlink: 224 bytes leftover after parsing attributes in process `syz.3.87'. [ 57.198900][ T6152] FAULT_INJECTION: forcing a failure. [ 57.198900][ T6152] name failslab, interval 1, probability 0, space 0, times 0 [ 57.198953][ T6152] CPU: 2 UID: 0 PID: 6152 Comm: syz.3.91 Not tainted syzkaller #0 PREEMPT(full) [ 57.198988][ T6152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.198996][ T6152] Call Trace: [ 57.199000][ T6152] [ 57.199005][ T6152] dump_stack_lvl+0x100/0x190 [ 57.199027][ T6152] should_fail_ex.cold+0x5/0xa [ 57.199043][ T6152] should_failslab+0xc2/0x120 [ 57.199057][ T6152] __kmalloc_cache_noprof+0x91/0x6d0 [ 57.199088][ T6152] ? ipv6_add_addr+0x536/0x1fb0 [ 57.199106][ T6152] ipv6_add_addr+0x536/0x1fb0 [ 57.199120][ T6152] ? mark_held_locks+0x40/0x70 [ 57.199132][ T6152] ? __local_bh_enable_ip+0xa5/0x120 [ 57.199149][ T6152] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.199161][ T6152] ? __local_bh_enable_ip+0x71/0x120 [ 57.199173][ T6152] ? __pfx_ipv6_add_addr+0x10/0x10 [ 57.199186][ T6152] ? __pfx_sha1_blocks_ni+0x10/0x10 [ 57.199205][ T6152] ? lock_acquire+0x1d1/0x380 [ 57.199216][ T6152] ? do_raw_spin_lock+0x128/0x260 [ 57.199231][ T6152] ? addrconf_add_linklocal+0x2a5/0x500 [ 57.199246][ T6152] addrconf_add_linklocal+0x2a5/0x500 [ 57.199261][ T6152] ? __local_bh_enable_ip+0xa5/0x120 [ 57.199272][ T6152] ? __pfx_addrconf_add_linklocal+0x10/0x10 [ 57.199287][ T6152] ? ipv6_generate_stable_address+0x306/0x730 [ 57.199299][ T6152] ? __local_bh_enable_ip+0xa5/0x120 [ 57.199315][ T6152] addrconf_addr_gen+0x338/0x3b0 [ 57.199331][ T6152] ? __pfx_addrconf_addr_gen+0x10/0x10 [ 57.199350][ T6152] ? addrconf_init_auto_addrs+0x1cb/0x780 [ 57.199365][ T6152] addrconf_init_auto_addrs+0x1cb/0x780 [ 57.199381][ T6152] addrconf_notify+0x10af/0x1ba0 [ 57.199395][ T6152] ? __pfx_addrconf_notify+0x10/0x10 [ 57.199406][ T6152] ? ip6mr_device_event+0x1c4/0x230 [ 57.199420][ T6152] notifier_call_chain+0x99/0x3f0 [ 57.199438][ T6152] call_netdevice_notifiers_info+0xbe/0x110 [ 57.199452][ T6152] __dev_notify_flags+0x22c/0x4b0 [ 57.199469][ T6152] ? __pfx___dev_notify_flags+0x10/0x10 [ 57.199487][ T6152] ? __pfx___dev_change_flags+0x10/0x10 [ 57.199504][ T6152] ? lock_acquire+0x1d1/0x380 [ 57.199514][ T6152] ? dev_ioctl+0x331/0x10e0 [ 57.199548][ T6152] netif_change_flags+0x108/0x160 [ 57.199567][ T6152] dev_change_flags+0xba/0x260 [ 57.199580][ T6152] dev_ifsioc+0x16a4/0x1fc0 [ 57.199591][ T6152] ? __pfx_dev_ifsioc+0x10/0x10 [ 57.199600][ T6152] ? __pfx___mutex_lock+0x10/0x10 [ 57.199615][ T6152] ? lock_acquire+0x1d1/0x380 [ 57.199626][ T6152] ? dev_load+0x8e/0x240 [ 57.199641][ T6152] ? dev_load+0x8e/0x240 [ 57.199660][ T6152] dev_ioctl+0x342/0x10e0 [ 57.199671][ T6152] sock_do_ioctl+0x1a0/0x280 [ 57.199685][ T6152] ? __pfx_sock_do_ioctl+0x10/0x10 [ 57.199697][ T6152] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.199712][ T6152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 57.199727][ T6152] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 57.199746][ T6152] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 57.199766][ T6152] sock_ioctl+0x599/0x6b0 [ 57.199780][ T6152] ? __pfx_sock_ioctl+0x10/0x10 [ 57.199797][ T6152] ? selinux_file_ioctl+0x13b/0x290 [ 57.199812][ T6152] ? selinux_file_ioctl+0xb6/0x290 [ 57.199829][ T6152] ? __pfx_sock_ioctl+0x10/0x10 [ 57.199844][ T6152] __x64_sys_ioctl+0x18e/0x210 [ 57.199861][ T6152] do_syscall_64+0x123/0x790 [ 57.199874][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.199886][ T6152] RIP: 0033:0x7f8da639e159 [ 57.199895][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.199905][ T6152] RSP: 002b:00007f8da7184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.199916][ T6152] RAX: ffffffffffffffda RBX: 00007f8da6625fa0 RCX: 00007f8da639e159 [ 57.199923][ T6152] RDX: 0000200000000600 RSI: 0000000000008914 RDI: 0000000000000004 [ 57.199929][ T6152] RBP: 00007f8da7184090 R08: 0000000000000000 R09: 0000000000000000 [ 57.199935][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.199941][ T6152] R13: 00007f8da6626038 R14: 00007f8da6625fa0 R15: 00007ffc98044a88 [ 57.199954][ T6152] [ 57.271794][ T61] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 57.293455][ T6155] ip6gretap0: Device is already in use. [ 57.451490][ T61] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 57.458530][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 57.458670][ T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 57.460956][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.460971][ T61] usb 7-1: Product: syz [ 57.460979][ T61] usb 7-1: Manufacturer: syz [ 57.460987][ T61] usb 7-1: SerialNumber: syz [ 57.467264][ T61] usb 7-1: config 0 descriptor?? [ 57.471982][ T61] hub 7-1:0.0: bad descriptor, ignoring hub [ 57.471995][ T61] hub 7-1:0.0: probe with driver hub failed with error -5 [ 57.484072][ T61] input: syz syz as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9 [ 57.559776][ T6170] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 57.764128][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 57.764251][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 58.550411][ T952] usb 6-1: USB disconnect, device number 2 [ 58.550514][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 58.550548][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 58.739457][ T43] kauditd_printk_skb: 67 callbacks suppressed [ 58.739549][ T43] audit: type=1400 audit(1788328913.449:366): avc: denied { create } for pid=6192 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 58.739858][ T43] audit: type=1400 audit(1788328913.449:367): avc: denied { mount } for pid=6192 comm="syz.1.106" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.743162][ T43] audit: type=1400 audit(1788328913.459:368): avc: denied { bind } for pid=6192 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.743627][ T43] audit: type=1400 audit(1788328913.459:369): avc: denied { write } for pid=6192 comm="syz.1.106" path="socket:[8742]" dev="sockfs" ino=8742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.743872][ T6193] Bluetooth: MGMT ver 1.23 [ 58.758865][ T43] audit: type=1400 audit(1788328913.469:370): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.800594][ T6200] FAULT_INJECTION: forcing a failure. [ 58.800594][ T6200] name failslab, interval 1, probability 0, space 0, times 0 [ 58.800678][ T6200] CPU: 0 UID: 0 PID: 6200 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 58.800728][ T6200] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.800739][ T6200] Call Trace: [ 58.800746][ T6200] [ 58.800754][ T6200] dump_stack_lvl+0x100/0x190 [ 58.800785][ T6200] should_fail_ex.cold+0x5/0xa [ 58.800809][ T6200] should_failslab+0xc2/0x120 [ 58.800830][ T6200] __kmalloc_flags_noprof+0x122/0x8e0 [ 58.800854][ T6200] ? __lock_acquire+0x4c5/0x1ec0 [ 58.800873][ T6200] ? alloc_slab_obj_exts+0x6a/0x170 [ 58.800901][ T6200] alloc_slab_obj_exts+0x6a/0x170 [ 58.800927][ T6200] __memcg_slab_post_alloc_hook+0x40a/0x1270 [ 58.800957][ T6200] ? __kmalloc_cache_noprof+0x1e7/0x6d0 [ 58.800981][ T6200] ? kasan_unpoison+0x27/0x60 [ 58.801010][ T6200] __kmalloc_cache_noprof+0x52a/0x6d0 [ 58.801034][ T6200] ? ipv6_add_addr+0x536/0x1fb0 [ 58.801062][ T6200] ipv6_add_addr+0x536/0x1fb0 [ 58.801083][ T6200] ? mark_held_locks+0x40/0x70 [ 58.801100][ T6200] ? __local_bh_enable_ip+0xa5/0x120 [ 58.801118][ T6200] ? lockdep_hardirqs_on+0x7d/0x110 [ 58.801138][ T6200] ? __local_bh_enable_ip+0x71/0x120 [ 58.801158][ T6200] ? __pfx_ipv6_add_addr+0x10/0x10 [ 58.801179][ T6200] ? __pfx_sha1_blocks_ni+0x10/0x10 [ 58.801206][ T6200] ? lock_acquire+0x1d1/0x380 [ 58.801223][ T6200] ? do_raw_spin_lock+0x128/0x260 [ 58.801245][ T6200] ? addrconf_add_linklocal+0x2a5/0x500 [ 58.801267][ T6200] addrconf_add_linklocal+0x2a5/0x500 [ 58.801289][ T6200] ? __local_bh_enable_ip+0xa5/0x120 [ 58.801306][ T6200] ? __pfx_addrconf_add_linklocal+0x10/0x10 [ 58.801327][ T6200] ? ipv6_generate_stable_address+0x306/0x730 [ 58.801345][ T6200] ? __local_bh_enable_ip+0xa5/0x120 [ 58.801370][ T6200] addrconf_addr_gen+0x338/0x3b0 [ 58.801395][ T6200] ? __pfx_addrconf_addr_gen+0x10/0x10 [ 58.801425][ T6200] ? addrconf_init_auto_addrs+0x1cb/0x780 [ 58.801447][ T6200] addrconf_init_auto_addrs+0x1cb/0x780 [ 58.801470][ T6200] addrconf_notify+0x10af/0x1ba0 [ 58.801490][ T6200] ? __pfx_addrconf_notify+0x10/0x10 [ 58.801508][ T6200] ? ip6mr_device_event+0x1c4/0x230 [ 58.801528][ T6200] notifier_call_chain+0x99/0x3f0 [ 58.801556][ T6200] call_netdevice_notifiers_info+0xbe/0x110 [ 58.801576][ T6200] __dev_notify_flags+0x22c/0x4b0 [ 58.801603][ T6200] ? __pfx___dev_notify_flags+0x10/0x10 [ 58.801637][ T6200] ? __pfx___dev_change_flags+0x10/0x10 [ 58.801662][ T6200] ? lock_acquire+0x1d1/0x380 [ 58.801677][ T6200] ? dev_ioctl+0x331/0x10e0 [ 58.801698][ T6200] netif_change_flags+0x108/0x160 [ 58.801725][ T6200] dev_change_flags+0xba/0x260 [ 58.801744][ T6200] dev_ifsioc+0x16a4/0x1fc0 [ 58.801763][ T6200] ? __pfx_dev_ifsioc+0x10/0x10 [ 58.801777][ T6200] ? __pfx___mutex_lock+0x10/0x10 [ 58.801799][ T6200] ? lock_acquire+0x1d1/0x380 [ 58.801818][ T6200] ? dev_load+0x8e/0x240 [ 58.801840][ T6200] ? dev_load+0x8e/0x240 [ 58.801869][ T6200] dev_ioctl+0x342/0x10e0 [ 58.801890][ T6200] sock_do_ioctl+0x1a0/0x280 [ 58.801911][ T6200] ? __pfx_sock_do_ioctl+0x10/0x10 [ 58.801930][ T6200] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.801953][ T6200] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 58.801975][ T6200] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 58.802002][ T6200] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 58.802031][ T6200] sock_ioctl+0x599/0x6b0 [ 58.802053][ T6200] ? __pfx_sock_ioctl+0x10/0x10 [ 58.802079][ T6200] ? selinux_file_ioctl+0x13b/0x290 [ 58.802102][ T6200] ? selinux_file_ioctl+0xb6/0x290 [ 58.802127][ T6200] ? __pfx_sock_ioctl+0x10/0x10 [ 58.802148][ T6200] __x64_sys_ioctl+0x18e/0x210 [ 58.802174][ T6200] do_syscall_64+0x123/0x790 [ 58.802195][ T6200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.802212][ T6200] RIP: 0033:0x7fdac699e159 [ 58.802227][ T6200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.802242][ T6200] RSP: 002b:00007fdac78d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 58.802258][ T6200] RAX: ffffffffffffffda RBX: 00007fdac6c25fa0 RCX: 00007fdac699e159 [ 58.802268][ T6200] RDX: 0000200000000600 RSI: 0000000000008914 RDI: 0000000000000004 [ 58.802278][ T6200] RBP: 00007fdac78d3090 R08: 0000000000000000 R09: 0000000000000000 [ 58.802287][ T6200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 58.802297][ T6200] R13: 00007fdac6c26038 R14: 00007fdac6c25fa0 R15: 00007fff01a219b8 [ 58.802319][ T6200] [ 58.987603][ T6204] syzkaller0: entered promiscuous mode [ 58.987654][ T6204] syzkaller0: entered allmulticast mode [ 58.999767][ T43] audit: type=1400 audit(1788328913.709:371): avc: denied { create } for pid=6203 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.000557][ T43] audit: type=1400 audit(1788328913.709:372): avc: denied { ioctl } for pid=6203 comm="syz.3.109" path="socket:[11804]" dev="sockfs" ino=11804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.002224][ T6204] process 'syz.3.109' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 59.003620][ T43] audit: type=1400 audit(1788328913.719:373): avc: denied { write } for pid=6203 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.003645][ T43] audit: type=1400 audit(1788328913.719:374): avc: denied { execute_no_trans } for pid=6203 comm="syz.3.109" path="/32/file1" dev="tmpfs" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.057819][ T43] audit: type=1400 audit(1788328913.769:375): avc: denied { ioctl } for pid=6207 comm="syz.1.111" path="socket:[10953]" dev="sockfs" ino=10953 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 59.057914][ T6208] syzkaller1: entered promiscuous mode [ 59.057948][ T6208] syzkaller1: entered allmulticast mode [ 59.347063][ T6215] FAULT_INJECTION: forcing a failure. [ 59.347063][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 59.347145][ T6215] CPU: 1 UID: 0 PID: 6215 Comm: syz.3.114 Not tainted syzkaller #0 PREEMPT(full) [ 59.347169][ T6215] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.347177][ T6215] Call Trace: [ 59.347181][ T6215] [ 59.347186][ T6215] dump_stack_lvl+0x100/0x190 [ 59.347208][ T6215] should_fail_ex.cold+0x5/0xa [ 59.347230][ T6215] should_failslab+0xc2/0x120 [ 59.347249][ T6215] __kmalloc_flags_noprof+0x122/0x8e0 [ 59.347275][ T6215] ? __lock_acquire+0x4c5/0x1ec0 [ 59.347293][ T6215] ? alloc_slab_obj_exts+0x6a/0x170 [ 59.347320][ T6215] alloc_slab_obj_exts+0x6a/0x170 [ 59.347342][ T6215] __memcg_slab_post_alloc_hook+0x40a/0x1270 [ 59.347360][ T6215] ? __kmalloc_noprof+0x255/0x840 [ 59.347371][ T6215] ? kasan_unpoison+0x27/0x60 [ 59.347392][ T6215] __kmalloc_noprof+0x653/0x840 [ 59.347402][ T6215] ? __register_sysctl_table+0xac/0x1650 [ 59.347425][ T6215] __register_sysctl_table+0xac/0x1650 [ 59.347445][ T6215] ? trace_kmalloc+0xeb/0x110 [ 59.347464][ T6215] ? __kasan_kmalloc+0xaa/0xb0 [ 59.347476][ T6215] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 59.347488][ T6215] ? __pfx___register_sysctl_table+0x10/0x10 [ 59.347502][ T6215] ? setup_mq_sysctls+0x5d/0x240 [ 59.347554][ T6215] ? __asan_memcpy+0x3c/0x60 [ 59.347577][ T6215] setup_mq_sysctls+0x124/0x240 [ 59.347598][ T6215] copy_ipcs+0x524/0x7e0 [ 59.347621][ T6215] create_new_namespaces+0x20a/0xac0 [ 59.347640][ T6215] ? security_capable+0x80/0x260 [ 59.347666][ T6215] unshare_nsproxy_namespaces+0xf2/0x220 [ 59.347687][ T6215] ksys_unshare+0x4a2/0xa70 [ 59.347700][ T6215] ? __pfx_ksys_unshare+0x10/0x10 [ 59.347724][ T6215] __x64_sys_unshare+0x31/0x40 [ 59.347743][ T6215] do_syscall_64+0x123/0x790 [ 59.347765][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.347783][ T6215] RIP: 0033:0x7f8da639e159 [ 59.347796][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.347809][ T6215] RSP: 002b:00007f8da7184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 59.347826][ T6215] RAX: ffffffffffffffda RBX: 00007f8da6625fa0 RCX: 00007f8da639e159 [ 59.347838][ T6215] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000600 [ 59.347849][ T6215] RBP: 00007f8da6435024 R08: 0000000000000000 R09: 0000000000000000 [ 59.347860][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.347870][ T6215] R13: 00007f8da6626038 R14: 00007f8da6625fa0 R15: 00007ffc98044a88 [ 59.347893][ T6215] [ 59.384435][ T5832] usb 8-1: USB disconnect, device number 3 [ 59.663487][ T6227] FAULT_INJECTION: forcing a failure. [ 59.663487][ T6227] name failslab, interval 1, probability 0, space 0, times 0 [ 59.669062][ T6227] CPU: 2 UID: 0 PID: 6227 Comm: syz.0.118 Not tainted syzkaller #0 PREEMPT(full) [ 59.669103][ T6227] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.669114][ T6227] Call Trace: [ 59.669121][ T6227] [ 59.669133][ T6227] dump_stack_lvl+0x100/0x190 [ 59.669171][ T6227] should_fail_ex.cold+0x5/0xa [ 59.669200][ T6227] should_failslab+0xc2/0x120 [ 59.669222][ T6227] __kmalloc_noprof+0xfc/0x840 [ 59.669241][ T6227] ? fib6_info_alloc+0x40/0x160 [ 59.669271][ T6227] fib6_info_alloc+0x40/0x160 [ 59.669296][ T6227] ip6_route_info_create+0x14c/0xad0 [ 59.669321][ T6227] ? addrconf_prefix_route+0x13e/0x510 [ 59.669347][ T6227] ip6_route_add+0x4b/0x1d0 [ 59.669369][ T6227] addrconf_prefix_route+0x2fb/0x510 [ 59.669391][ T6227] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 59.669412][ T6227] ? atomic_notifier_call_chain+0xa8/0x1c0 [ 59.669458][ T6227] ? lock_acquire+0x1d1/0x380 [ 59.669483][ T6227] ? do_raw_spin_lock+0x128/0x260 [ 59.669507][ T6227] addrconf_add_linklocal+0x329/0x500 [ 59.669533][ T6227] ? __local_bh_enable_ip+0xa5/0x120 [ 59.669553][ T6227] ? __pfx_addrconf_add_linklocal+0x10/0x10 [ 59.669578][ T6227] ? ipv6_generate_stable_address+0x306/0x730 [ 59.669597][ T6227] ? __local_bh_enable_ip+0xa5/0x120 [ 59.669624][ T6227] addrconf_addr_gen+0x338/0x3b0 [ 59.669651][ T6227] ? __pfx_addrconf_addr_gen+0x10/0x10 [ 59.669683][ T6227] ? addrconf_init_auto_addrs+0x1cb/0x780 [ 59.669705][ T6227] addrconf_init_auto_addrs+0x1cb/0x780 [ 59.669730][ T6227] addrconf_notify+0x10af/0x1ba0 [ 59.669752][ T6227] ? __pfx_addrconf_notify+0x10/0x10 [ 59.669774][ T6227] ? ip6mr_device_event+0x1c4/0x230 [ 59.669797][ T6227] notifier_call_chain+0x99/0x3f0 [ 59.669828][ T6227] call_netdevice_notifiers_info+0xbe/0x110 [ 59.669853][ T6227] __dev_notify_flags+0x22c/0x4b0 [ 59.669884][ T6227] ? __pfx___dev_notify_flags+0x10/0x10 [ 59.669913][ T6227] ? __pfx___dev_change_flags+0x10/0x10 [ 59.669939][ T6227] ? lock_acquire+0x1d1/0x380 [ 59.669956][ T6227] ? dev_ioctl+0x331/0x10e0 [ 59.669977][ T6227] netif_change_flags+0x108/0x160 [ 59.670008][ T6227] dev_change_flags+0xba/0x260 [ 59.670031][ T6227] dev_ifsioc+0x16a4/0x1fc0 [ 59.670050][ T6227] ? __pfx_dev_ifsioc+0x10/0x10 [ 59.670065][ T6227] ? __pfx___mutex_lock+0x10/0x10 [ 59.670113][ T6227] ? lock_acquire+0x1d1/0x380 [ 59.670136][ T6227] ? dev_load+0x8e/0x240 [ 59.670174][ T6227] ? dev_load+0x8e/0x240 [ 59.670210][ T6227] dev_ioctl+0x342/0x10e0 [ 59.670232][ T6227] sock_do_ioctl+0x1a0/0x280 [ 59.670260][ T6227] ? __pfx_sock_do_ioctl+0x10/0x10 [ 59.670283][ T6227] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.670310][ T6227] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 59.670338][ T6227] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 59.670373][ T6227] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 59.670408][ T6227] sock_ioctl+0x599/0x6b0 [ 59.670435][ T6227] ? __pfx_sock_ioctl+0x10/0x10 [ 59.670468][ T6227] ? selinux_file_ioctl+0x13b/0x290 [ 59.670497][ T6227] ? selinux_file_ioctl+0xb6/0x290 [ 59.670529][ T6227] ? __pfx_sock_ioctl+0x10/0x10 [ 59.670557][ T6227] __x64_sys_ioctl+0x18e/0x210 [ 59.670588][ T6227] do_syscall_64+0x123/0x790 [ 59.670615][ T6227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.670635][ T6227] RIP: 0033:0x7f9a4899e159 [ 59.670652][ T6227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.670670][ T6227] RSP: 002b:00007f9a497ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.670689][ T6227] RAX: ffffffffffffffda RBX: 00007f9a48c25fa0 RCX: 00007f9a4899e159 [ 59.670702][ T6227] RDX: 0000200000000600 RSI: 0000000000008914 RDI: 0000000000000004 [ 59.670714][ T6227] RBP: 00007f9a497ff090 R08: 0000000000000000 R09: 0000000000000000 [ 59.670726][ T6227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.670736][ T6227] R13: 00007f9a48c26038 R14: 00007f9a48c25fa0 R15: 00007ffe89a185e8 [ 59.670762][ T6227] [ 60.051415][ T6252] FAULT_INJECTION: forcing a failure. [ 60.051415][ T6252] name failslab, interval 1, probability 0, space 0, times 0 [ 60.051493][ T6252] CPU: 0 UID: 0 PID: 6252 Comm: syz.0.129 Not tainted syzkaller #0 PREEMPT(full) [ 60.051541][ T6252] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 60.051550][ T6252] Call Trace: [ 60.051555][ T6252] [ 60.051560][ T6252] dump_stack_lvl+0x100/0x190 [ 60.051583][ T6252] should_fail_ex.cold+0x5/0xa [ 60.051601][ T6252] should_failslab+0xc2/0x120 [ 60.051631][ T6252] __kmalloc_noprof+0xfc/0x840 [ 60.051645][ T6252] ? fib6_info_alloc+0x40/0x160 [ 60.051665][ T6252] fib6_info_alloc+0x40/0x160 [ 60.051683][ T6252] ip6_route_info_create+0x14c/0xad0 [ 60.051700][ T6252] ? addrconf_prefix_route+0x13e/0x510 [ 60.051717][ T6252] ip6_route_add+0x4b/0x1d0 [ 60.051732][ T6252] addrconf_prefix_route+0x2fb/0x510 [ 60.051748][ T6252] ? __pfx_addrconf_prefix_route+0x10/0x10 [ 60.051764][ T6252] ? atomic_notifier_call_chain+0xa8/0x1c0 [ 60.051792][ T6252] ? lock_acquire+0x1d1/0x380 [ 60.051806][ T6252] ? do_raw_spin_lock+0x128/0x260 [ 60.051823][ T6252] addrconf_add_linklocal+0x329/0x500 [ 60.051841][ T6252] ? __local_bh_enable_ip+0xa5/0x120 [ 60.051855][ T6252] ? __pfx_addrconf_add_linklocal+0x10/0x10 [ 60.051873][ T6252] ? ipv6_generate_stable_address+0x306/0x730 [ 60.051887][ T6252] ? __local_bh_enable_ip+0xa5/0x120 [ 60.051906][ T6252] addrconf_addr_gen+0x338/0x3b0 [ 60.051925][ T6252] ? __pfx_addrconf_addr_gen+0x10/0x10 [ 60.051947][ T6252] ? addrconf_init_auto_addrs+0x1cb/0x780 [ 60.051965][ T6252] addrconf_init_auto_addrs+0x1cb/0x780 [ 60.051984][ T6252] addrconf_notify+0x10af/0x1ba0 [ 60.051999][ T6252] ? __pfx_addrconf_notify+0x10/0x10 [ 60.052013][ T6252] ? ip6mr_device_event+0x1c4/0x230 [ 60.052028][ T6252] notifier_call_chain+0x99/0x3f0 [ 60.052048][ T6252] call_netdevice_notifiers_info+0xbe/0x110 [ 60.052065][ T6252] __dev_notify_flags+0x22c/0x4b0 [ 60.052085][ T6252] ? __pfx___dev_notify_flags+0x10/0x10 [ 60.052106][ T6252] ? __pfx___dev_change_flags+0x10/0x10 [ 60.052125][ T6252] ? lock_acquire+0x1d1/0x380 [ 60.052137][ T6252] ? dev_ioctl+0x331/0x10e0 [ 60.052152][ T6252] netif_change_flags+0x108/0x160 [ 60.052172][ T6252] dev_change_flags+0xba/0x260 [ 60.052187][ T6252] dev_ifsioc+0x16a4/0x1fc0 [ 60.052200][ T6252] ? __pfx_dev_ifsioc+0x10/0x10 [ 60.052225][ T6252] ? __pfx___mutex_lock+0x10/0x10 [ 60.052249][ T6252] ? lock_acquire+0x1d1/0x380 [ 60.052263][ T6252] ? dev_load+0x8e/0x240 [ 60.052280][ T6252] ? dev_load+0x8e/0x240 [ 60.052302][ T6252] dev_ioctl+0x342/0x10e0 [ 60.052315][ T6252] sock_do_ioctl+0x1a0/0x280 [ 60.052331][ T6252] ? __pfx_sock_do_ioctl+0x10/0x10 [ 60.052345][ T6252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 60.052362][ T6252] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 60.052380][ T6252] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 60.052403][ T6252] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 60.052426][ T6252] sock_ioctl+0x599/0x6b0 [ 60.052443][ T6252] ? __pfx_sock_ioctl+0x10/0x10 [ 60.052463][ T6252] ? selinux_file_ioctl+0x13b/0x290 [ 60.052481][ T6252] ? selinux_file_ioctl+0xb6/0x290 [ 60.052501][ T6252] ? __pfx_sock_ioctl+0x10/0x10 [ 60.052518][ T6252] __x64_sys_ioctl+0x18e/0x210 [ 60.052538][ T6252] do_syscall_64+0x123/0x790 [ 60.052554][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.052567][ T6252] RIP: 0033:0x7f9a4899e159 [ 60.052578][ T6252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.052590][ T6252] RSP: 002b:00007f9a497ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 60.052602][ T6252] RAX: ffffffffffffffda RBX: 00007f9a48c25fa0 RCX: 00007f9a4899e159 [ 60.052610][ T6252] RDX: 0000200000000600 RSI: 0000000000008914 RDI: 0000000000000004 [ 60.052618][ T6252] RBP: 00007f9a497ff090 R08: 0000000000000000 R09: 0000000000000000 [ 60.052625][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.052632][ T6252] R13: 00007f9a48c26038 R14: 00007f9a48c25fa0 R15: 00007ffe89a185e8 [ 60.052648][ T6252] [ 60.164863][ T6258] Zero length message leads to an empty skb [ 60.301437][ T1351] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.461545][ T1351] usb 8-1: Using ep0 maxpacket: 32 [ 60.462241][ T1351] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 60.463993][ T1351] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 60.472975][ T1351] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 60.473028][ T1351] usb 8-1: Product: syz [ 60.473059][ T1351] usb 8-1: Manufacturer: syz [ 60.473082][ T1351] usb 8-1: SerialNumber: syz [ 60.474364][ T1351] usb 8-1: config 0 descriptor?? [ 60.475342][ T6251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 60.475969][ T1351] hub 8-1:0.0: bad descriptor, ignoring hub [ 60.475980][ T1351] hub 8-1:0.0: probe with driver hub failed with error -5 [ 60.510161][ T6288] syzkaller0: entered promiscuous mode [ 60.510289][ T6288] syzkaller0: entered allmulticast mode [ 60.670806][ T952] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 60.821589][ T952] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 60.827597][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 60.831920][ T952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 60.836900][ T952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.840295][ T952] usb 6-1: Product: syz [ 60.842974][ T952] usb 6-1: Manufacturer: syz [ 60.845015][ T952] usb 6-1: SerialNumber: syz [ 60.850463][ T952] usb 6-1: config 0 descriptor?? [ 60.860315][ T952] hub 6-1:0.0: bad descriptor, ignoring hub [ 60.860388][ T952] hub 6-1:0.0: probe with driver hub failed with error -5 [ 60.868901][ T952] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input10 [ 61.705652][ T1164] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.783251][ T6251] raw-gadget.0 gadget.3: failed to queue resume event [ 61.792061][ T6308] raw-gadget.0 gadget.3: failed to queue suspend event [ 61.793463][ T6308] raw-gadget.0 gadget.3: failed to queue disconnect event [ 61.895415][ T6335] syzkaller1: entered promiscuous mode [ 61.895565][ T6335] syzkaller1: entered allmulticast mode [ 62.425762][ T5832] usb 8-1: USB disconnect, device number 4 [ 62.560927][ T5832] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 62.711495][ T5832] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 62.712366][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 62.713962][ T5832] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 62.713974][ T5832] usb 8-1: Product: syz [ 62.713981][ T5832] usb 8-1: Manufacturer: syz [ 62.713988][ T5832] usb 8-1: SerialNumber: syz [ 62.715442][ T5832] usb 8-1: config 0 descriptor?? [ 62.715985][ T6308] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 62.717411][ T5832] hub 8-1:0.0: bad descriptor, ignoring hub [ 62.717423][ T5832] hub 8-1:0.0: probe with driver hub failed with error -5 [ 63.032006][ T64] usb 8-1: USB disconnect, device number 5 [ 63.064208][ T61] usb 7-1: USB disconnect, device number 3 [ 63.366815][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.370145][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.374085][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.374131][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.374176][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.374216][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.374251][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.374291][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.374394][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.374437][ T6378] netlink: 'syz.0.175': attribute type 3 has an invalid length. [ 63.447207][ T6382] 9p: Bad value for 'rfdno' [ 63.515843][ T6382] tipc: Failed to obtain node identity [ 63.515917][ T6382] tipc: Enabling of bearer rejected, failed to enable media [ 63.588821][ T6402] Bluetooth: MGMT ver 1.23 [ 63.599234][ T6402] syzkaller1: entered promiscuous mode [ 63.601698][ T6402] syzkaller1: entered allmulticast mode [ 63.974688][ T6437] syzkaller1: entered promiscuous mode [ 63.974743][ T6437] syzkaller1: entered allmulticast mode [ 64.354363][ T43] kauditd_printk_skb: 27 callbacks suppressed [ 64.354518][ T43] audit: type=1400 audit(1788328919.069:403): avc: denied { ioctl } for pid=6463 comm="syz.1.209" path="socket:[9051]" dev="sockfs" ino=9051 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.378255][ T6464] FAULT_INJECTION: forcing a failure. [ 64.378255][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 64.378328][ T6464] CPU: 2 UID: 0 PID: 6464 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 64.378354][ T6464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.378362][ T6464] Call Trace: [ 64.378366][ T6464] [ 64.378370][ T6464] dump_stack_lvl+0x100/0x190 [ 64.378391][ T6464] should_fail_ex.cold+0x5/0xa [ 64.378404][ T6464] ? lock_acquire+0x1d1/0x380 [ 64.378417][ T6464] should_failslab+0xc2/0x120 [ 64.378430][ T6464] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 64.378442][ T6464] ? zswap_store+0xc6d/0x2e70 [ 64.378459][ T6464] zswap_store+0xc6d/0x2e70 [ 64.378479][ T6464] ? __pfx_zswap_store+0x10/0x10 [ 64.378495][ T6464] ? lock_acquire+0x1d1/0x380 [ 64.378506][ T6464] ? do_raw_spin_lock+0x128/0x260 [ 64.378519][ T6464] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 64.378532][ T6464] ? find_held_lock+0x2b/0x80 [ 64.378546][ T6464] ? swap_writeout+0xdd8/0x1b20 [ 64.378561][ T6464] ? swap_writeout+0xdd8/0x1b20 [ 64.378583][ T6464] swap_writeout+0xde0/0x1b20 [ 64.378609][ T6464] shrink_folio_list+0x4ffb/0x5e40 [ 64.378634][ T6464] ? __pfx_shrink_folio_list+0x10/0x10 [ 64.378650][ T6464] ? __lock_acquire+0x4c5/0x1ec0 [ 64.378674][ T6464] ? do_raw_spin_lock+0x128/0x260 [ 64.378712][ T6464] ? __lock_acquire+0x4c5/0x1ec0 [ 64.378746][ T6464] ? __lock_acquire+0x4c5/0x1ec0 [ 64.378763][ T6464] ? __css_rstat_updated+0x1ce/0x590 [ 64.378779][ T6464] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 64.378792][ T6464] ? __pfx___css_rstat_updated+0x10/0x10 [ 64.378809][ T6464] reclaim_folio_list+0xe9/0x5e0 [ 64.378835][ T6464] ? __pfx_reclaim_folio_list+0x10/0x10 [ 64.378852][ T6464] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 64.378880][ T6464] ? lru_gen_update_size+0x431/0xe20 [ 64.378900][ T6464] ? lru_gen_del_folio+0x382/0x5f0 [ 64.378920][ T6464] reclaim_pages+0x428/0x5e0 [ 64.378941][ T6464] ? __pfx_reclaim_pages+0x10/0x10 [ 64.378959][ T6464] ? find_held_lock+0x2b/0x80 [ 64.378978][ T6464] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 64.379003][ T6464] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 64.379031][ T6464] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 64.379079][ T6464] ? lock_acquire+0x1d1/0x380 [ 64.379095][ T6464] ? free_unref_folios+0x750/0x1790 [ 64.379118][ T6464] ? find_held_lock+0x2b/0x80 [ 64.379139][ T6464] ? free_unref_folios+0x81c/0x1790 [ 64.379161][ T6464] ? free_unref_folios+0x81c/0x1790 [ 64.379188][ T6464] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 64.379211][ T6464] walk_pgd_range+0xbef/0x1e00 [ 64.379247][ T6464] ? __pfx_walk_pgd_range+0x10/0x10 [ 64.379264][ T6464] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 64.379281][ T6464] __walk_page_range+0x171/0x850 [ 64.379303][ T6464] walk_page_range_vma_unsafe+0x209/0x8f0 [ 64.379322][ T6464] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 64.379342][ T6464] ? find_held_lock+0x2b/0x80 [ 64.379356][ T6464] ? mlock_drain_local+0x254/0x4e0 [ 64.379378][ T6464] ? mlock_drain_local+0x254/0x4e0 [ 64.379419][ T6464] walk_page_range_vma+0x63/0x90 [ 64.379440][ T6464] madvise_pageout+0x29e/0x5b0 [ 64.379459][ T6464] ? __lock_acquire+0x4c5/0x1ec0 [ 64.379475][ T6464] ? __pfx_madvise_pageout+0x10/0x10 [ 64.379526][ T6464] ? find_held_lock+0x2b/0x80 [ 64.379542][ T6464] ? mt_find+0x728/0x9b0 [ 64.379555][ T6464] ? mt_find+0x728/0x9b0 [ 64.379568][ T6464] madvise_vma_behavior+0x48b/0x2350 [ 64.379585][ T6464] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 64.379602][ T6464] ? find_vma_prev+0xd8/0x150 [ 64.379617][ T6464] ? find_vma+0xbf/0x140 [ 64.379627][ T6464] ? __pfx_find_vma+0x10/0x10 [ 64.379639][ T6464] ? lock_acquire+0x1d1/0x380 [ 64.379657][ T6464] madvise_walk_vmas+0x30e/0xc50 [ 64.379682][ T6464] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 64.379711][ T6464] ? lock_acquire+0x1d1/0x380 [ 64.379731][ T6464] madvise_do_behavior+0x1ea/0x510 [ 64.379753][ T6464] ? __pfx_madvise_do_behavior+0x10/0x10 [ 64.379776][ T6464] ? down_read+0x13b/0x4c0 [ 64.379806][ T6464] do_madvise+0x238/0x290 [ 64.379827][ T6464] ? __pfx_do_madvise+0x10/0x10 [ 64.379853][ T6464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 64.379881][ T6464] ? ksys_write+0x1ac/0x250 [ 64.379896][ T6464] ? __pfx_ksys_write+0x10/0x10 [ 64.379915][ T6464] __x64_sys_madvise+0xa9/0x110 [ 64.379935][ T6464] ? lockdep_hardirqs_on+0x7d/0x110 [ 64.379952][ T6464] do_syscall_64+0x123/0x790 [ 64.379973][ T6464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.379990][ T6464] RIP: 0033:0x7f9a4899e159 [ 64.380004][ T6464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.380019][ T6464] RSP: 002b:00007f9a497ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 64.380036][ T6464] RAX: ffffffffffffffda RBX: 00007f9a48c25fa0 RCX: 00007f9a4899e159 [ 64.380047][ T6464] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 64.380057][ T6464] RBP: 00007f9a497ff090 R08: 0000000000000000 R09: 0000000000000000 [ 64.380067][ T6464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.380076][ T6464] R13: 00007f9a48c26038 R14: 00007f9a48c25fa0 R15: 00007ffe89a185e8 [ 64.380098][ T6464] [ 64.521404][ T6477] FAULT_INJECTION: forcing a failure. [ 64.521404][ T6477] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.521436][ T6477] CPU: 3 UID: 0 PID: 6477 Comm: syz.1.214 Not tainted syzkaller #0 PREEMPT(full) [ 64.521456][ T6477] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.521465][ T6477] Call Trace: [ 64.521474][ T6477] [ 64.521500][ T6477] dump_stack_lvl+0x100/0x190 [ 64.521530][ T6477] should_fail_ex.cold+0x5/0xa [ 64.521552][ T6477] _copy_to_user+0x32/0xd0 [ 64.521580][ T6477] simple_read_from_buffer+0xcb/0x170 [ 64.521603][ T6477] proc_fail_nth_read+0x1af/0x230 [ 64.521625][ T6477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.521647][ T6477] ? rw_verify_area+0xce/0x6d0 [ 64.521671][ T6477] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 64.521690][ T6477] vfs_read+0x1e4/0xb40 [ 64.521717][ T6477] ? lock_acquire+0x1d1/0x380 [ 64.521736][ T6477] ? __fget_files+0x34/0x3d0 [ 64.521755][ T6477] ? __pfx_vfs_read+0x10/0x10 [ 64.521779][ T6477] ? find_held_lock+0x2b/0x80 [ 64.521804][ T6477] ? __fget_files+0x215/0x3d0 [ 64.521828][ T6477] ? __fget_files+0x21f/0x3d0 [ 64.521853][ T6477] ksys_read+0x12a/0x250 [ 64.521870][ T6477] ? __pfx_ksys_read+0x10/0x10 [ 64.521892][ T6477] do_syscall_64+0x123/0x790 [ 64.521915][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.521934][ T6477] RIP: 0033:0x7fdac695e98e [ 64.521950][ T6477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 64.521965][ T6477] RSP: 002b:00007fdac78d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 64.521983][ T6477] RAX: ffffffffffffffda RBX: 00007fdac78d36c0 RCX: 00007fdac695e98e [ 64.521993][ T6477] RDX: 000000000000000f RSI: 00007fdac78d30a0 RDI: 0000000000000005 [ 64.522002][ T6477] RBP: 00007fdac78d3090 R08: 0000000000000000 R09: 0000000000000000 [ 64.522014][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 64.522023][ T6477] R13: 00007fdac6c26038 R14: 00007fdac6c25fa0 R15: 00007fff01a219b8 [ 64.522051][ T6477] [ 64.579759][ T43] audit: type=1400 audit(1788328919.289:404): avc: denied { prog_load } for pid=6480 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.584374][ T43] audit: type=1400 audit(1788328919.299:405): avc: denied { prog_run } for pid=6480 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 64.741512][ T6488] overlayfs: failed to resolve '': -2 [ 64.880970][ T43] audit: type=1400 audit(1788328919.589:406): avc: denied { mount } for pid=6498 comm="syz.2.224" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 64.894574][ T6499] SELinux: failed to load policy [ 64.899084][ T43] audit: type=1400 audit(1788328919.609:407): avc: denied { mount } for pid=6501 comm="syz.3.225" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 64.934222][ T6502] bond1: option arp_missed_max: invalid value (0) [ 64.934278][ T6502] bond1: option arp_missed_max: allowed values 1 - 255 [ 64.946624][ T6502] bond1 (unregistering): Released all slaves [ 64.957745][ T43] audit: type=1400 audit(1788328919.669:408): avc: denied { setopt } for pid=6501 comm="syz.3.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 65.012154][ T6509] ======================================================= [ 65.012154][ T6509] WARNING: The mand mount option has been deprecated and [ 65.012154][ T6509] and is ignored by this kernel. Remove the mand [ 65.012154][ T6509] option from the mount to silence this warning. [ 65.012154][ T6509] ======================================================= [ 65.030597][ T6511] __nla_validate_parse: 4 callbacks suppressed [ 65.030678][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 65.035898][ T43] audit: type=1400 audit(1788328919.749:409): avc: denied { read } for pid=6510 comm="syz.1.228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 65.061961][ T43] audit: type=1400 audit(1788328919.779:410): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 65.173585][ T43] audit: type=1400 audit(1788328919.889:411): avc: denied { mount } for pid=6512 comm="syz.2.229" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 65.177504][ T43] audit: type=1400 audit(1788328919.889:412): avc: denied { read } for pid=6512 comm="syz.2.229" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 65.179723][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 65.276860][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.236'. [ 65.612176][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.617873][ T6573] bridge_slave_0 (unregistering): left allmulticast mode [ 65.617912][ T6573] bridge_slave_0 (unregistering): left promiscuous mode [ 65.618343][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.640038][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 66.007523][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 66.007559][ T6600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 66.208741][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 66.218470][ T6626] FAULT_INJECTION: forcing a failure. [ 66.218470][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 66.218546][ T6626] CPU: 3 UID: 0 PID: 6626 Comm: syz.1.267 Not tainted syzkaller #0 PREEMPT(full) [ 66.218570][ T6626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.218582][ T6626] Call Trace: [ 66.218589][ T6626] [ 66.218597][ T6626] dump_stack_lvl+0x100/0x190 [ 66.218631][ T6626] should_fail_ex.cold+0x5/0xa [ 66.218659][ T6626] should_failslab+0xc2/0x120 [ 66.218689][ T6626] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.218717][ T6626] ? __alloc_workqueue+0x155/0x1950 [ 66.218748][ T6626] __alloc_workqueue+0x155/0x1950 [ 66.218771][ T6626] ? __pfx_vsnprintf+0x10/0x10 [ 66.218789][ T6626] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.218808][ T6626] ? lockdep_hardirqs_on+0x7d/0x110 [ 66.218829][ T6626] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.218852][ T6626] alloc_workqueue_noprof+0xc7/0x130 [ 66.218875][ T6626] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 66.218904][ T6626] ? __pfx___debug_object_init+0x10/0x10 [ 66.218930][ T6626] nci_register_device+0x394/0xb80 [ 66.218960][ T6626] ? __pfx_nci_register_device+0x10/0x10 [ 66.218993][ T6626] ? lockdep_init_map_type+0x5c/0x250 [ 66.219021][ T6626] virtual_ncidev_open+0x141/0x220 [ 66.219055][ T6626] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 66.219079][ T6626] misc_open+0x26d/0x450 [ 66.219107][ T6626] ? __pfx_misc_open+0x10/0x10 [ 66.219135][ T6626] chrdev_open+0x234/0x6a0 [ 66.219160][ T6626] ? __pfx_chrdev_open+0x10/0x10 [ 66.219181][ T6626] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 66.219214][ T6626] do_dentry_open+0x6ab/0x14d0 [ 66.219231][ T6626] ? __pfx_chrdev_open+0x10/0x10 [ 66.219258][ T6626] vfs_open+0x82/0x3f0 [ 66.219284][ T6626] path_openat+0x19fa/0x2440 [ 66.219310][ T6626] ? __pfx_path_openat+0x10/0x10 [ 66.219340][ T6626] do_file_open+0x20e/0x430 [ 66.219364][ T6626] ? __pfx_do_file_open+0x10/0x10 [ 66.219404][ T6626] ? _raw_spin_unlock+0x28/0x50 [ 66.219432][ T6626] ? alloc_fd+0x471/0x7a0 [ 66.219479][ T6626] do_sys_openat2+0x10f/0x1e0 [ 66.219528][ T6626] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.219554][ T6626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 66.219581][ T6626] __x64_sys_openat+0x12d/0x210 [ 66.219604][ T6626] ? __pfx___x64_sys_openat+0x10/0x10 [ 66.219637][ T6626] do_syscall_64+0x123/0x790 [ 66.219667][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.219688][ T6626] RIP: 0033:0x7fdac699e159 [ 66.219706][ T6626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.219725][ T6626] RSP: 002b:00007fdac78d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 66.219744][ T6626] RAX: ffffffffffffffda RBX: 00007fdac6c25fa0 RCX: 00007fdac699e159 [ 66.219757][ T6626] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 66.219770][ T6626] RBP: 00007fdac6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 66.219781][ T6626] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 66.219793][ T6626] R13: 00007fdac6c26038 R14: 00007fdac6c25fa0 R15: 00007fff01a219b8 [ 66.219819][ T6626] [ 66.222725][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.267'. [ 66.222747][ T6626] netlink: 48 bytes leftover after parsing attributes in process `syz.1.267'. [ 66.367546][ T6641] overlayfs: failed to resolve './file2': -2 [ 66.636950][ T64] usb 6-1: USB disconnect, device number 3 [ 66.661112][ T6670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 66.722486][ T6663] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 66.732135][ T6663] bond1 (unregistering): Released all slaves [ 66.964601][ T6686] SELinux: failed to load policy [ 67.035947][ T6695] FAULT_INJECTION: forcing a failure. [ 67.035947][ T6695] name failslab, interval 1, probability 0, space 0, times 0 [ 67.042056][ T6695] CPU: 3 UID: 0 PID: 6695 Comm: syz.3.290 Not tainted syzkaller #0 PREEMPT(full) [ 67.042088][ T6695] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 67.042096][ T6695] Call Trace: [ 67.042101][ T6695] [ 67.042106][ T6695] dump_stack_lvl+0x100/0x190 [ 67.042127][ T6695] should_fail_ex.cold+0x5/0xa [ 67.042144][ T6695] should_failslab+0xc2/0x120 [ 67.042158][ T6695] __kmalloc_cache_node_noprof+0x94/0x720 [ 67.042174][ T6695] ? __alloc_workqueue+0x6f2/0x1950 [ 67.042191][ T6695] __alloc_workqueue+0x6f2/0x1950 [ 67.042209][ T6695] alloc_workqueue_noprof+0xc7/0x130 [ 67.042223][ T6695] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 67.042239][ T6695] ? __pfx___debug_object_init+0x10/0x10 [ 67.042254][ T6695] nci_register_device+0x394/0xb80 [ 67.042274][ T6695] ? __pfx_nci_register_device+0x10/0x10 [ 67.042292][ T6695] ? lockdep_init_map_type+0x5c/0x250 [ 67.042306][ T6695] virtual_ncidev_open+0x141/0x220 [ 67.042320][ T6695] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 67.042334][ T6695] misc_open+0x26d/0x450 [ 67.042350][ T6695] ? __pfx_misc_open+0x10/0x10 [ 67.042364][ T6695] chrdev_open+0x234/0x6a0 [ 67.042378][ T6695] ? __pfx_chrdev_open+0x10/0x10 [ 67.042392][ T6695] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 67.042410][ T6695] do_dentry_open+0x6ab/0x14d0 [ 67.042420][ T6695] ? __pfx_chrdev_open+0x10/0x10 [ 67.042434][ T6695] vfs_open+0x82/0x3f0 [ 67.042449][ T6695] path_openat+0x19fa/0x2440 [ 67.042463][ T6695] ? __pfx_path_openat+0x10/0x10 [ 67.042479][ T6695] do_file_open+0x20e/0x430 [ 67.042493][ T6695] ? __pfx_do_file_open+0x10/0x10 [ 67.042514][ T6695] ? _raw_spin_unlock+0x28/0x50 [ 67.042531][ T6695] ? alloc_fd+0x471/0x7a0 [ 67.042547][ T6695] do_sys_openat2+0x10f/0x1e0 [ 67.042560][ T6695] ? __pfx_do_sys_openat2+0x10/0x10 [ 67.042575][ T6695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 67.042591][ T6695] __x64_sys_openat+0x12d/0x210 [ 67.042606][ T6695] ? __pfx___x64_sys_openat+0x10/0x10 [ 67.042624][ T6695] do_syscall_64+0x123/0x790 [ 67.042638][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.042649][ T6695] RIP: 0033:0x7f8da639e159 [ 67.042659][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.042669][ T6695] RSP: 002b:00007f8da7184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 67.042687][ T6695] RAX: ffffffffffffffda RBX: 00007f8da6625fa0 RCX: 00007f8da639e159 [ 67.042695][ T6695] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 67.042702][ T6695] RBP: 00007f8da6435024 R08: 0000000000000000 R09: 0000000000000000 [ 67.042709][ T6695] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 67.042716][ T6695] R13: 00007f8da6626038 R14: 00007f8da6625fa0 R15: 00007ffc98044a88 [ 67.042731][ T6695] [ 67.264526][ T6715] syz.0.299: attempt to access beyond end of device [ 67.264526][ T6715] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 67.264623][ T6715] gfs2: error -5 reading superblock [ 67.275789][ T6716] tmpfs: Unknown parameter 'grpquota_inode_harlimit' [ 67.487237][ T6734] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 80f86406, magic 64 != 6b] [ 67.808145][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.808674][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.868796][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.874433][ T6772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.981930][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.982000][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.982047][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.982068][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.256019][ T6814] CIFS: VFS: UNC: path must begin with // or \\ [ 68.256068][ T6814] Malformed UNC in devname [ 68.256068][ T6814] [ 68.256198][ T6814] CIFS: VFS: Malformed UNC in devname [ 68.558088][ T6846] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 69.030161][ T6875] loop5: detected capacity change from 0 to 7 [ 69.033259][ T6806] 9pnet_fd: p9_fd_create_tcp (6806): problem connecting socket to 127.0.0.1 [ 69.047549][ T6875] Dev loop5: unable to read RDB block 7 [ 69.047612][ T6875] loop5: AHDI p1 [ 69.047933][ T6875] loop5: partition table partially beyond EOD, truncated [ 69.313633][ T6904] FAULT_INJECTION: forcing a failure. [ 69.313633][ T6904] name failslab, interval 1, probability 0, space 0, times 0 [ 69.313719][ T6904] CPU: 1 UID: 0 PID: 6904 Comm: syz.0.380 Not tainted syzkaller #0 PREEMPT(full) [ 69.313753][ T6904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.313765][ T6904] Call Trace: [ 69.313772][ T6904] [ 69.313779][ T6904] dump_stack_lvl+0x100/0x190 [ 69.313811][ T6904] should_fail_ex.cold+0x5/0xa [ 69.313837][ T6904] should_failslab+0xc2/0x120 [ 69.313859][ T6904] __kmalloc_noprof+0xfc/0x840 [ 69.313876][ T6904] ? iter_file_splice_write+0x1d8/0x10b0 [ 69.313903][ T6904] iter_file_splice_write+0x1d8/0x10b0 [ 69.313926][ T6904] ? __pfx_filemap_splice_read+0x10/0x10 [ 69.313960][ T6904] ? __pfx_iter_file_splice_write+0x10/0x10 [ 69.313999][ T6904] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 69.314018][ T6904] ? __pfx_iter_file_splice_write+0x10/0x10 [ 69.314044][ T6904] direct_splice_actor+0x192/0x690 [ 69.314070][ T6904] splice_direct_to_actor+0x345/0xa30 [ 69.314096][ T6904] ? __pfx_direct_splice_actor+0x10/0x10 [ 69.314124][ T6904] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 69.314151][ T6904] ? lock_acquire+0x1d1/0x380 [ 69.314175][ T6904] do_splice_direct+0x174/0x240 [ 69.314199][ T6904] ? __pfx_do_splice_direct+0x10/0x10 [ 69.314220][ T6904] ? avc_policy_seqno+0x9/0x20 [ 69.314261][ T6904] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 69.314284][ T6904] ? bpf_lsm_file_permission+0x9/0x10 [ 69.314308][ T6904] ? security_file_permission+0x76/0x210 [ 69.314330][ T6904] ? rw_verify_area+0xce/0x6d0 [ 69.314360][ T6904] do_sendfile+0xadc/0xe20 [ 69.314392][ T6904] ? __pfx_do_sendfile+0x10/0x10 [ 69.314419][ T6904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.314442][ T6904] ? __fget_files+0x21f/0x3d0 [ 69.314471][ T6904] __x64_sys_sendfile64+0x1d8/0x220 [ 69.314493][ T6904] ? ksys_write+0x1ac/0x250 [ 69.314511][ T6904] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 69.314539][ T6904] do_syscall_64+0x123/0x790 [ 69.314572][ T6904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.314592][ T6904] RIP: 0033:0x7f9a4899e159 [ 69.314608][ T6904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.314626][ T6904] RSP: 002b:00007f9a497ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 69.314644][ T6904] RAX: ffffffffffffffda RBX: 00007f9a48c25fa0 RCX: 00007f9a4899e159 [ 69.314659][ T6904] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 69.314668][ T6904] RBP: 00007f9a497ff090 R08: 0000000000000000 R09: 0000000000000000 [ 69.314686][ T6904] R10: 00000000002000fb R11: 0000000000000246 R12: 0000000000000001 [ 69.314697][ T6904] R13: 00007f9a48c26038 R14: 00007f9a48c25fa0 R15: 00007ffe89a185e8 [ 69.314724][ T6904] [ 69.409743][ T43] kauditd_printk_skb: 48 callbacks suppressed [ 69.409758][ T43] audit: type=1400 audit(1788328924.119:461): avc: denied { write } for pid=6909 comm="syz.2.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.459850][ T43] audit: type=1400 audit(1788328924.169:462): avc: denied { mount } for pid=6918 comm="syz.3.384" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 69.460305][ T43] audit: type=1400 audit(1788328924.169:463): avc: denied { search } for pid=6918 comm="syz.3.384" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 69.460485][ T43] audit: type=1400 audit(1788328924.169:464): avc: denied { append } for pid=6918 comm="syz.3.384" name="uprobe_events" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 69.464830][ T43] audit: type=1400 audit(1788328924.169:465): avc: denied { open } for pid=6918 comm="syz.3.384" path="/82/tracing/uprobe_events" dev="tracefs" ino=1066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 69.472843][ T43] audit: type=1400 audit(1788328924.189:466): avc: denied { lock } for pid=6918 comm="syz.3.384" path="socket:[15725]" dev="sockfs" ino=15725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.518613][ T6919] loop6: detected capacity change from 0 to 8 [ 69.562401][ T6919] loop6: detected capacity change from 8 to 7 [ 69.568812][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.568935][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.573237][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.573284][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.580401][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.580447][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.581210][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.581245][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.581318][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.581344][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.581412][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.581438][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.581502][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.581528][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.581586][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.581619][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.581644][ T6919] ldm_validate_partition_table(): Disk read failed. [ 69.581721][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.581767][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.581859][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 69.581903][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 69.582063][ T6919] Dev loop6: unable to read RDB block 0 [ 69.582335][ T6919] loop6: unable to read partition table [ 69.582473][ T6919] loop6: partition table beyond EOD, truncated [ 69.582484][ T6919] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 69.582484][ T6919] .BL_se) failed (rc=-5) [ 69.615603][ T43] audit: type=1400 audit(1788328924.329:467): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 69.728070][ T43] audit: type=1400 audit(1788328924.439:468): avc: denied { create } for pid=6936 comm="syz.2.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.747600][ T6939] FAULT_INJECTION: forcing a failure. [ 69.747600][ T6939] name (null), interval 1, probability 0, space 0, times 1 [ 69.747684][ T6939] CPU: 0 UID: 0 PID: 6939 Comm: syz.3.393 Not tainted syzkaller #0 PREEMPT(full) [ 69.747717][ T6939] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 69.747727][ T6939] Call Trace: [ 69.747732][ T6939] [ 69.747737][ T6939] dump_stack_lvl+0x100/0x190 [ 69.747766][ T6939] should_fail_ex.cold+0x5/0xa [ 69.747792][ T6939] null_queue_rq+0x24d/0xfb0 [ 69.747819][ T6939] null_queue_rqs+0xe9/0x2f0 [ 69.747841][ T6939] ? __pfx_null_queue_rqs+0x10/0x10 [ 69.747860][ T6939] ? blk_mq_dispatch_queue_requests+0x148/0x7c0 [ 69.747890][ T6939] __blk_mq_flush_list+0x9a/0xc0 [ 69.747918][ T6939] blk_mq_dispatch_queue_requests+0x184/0x7c0 [ 69.747945][ T6939] blk_mq_flush_plug_list+0x1f2/0x600 [ 69.747972][ T6939] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 69.747995][ T6939] ? folios_put_refs+0x58a/0xaa0 [ 69.748028][ T6939] __blk_flush_plug+0x2c4/0x4b0 [ 69.748060][ T6939] ? __pfx___might_resched+0x10/0x10 [ 69.748080][ T6939] ? mlock_drain_local+0x283/0x4e0 [ 69.748109][ T6939] ? __pfx___blk_flush_plug+0x10/0x10 [ 69.748142][ T6939] ? writeback_iter+0x62d/0x1360 [ 69.748177][ T6939] blk_finish_plug+0x5c/0xa0 [ 69.748207][ T6939] blkdev_writepages+0xf6/0x150 [ 69.748260][ T6939] ? __pfx_blkdev_writepages+0x10/0x10 [ 69.748302][ T6939] ? lock_acquire+0x1d1/0x380 [ 69.748322][ T6939] ? __pfx_blkdev_writepages+0x10/0x10 [ 69.748354][ T6939] do_writepages+0x278/0x600 [ 69.748388][ T6939] ? __pfx_do_writepages+0x10/0x10 [ 69.748417][ T6939] ? do_raw_spin_unlock+0x145/0x1e0 [ 69.748442][ T6939] ? _raw_spin_unlock+0x28/0x50 [ 69.748478][ T6939] filemap_writeback+0x22d/0x2e0 [ 69.748512][ T6939] ? __pfx_filemap_writeback+0x10/0x10 [ 69.748540][ T6939] ? kasan_save_stack+0x3f/0x50 [ 69.748560][ T6939] ? kasan_save_stack+0x30/0x50 [ 69.748580][ T6939] ? kasan_save_track+0x14/0x30 [ 69.748631][ T6939] ? __pfx_current_time+0x10/0x10 [ 69.748666][ T6939] filemap_write_and_wait_range.part.0+0x88/0x110 [ 69.748693][ T6939] kiocb_invalidate_pages+0xde/0x180 [ 69.748724][ T6939] blkdev_write_iter+0x48f/0xd30 [ 69.748761][ T6939] iter_file_splice_write+0x830/0x10b0 [ 69.748796][ T6939] ? __pfx_iter_file_splice_write+0x10/0x10 [ 69.748837][ T6939] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 69.748857][ T6939] ? __pfx_iter_file_splice_write+0x10/0x10 [ 69.748881][ T6939] direct_splice_actor+0x192/0x690 [ 69.748906][ T6939] splice_direct_to_actor+0x345/0xa30 [ 69.748930][ T6939] ? __pfx_direct_splice_actor+0x10/0x10 [ 69.748957][ T6939] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 69.748981][ T6939] ? lock_acquire+0x1d1/0x380 [ 69.749001][ T6939] do_splice_direct+0x174/0x240 [ 69.749022][ T6939] ? __pfx_do_splice_direct+0x10/0x10 [ 69.749043][ T6939] ? avc_policy_seqno+0x9/0x20 [ 69.749063][ T6939] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 69.749080][ T6939] ? bpf_lsm_file_permission+0x9/0x10 [ 69.749093][ T6939] ? security_file_permission+0x76/0x210 [ 69.749105][ T6939] ? rw_verify_area+0xce/0x6d0 [ 69.749122][ T6939] do_sendfile+0xadc/0xe20 [ 69.749141][ T6939] ? __pfx_do_sendfile+0x10/0x10 [ 69.749156][ T6939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 69.749169][ T6939] ? __fget_files+0x21f/0x3d0 [ 69.749188][ T6939] __x64_sys_sendfile64+0x1d8/0x220 [ 69.749201][ T6939] ? ksys_write+0x1ac/0x250 [ 69.749212][ T6939] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 69.749228][ T6939] do_syscall_64+0x123/0x790 [ 69.749242][ T6939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.749253][ T6939] RIP: 0033:0x7f8da639e159 [ 69.749263][ T6939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.749274][ T6939] RSP: 002b:00007f8da7184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 69.749286][ T6939] RAX: ffffffffffffffda RBX: 00007f8da6625fa0 RCX: 00007f8da639e159 [ 69.749293][ T6939] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 69.749314][ T6939] RBP: 00007f8da7184090 R08: 0000000000000000 R09: 0000000000000000 [ 69.749322][ T6939] R10: 00000000002000fb R11: 0000000000000246 R12: 0000000000000001 [ 69.749328][ T6939] R13: 00007f8da6626038 R14: 00007f8da6625fa0 R15: 00007ffc98044a88 [ 69.749343][ T6939] [ 69.856514][ T43] audit: type=1400 audit(1788328924.569:469): avc: denied { mount } for pid=6942 comm="syz.2.395" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 69.985303][ T43] audit: type=1400 audit(1788328924.699:470): avc: denied { read } for pid=6954 comm="syz.2.400" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.986469][ T6956] program syz.2.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.010542][ T6956] random: crng reseeded on system resumption [ 70.014256][ T6956] FAULT_INJECTION: forcing a failure. [ 70.014256][ T6956] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 70.014317][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.2.400 Not tainted syzkaller #0 PREEMPT(full) [ 70.014343][ T6956] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.014351][ T6956] Call Trace: [ 70.014356][ T6956] [ 70.014361][ T6956] dump_stack_lvl+0x100/0x190 [ 70.014381][ T6956] should_fail_ex.cold+0x5/0xa [ 70.014395][ T6956] ? prepare_alloc_pages+0x16d/0x5b0 [ 70.014411][ T6956] should_fail_alloc_page+0xeb/0x140 [ 70.014428][ T6956] prepare_alloc_pages+0x1f0/0x5b0 [ 70.014441][ T6956] ? unwind_get_return_address+0x59/0xa0 [ 70.014460][ T6956] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 70.014481][ T6956] ? stack_trace_save+0x8e/0xc0 [ 70.014497][ T6956] ? __pfx_stack_trace_save+0x10/0x10 [ 70.014512][ T6956] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.014524][ T6956] ? stack_depot_save_flags+0x27/0x9f0 [ 70.014542][ T6956] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 70.014573][ T6956] ? kasan_save_stack+0x3f/0x50 [ 70.014586][ T6956] ? kasan_save_track+0x14/0x30 [ 70.014597][ T6956] ? __kasan_kmalloc+0xaa/0xb0 [ 70.014608][ T6956] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 70.014624][ T6956] ? memory_bm_create+0x12c/0xcf0 [ 70.014637][ T6956] ? create_basic_memory_bitmaps+0xbd/0x350 [ 70.014652][ T6956] ? snapshot_open+0x23b/0x2b0 [ 70.014671][ T6956] ? misc_open+0x26d/0x450 [ 70.014690][ T6956] ? chrdev_open+0x234/0x6a0 [ 70.014708][ T6956] ? do_dentry_open+0x6ab/0x14d0 [ 70.014723][ T6956] ? vfs_open+0x82/0x3f0 [ 70.014741][ T6956] ? path_openat+0x19fa/0x2440 [ 70.014757][ T6956] ? do_file_open+0x20e/0x430 [ 70.014772][ T6956] ? do_sys_openat2+0x10f/0x1e0 [ 70.014791][ T6956] ? __x64_sys_openat+0x12d/0x210 [ 70.014811][ T6956] ? do_syscall_64+0x123/0x790 [ 70.014830][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.014860][ T6956] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.014883][ T6956] ? policy_nodemask+0xed/0x4f0 [ 70.014910][ T6956] alloc_pages_mpol+0x201/0x550 [ 70.014928][ T6956] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 70.014953][ T6956] ? kasan_save_track+0x14/0x30 [ 70.014971][ T6956] ? __kasan_kmalloc+0xaa/0xb0 [ 70.014992][ T6956] alloc_pages_noprof+0x1a/0x160 [ 70.015014][ T6956] get_zeroed_page_noprof+0x18/0xb0 [ 70.015038][ T6956] get_image_page+0x18/0x1a0 [ 70.015064][ T6956] memory_bm_create+0x408/0xcf0 [ 70.015098][ T6956] create_basic_memory_bitmaps+0xbd/0x350 [ 70.015123][ T6956] snapshot_open+0x23b/0x2b0 [ 70.015149][ T6956] ? __pfx_snapshot_open+0x10/0x10 [ 70.015176][ T6956] misc_open+0x26d/0x450 [ 70.015195][ T6956] ? __pfx_misc_open+0x10/0x10 [ 70.015218][ T6956] chrdev_open+0x234/0x6a0 [ 70.015238][ T6956] ? __pfx_chrdev_open+0x10/0x10 [ 70.015258][ T6956] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 70.015287][ T6956] do_dentry_open+0x6ab/0x14d0 [ 70.015299][ T6956] ? __pfx_chrdev_open+0x10/0x10 [ 70.015322][ T6956] vfs_open+0x82/0x3f0 [ 70.015346][ T6956] path_openat+0x19fa/0x2440 [ 70.015370][ T6956] ? __pfx_path_openat+0x10/0x10 [ 70.015398][ T6956] do_file_open+0x20e/0x430 [ 70.015414][ T6956] ? __pfx_do_file_open+0x10/0x10 [ 70.015452][ T6956] ? _raw_spin_unlock+0x28/0x50 [ 70.015507][ T6956] ? alloc_fd+0x471/0x7a0 [ 70.015534][ T6956] do_sys_openat2+0x10f/0x1e0 [ 70.015557][ T6956] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.015579][ T6956] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 70.015602][ T6956] __x64_sys_openat+0x12d/0x210 [ 70.015623][ T6956] ? __pfx___x64_sys_openat+0x10/0x10 [ 70.015655][ T6956] do_syscall_64+0x123/0x790 [ 70.015676][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.015695][ T6956] RIP: 0033:0x7fbaf959e159 [ 70.015710][ T6956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.015725][ T6956] RSP: 002b:00007fbafa3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 70.015738][ T6956] RAX: ffffffffffffffda RBX: 00007fbaf9825fa0 RCX: 00007fbaf959e159 [ 70.015749][ T6956] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 70.015760][ T6956] RBP: 00007fbaf9635024 R08: 0000000000000000 R09: 0000000000000000 [ 70.015771][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.015782][ T6956] R13: 00007fbaf9826038 R14: 00007fbaf9825fa0 R15: 00007ffe8d532098 [ 70.015807][ T6956] [ 70.030286][ T6956] gadgetfs: bound to dummy_udc driver [ 70.208961][ T6960] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.209244][ T6960] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.327709][ T6960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.339866][ T6960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.478143][ T6971] __nla_validate_parse: 8 callbacks suppressed [ 70.478211][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 70.480867][ T5876] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.480893][ T5876] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.480911][ T5876] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.480928][ T5876] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.500292][ T6988] kAFS: unparsable volume name [ 70.702213][ T7012] capability: warning: `syz.0.423' uses 32-bit capabilities (legacy support in use) [ 70.725435][ T7012] xt_ecn: cannot match TCP bits for non-tcp packets [ 71.330041][ T7048] syzkaller0: entered promiscuous mode [ 71.330105][ T7048] syzkaller0: entered allmulticast mode [ 71.345195][ T7048] option changes via remount are deprecated (pid=7047 comm=syz.1.436) [ 71.426297][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426514][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.433130][ T25] cfg80211: failed to load regulatory.db [ 71.885324][ T7050] validate_nla: 48 callbacks suppressed [ 71.885403][ T7050] netlink: 'syz.1.437': attribute type 62 has an invalid length. [ 74.237959][ T7141] tipc: Enabling of bearer rejected, failed to enable media [ 74.238230][ T7143] tipc: Enabling of bearer rejected, failed to enable media [ 74.539668][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.539896][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.780889][ T5812] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 74.785459][ T5085] null_blk: rq ffff888029cc3480 timed out [ 74.785586][ T5085] blk_print_req_error: 46 callbacks suppressed [ 74.785606][ T5085] timeout error, dev nullb0, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 74.785629][ T5085] buffer_io_error: 45 callbacks suppressed [ 74.785638][ T5085] Buffer I/O error on dev nullb0, logical block 0, lost async page write [ 74.829080][ T43] kauditd_printk_skb: 24 callbacks suppressed [ 74.829187][ T43] audit: type=1400 audit(1788328929.539:495): avc: denied { read } for pid=7155 comm="syz.3.457" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.829248][ T43] audit: type=1400 audit(1788328929.539:496): avc: denied { open } for pid=7155 comm="syz.3.457" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 74.833954][ T43] audit: type=1400 audit(1788328929.549:497): avc: denied { mounton } for pid=7155 comm="syz.3.457" path="/85/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 74.854940][ T43] audit: type=1400 audit(1788328929.569:498): avc: denied { write } for pid=7155 comm="syz.3.457" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 74.944066][ T5812] usb 6-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 74.944598][ T5812] usb 6-1: config 0 has no interfaces? [ 74.946248][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.946260][ T5812] usb 6-1: Product: syz [ 74.946267][ T5812] usb 6-1: Manufacturer: syz [ 74.946274][ T5812] usb 6-1: SerialNumber: syz [ 74.949966][ T5812] usb 6-1: config 0 descriptor?? [ 75.089349][ T7178] program syz.0.464 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.097587][ T7178] random: crng reseeded on system resumption [ 75.102325][ T7178] FAULT_INJECTION: forcing a failure. [ 75.102325][ T7178] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 75.102405][ T7178] CPU: 3 UID: 0 PID: 7178 Comm: syz.0.464 Not tainted syzkaller #0 PREEMPT(full) [ 75.102441][ T7178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.102453][ T7178] Call Trace: [ 75.102462][ T7178] [ 75.102470][ T7178] dump_stack_lvl+0x100/0x190 [ 75.102515][ T7178] should_fail_ex.cold+0x5/0xa [ 75.102539][ T7178] ? prepare_alloc_pages+0x16d/0x5b0 [ 75.102571][ T7178] should_fail_alloc_page+0xeb/0x140 [ 75.102596][ T7178] prepare_alloc_pages+0x1f0/0x5b0 [ 75.102617][ T7178] ? unwind_get_return_address+0x59/0xa0 [ 75.102650][ T7178] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 75.102689][ T7178] ? stack_trace_save+0x8e/0xc0 [ 75.102719][ T7178] ? __pfx_stack_trace_save+0x10/0x10 [ 75.102753][ T7178] ? stack_depot_save_flags+0x27/0x9f0 [ 75.102775][ T7178] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 75.102804][ T7178] ? kasan_save_stack+0x3f/0x50 [ 75.102823][ T7178] ? kasan_save_track+0x14/0x30 [ 75.102839][ T7178] ? __kasan_kmalloc+0xaa/0xb0 [ 75.102857][ T7178] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 75.102883][ T7178] ? memory_bm_create+0x12c/0xcf0 [ 75.102905][ T7178] ? create_basic_memory_bitmaps+0xbd/0x350 [ 75.102929][ T7178] ? snapshot_open+0x23b/0x2b0 [ 75.102956][ T7178] ? misc_open+0x26d/0x450 [ 75.102981][ T7178] ? chrdev_open+0x234/0x6a0 [ 75.103001][ T7178] ? do_dentry_open+0x6ab/0x14d0 [ 75.103016][ T7178] ? vfs_open+0x82/0x3f0 [ 75.103035][ T7178] ? path_openat+0x19fa/0x2440 [ 75.103055][ T7178] ? do_file_open+0x20e/0x430 [ 75.103073][ T7178] ? do_sys_openat2+0x10f/0x1e0 [ 75.103094][ T7178] ? __x64_sys_openat+0x12d/0x210 [ 75.103114][ T7178] ? do_syscall_64+0x123/0x790 [ 75.103140][ T7178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.103173][ T7178] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.103194][ T7178] ? policy_nodemask+0xed/0x4f0 [ 75.103224][ T7178] alloc_pages_mpol+0x201/0x550 [ 75.103249][ T7178] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 75.103274][ T7178] ? kasan_save_track+0x14/0x30 [ 75.103294][ T7178] ? __kasan_kmalloc+0xaa/0xb0 [ 75.103317][ T7178] alloc_pages_noprof+0x1a/0x160 [ 75.103345][ T7178] get_zeroed_page_noprof+0x18/0xb0 [ 75.103367][ T7178] get_image_page+0x18/0x1a0 [ 75.103392][ T7178] memory_bm_create+0x66a/0xcf0 [ 75.103428][ T7178] create_basic_memory_bitmaps+0xbd/0x350 [ 75.103486][ T7178] snapshot_open+0x23b/0x2b0 [ 75.103515][ T7178] ? __pfx_snapshot_open+0x10/0x10 [ 75.103547][ T7178] misc_open+0x26d/0x450 [ 75.103575][ T7178] ? __pfx_misc_open+0x10/0x10 [ 75.103602][ T7178] chrdev_open+0x234/0x6a0 [ 75.103641][ T7178] ? __pfx_chrdev_open+0x10/0x10 [ 75.103671][ T7178] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 75.103705][ T7178] do_dentry_open+0x6ab/0x14d0 [ 75.103725][ T7178] ? __pfx_chrdev_open+0x10/0x10 [ 75.103754][ T7178] vfs_open+0x82/0x3f0 [ 75.103781][ T7178] path_openat+0x19fa/0x2440 [ 75.103810][ T7178] ? __pfx_path_openat+0x10/0x10 [ 75.103842][ T7178] do_file_open+0x20e/0x430 [ 75.103868][ T7178] ? __pfx_do_file_open+0x10/0x10 [ 75.103913][ T7178] ? _raw_spin_unlock+0x28/0x50 [ 75.103941][ T7178] ? alloc_fd+0x471/0x7a0 [ 75.103971][ T7178] do_sys_openat2+0x10f/0x1e0 [ 75.103995][ T7178] ? __pfx_do_sys_openat2+0x10/0x10 [ 75.104021][ T7178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.104052][ T7178] __x64_sys_openat+0x12d/0x210 [ 75.104078][ T7178] ? __pfx___x64_sys_openat+0x10/0x10 [ 75.104113][ T7178] do_syscall_64+0x123/0x790 [ 75.104138][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.104158][ T7178] RIP: 0033:0x7f9a4899e159 [ 75.104175][ T7178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.104194][ T7178] RSP: 002b:00007f9a497ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 75.104214][ T7178] RAX: ffffffffffffffda RBX: 00007f9a48c25fa0 RCX: 00007f9a4899e159 [ 75.104227][ T7178] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 75.104240][ T7178] RBP: 00007f9a48a35024 R08: 0000000000000000 R09: 0000000000000000 [ 75.104252][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.104264][ T7178] R13: 00007f9a48c26038 R14: 00007f9a48c25fa0 R15: 00007ffe89a185e8 [ 75.104290][ T7178] [ 75.110195][ T7178] gadgetfs: bound to dummy_udc driver [ 75.153006][ T7141] netlink: 'syz.1.455': attribute type 13 has an invalid length. [ 75.153022][ T7141] netlink: 'syz.1.455': attribute type 17 has an invalid length. [ 75.153126][ T7141] lo: entered promiscuous mode [ 75.153137][ T7141] lo: entered allmulticast mode [ 75.153386][ T7142] netlink: 'syz.1.455': attribute type 13 has an invalid length. [ 75.153395][ T7142] netlink: 'syz.1.455': attribute type 17 has an invalid length. [ 75.154672][ T7141] tunl0: entered promiscuous mode [ 75.154684][ T7141] tunl0: entered allmulticast mode [ 75.155733][ T7141] gre0: entered promiscuous mode [ 75.155742][ T7141] gre0: entered allmulticast mode [ 75.156773][ T7141] gretap0: entered promiscuous mode [ 75.156782][ T7141] gretap0: entered allmulticast mode [ 75.156789][ T7141] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.157101][ T7142] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.159397][ T61] usb 6-1: USB disconnect, device number 4 [ 75.708176][ T43] audit: type=1800 audit(1788328930.419:499): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.465" name="blocks" dev="configfs" ino=14939 res=0 errno=0 [ 75.712277][ T7180] xt_ecn: cannot match TCP bits for non-tcp packets [ 75.834695][ T7186] FAULT_INJECTION: forcing a failure. [ 75.834695][ T7186] name failslab, interval 1, probability 0, space 0, times 0 [ 75.842782][ T7186] CPU: 3 UID: 0 PID: 7186 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) [ 75.842821][ T7186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 75.842834][ T7186] Call Trace: [ 75.842856][ T7186] [ 75.842864][ T7186] dump_stack_lvl+0x100/0x190 [ 75.842898][ T7186] should_fail_ex.cold+0x5/0xa [ 75.842922][ T7186] ? lock_acquire+0x1d1/0x380 [ 75.842945][ T7186] should_failslab+0xc2/0x120 [ 75.842968][ T7186] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 75.842991][ T7186] ? zswap_store+0xc6d/0x2e70 [ 75.843023][ T7186] zswap_store+0xc6d/0x2e70 [ 75.843059][ T7186] ? __pfx_zswap_store+0x10/0x10 [ 75.843087][ T7186] ? lock_acquire+0x1d1/0x380 [ 75.843113][ T7186] ? do_raw_spin_lock+0x128/0x260 [ 75.843137][ T7186] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 75.843160][ T7186] ? find_held_lock+0x2b/0x80 [ 75.843184][ T7186] ? swap_writeout+0xdd8/0x1b20 [ 75.843210][ T7186] ? swap_writeout+0xdd8/0x1b20 [ 75.843242][ T7186] swap_writeout+0xde0/0x1b20 [ 75.843276][ T7186] shrink_folio_list+0x4ffb/0x5e40 [ 75.843312][ T7186] ? __pfx_shrink_folio_list+0x10/0x10 [ 75.843334][ T7186] ? __send_ipi_mask+0x3ee/0x5a0 [ 75.843360][ T7186] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.843382][ T7186] ? __send_ipi_mask+0x2e8/0x5a0 [ 75.843462][ T7186] ? __lock_acquire+0x4c5/0x1ec0 [ 75.843479][ T7186] ? __css_rstat_updated+0x1ce/0x590 [ 75.843500][ T7186] ? trace_tlb_flush+0x14b/0x1a0 [ 75.843518][ T7186] ? __pfx___css_rstat_updated+0x10/0x10 [ 75.843544][ T7186] reclaim_folio_list+0xe9/0x5e0 [ 75.843574][ T7186] ? __pfx_reclaim_folio_list+0x10/0x10 [ 75.843596][ T7186] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 75.843634][ T7186] ? lru_gen_update_size+0x431/0xe20 [ 75.843662][ T7186] ? lru_gen_del_folio+0x382/0x5f0 [ 75.843686][ T7186] reclaim_pages+0x428/0x5e0 [ 75.843713][ T7186] ? __pfx_reclaim_pages+0x10/0x10 [ 75.843735][ T7186] ? find_held_lock+0x2b/0x80 [ 75.843761][ T7186] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 75.843792][ T7186] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 75.843827][ T7186] ? rcu_read_unlock+0x17/0x60 [ 75.843853][ T7186] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 75.843879][ T7186] ? __mod_zone_page_state+0xdb/0x190 [ 75.843910][ T7186] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 75.843938][ T7186] walk_pgd_range+0xbef/0x1e00 [ 75.843973][ T7186] ? find_held_lock+0x2b/0x80 [ 75.844007][ T7186] ? __pfx_walk_pgd_range+0x10/0x10 [ 75.844038][ T7186] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 75.844067][ T7186] __walk_page_range+0x171/0x850 [ 75.844113][ T7186] walk_page_range_vma_unsafe+0x209/0x8f0 [ 75.844147][ T7186] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 75.844182][ T7186] ? find_held_lock+0x2b/0x80 [ 75.844206][ T7186] ? mlock_drain_local+0x254/0x4e0 [ 75.844233][ T7186] ? mlock_drain_local+0x254/0x4e0 [ 75.844264][ T7186] walk_page_range_vma+0x63/0x90 [ 75.844285][ T7186] madvise_pageout+0x29e/0x5b0 [ 75.844308][ T7186] ? __lock_acquire+0x4c5/0x1ec0 [ 75.844327][ T7186] ? __pfx_madvise_pageout+0x10/0x10 [ 75.844361][ T7186] ? find_held_lock+0x2b/0x80 [ 75.844386][ T7186] ? mt_find+0x728/0x9b0 [ 75.844407][ T7186] ? mt_find+0x728/0x9b0 [ 75.844431][ T7186] madvise_vma_behavior+0x48b/0x2350 [ 75.844460][ T7186] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 75.844490][ T7186] ? find_vma_prev+0xd8/0x150 [ 75.844518][ T7186] ? find_vma+0xbf/0x140 [ 75.844535][ T7186] ? __pfx_find_vma+0x10/0x10 [ 75.844555][ T7186] ? lock_acquire+0x1d1/0x380 [ 75.844580][ T7186] madvise_walk_vmas+0x30e/0xc50 [ 75.844608][ T7186] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 75.844641][ T7186] ? lock_acquire+0x1d1/0x380 [ 75.844664][ T7186] madvise_do_behavior+0x1ea/0x510 [ 75.844690][ T7186] ? __pfx_madvise_do_behavior+0x10/0x10 [ 75.844715][ T7186] ? down_read+0x13b/0x4c0 [ 75.844749][ T7186] do_madvise+0x238/0x290 [ 75.844772][ T7186] ? __pfx_do_madvise+0x10/0x10 [ 75.844902][ T7186] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.844947][ T7186] ? ksys_write+0x1ac/0x250 [ 75.844964][ T7186] ? __pfx_ksys_write+0x10/0x10 [ 75.844985][ T7186] __x64_sys_madvise+0xa9/0x110 [ 75.845012][ T7186] ? lockdep_hardirqs_on+0x7d/0x110 [ 75.845033][ T7186] do_syscall_64+0x123/0x790 [ 75.845057][ T7186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.845077][ T7186] RIP: 0033:0x7f9a4899e159 [ 75.845095][ T7186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.845114][ T7186] RSP: 002b:00007f9a497de028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 75.845134][ T7186] RAX: ffffffffffffffda RBX: 00007f9a48c26090 RCX: 00007f9a4899e159 [ 75.845146][ T7186] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 75.845157][ T7186] RBP: 00007f9a497de090 R08: 0000000000000000 R09: 0000000000000000 [ 75.845168][ T7186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.845179][ T7186] R13: 00007f9a48c26128 R14: 00007f9a48c26090 R15: 00007ffe89a185e8 [ 75.845204][ T7186] [ 76.018178][ T7203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.022888][ T43] audit: type=1400 audit(1788328930.729:500): avc: denied { unlink } for pid=7199 comm="syz.2.472" name="#5" dev="tmpfs" ino=769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.037023][ T43] audit: type=1804 audit(1788328930.749:501): pid=7197 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.471" name="/newroot/88/file0" dev="tmpfs" ino=491 res=1 errno=0 [ 76.151625][ T43] audit: type=1400 audit(1788328930.869:502): avc: denied { connect } for pid=7210 comm="syz.0.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.152755][ T43] audit: type=1400 audit(1788328930.869:503): avc: denied { write } for pid=7210 comm="syz.0.478" path="socket:[16675]" dev="sockfs" ino=16675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.158743][ T43] audit: type=1800 audit(1788328930.869:504): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.477" name="blocks" dev="configfs" ino=16118 res=0 errno=0 [ 76.161298][ T7209] xt_ecn: cannot match TCP bits for non-tcp packets [ 76.231346][ T7220] ublk_ctrl_add_dev: invalid recovery flags 10 [ 76.330477][ T7225] fuse: Bad value for 'fd' [ 76.464194][ T7236] loop0: detected capacity change from 0 to 3904 [ 76.523237][ T7236] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 76.525757][ T7236] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 76.525816][ T7236] loop0: [ 76.548803][ T7240] jffs2: notice: (7240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.563749][ T7237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.486'. [ 76.798667][ T7257] syzkaller1: entered promiscuous mode [ 76.798724][ T7257] syzkaller1: entered allmulticast mode [ 76.803343][ T7258] ublk_ctrl_add_dev: invalid recovery flags 10 [ 77.116387][ T7274] xt_hashlimit: size too large, truncated to 1048576 [ 77.116490][ T7272] FAULT_INJECTION: forcing a failure. [ 77.116490][ T7272] name failslab, interval 1, probability 0, space 0, times 0 [ 77.116536][ T7272] CPU: 0 UID: 0 PID: 7272 Comm: syz.2.496 Not tainted syzkaller #0 PREEMPT(full) [ 77.116562][ T7272] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.116571][ T7272] Call Trace: [ 77.116575][ T7272] [ 77.116580][ T7272] dump_stack_lvl+0x100/0x190 [ 77.116600][ T7272] should_fail_ex.cold+0x5/0xa [ 77.116614][ T7272] ? lock_acquire+0x1d1/0x380 [ 77.116626][ T7272] should_failslab+0xc2/0x120 [ 77.116640][ T7272] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 77.116656][ T7272] ? zswap_store+0xc6d/0x2e70 [ 77.116675][ T7272] zswap_store+0xc6d/0x2e70 [ 77.116696][ T7272] ? __pfx_zswap_store+0x10/0x10 [ 77.116713][ T7272] ? lock_acquire+0x1d1/0x380 [ 77.116724][ T7272] ? do_raw_spin_lock+0x128/0x260 [ 77.116738][ T7272] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 77.116751][ T7272] ? find_held_lock+0x2b/0x80 [ 77.116765][ T7272] ? swap_writeout+0xdd8/0x1b20 [ 77.116781][ T7272] ? swap_writeout+0xdd8/0x1b20 [ 77.116799][ T7272] swap_writeout+0xde0/0x1b20 [ 77.116818][ T7272] shrink_folio_list+0x4ffb/0x5e40 [ 77.116838][ T7272] ? __pfx_shrink_folio_list+0x10/0x10 [ 77.116850][ T7272] ? __lock_acquire+0x4c5/0x1ec0 [ 77.116869][ T7272] ? __lock_acquire+0x4c5/0x1ec0 [ 77.116891][ T7272] ? __lock_acquire+0x4c5/0x1ec0 [ 77.116902][ T7272] ? __css_rstat_updated+0x1ce/0x590 [ 77.116916][ T7272] ? __pfx___css_rstat_updated+0x10/0x10 [ 77.116931][ T7272] reclaim_folio_list+0xe9/0x5e0 [ 77.116946][ T7272] ? __pfx_reclaim_folio_list+0x10/0x10 [ 77.116958][ T7272] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 77.116976][ T7272] ? lru_gen_update_size+0x431/0xe20 [ 77.116991][ T7272] ? lru_gen_del_folio+0x382/0x5f0 [ 77.117004][ T7272] reclaim_pages+0x428/0x5e0 [ 77.117019][ T7272] ? __pfx_reclaim_pages+0x10/0x10 [ 77.117031][ T7272] ? find_held_lock+0x2b/0x80 [ 77.117046][ T7272] ? madvise_cold_or_pageout_pte_range+0xb8e/0x27b0 [ 77.117063][ T7272] madvise_cold_or_pageout_pte_range+0x15b5/0x27b0 [ 77.117084][ T7272] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 77.117100][ T7272] ? lock_acquire+0x1d1/0x380 [ 77.117110][ T7272] ? free_unref_folios+0x750/0x1790 [ 77.117127][ T7272] ? find_held_lock+0x2b/0x80 [ 77.117141][ T7272] ? free_unref_folios+0x81c/0x1790 [ 77.117158][ T7272] ? free_unref_folios+0x81c/0x1790 [ 77.117174][ T7272] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 77.117190][ T7272] walk_pgd_range+0xbef/0x1e00 [ 77.117216][ T7272] ? __pfx_walk_pgd_range+0x10/0x10 [ 77.117234][ T7272] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 77.117250][ T7272] __walk_page_range+0x171/0x850 [ 77.117273][ T7272] walk_page_range_vma_unsafe+0x209/0x8f0 [ 77.117292][ T7272] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 77.117312][ T7272] ? find_held_lock+0x2b/0x80 [ 77.117326][ T7272] ? mlock_drain_local+0x254/0x4e0 [ 77.117342][ T7272] ? mlock_drain_local+0x254/0x4e0 [ 77.117359][ T7272] walk_page_range_vma+0x63/0x90 [ 77.117371][ T7272] madvise_pageout+0x29e/0x5b0 [ 77.117384][ T7272] ? __lock_acquire+0x4c5/0x1ec0 [ 77.117395][ T7272] ? __pfx_madvise_pageout+0x10/0x10 [ 77.117414][ T7272] ? find_held_lock+0x2b/0x80 [ 77.117428][ T7272] ? mt_find+0x728/0x9b0 [ 77.117441][ T7272] ? mt_find+0x728/0x9b0 [ 77.117455][ T7272] madvise_vma_behavior+0x48b/0x2350 [ 77.117471][ T7272] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 77.117489][ T7272] ? find_vma_prev+0xd8/0x150 [ 77.117504][ T7272] ? find_vma+0xbf/0x140 [ 77.117514][ T7272] ? __pfx_find_vma+0x10/0x10 [ 77.117525][ T7272] ? lock_acquire+0x1d1/0x380 [ 77.117537][ T7272] madvise_walk_vmas+0x30e/0xc50 [ 77.117554][ T7272] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 77.117573][ T7272] ? lock_acquire+0x1d1/0x380 [ 77.117585][ T7272] madvise_do_behavior+0x1ea/0x510 [ 77.117601][ T7272] ? __pfx_madvise_do_behavior+0x10/0x10 [ 77.117616][ T7272] ? down_read+0x13b/0x4c0 [ 77.117636][ T7272] do_madvise+0x238/0x290 [ 77.117649][ T7272] ? __pfx_do_madvise+0x10/0x10 [ 77.117670][ T7272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.117689][ T7272] ? ksys_write+0x1ac/0x250 [ 77.117699][ T7272] ? __pfx_ksys_write+0x10/0x10 [ 77.117711][ T7272] __x64_sys_madvise+0xa9/0x110 [ 77.117725][ T7272] ? lockdep_hardirqs_on+0x7d/0x110 [ 77.117739][ T7272] do_syscall_64+0x123/0x790 [ 77.117753][ T7272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.117765][ T7272] RIP: 0033:0x7fbaf959e159 [ 77.117774][ T7272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.117785][ T7272] RSP: 002b:00007fbafa3f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 77.117796][ T7272] RAX: ffffffffffffffda RBX: 00007fbaf9825fa0 RCX: 00007fbaf959e159 [ 77.117803][ T7272] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 77.117810][ T7272] RBP: 00007fbafa3f8090 R08: 0000000000000000 R09: 0000000000000000 [ 77.117816][ T7272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.117823][ T7272] R13: 00007fbaf9826038 R14: 00007fbaf9825fa0 R15: 00007ffe8d532098 [ 77.117837][ T7272] [ 77.183685][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 77.360129][ T7294] program syz.3.502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.368030][ T7294] random: crng reseeded on system resumption [ 77.369500][ T7294] FAULT_INJECTION: forcing a failure. [ 77.369500][ T7294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 77.369518][ T7294] CPU: 3 UID: 0 PID: 7294 Comm: syz.3.502 Not tainted syzkaller #0 PREEMPT(full) [ 77.369531][ T7294] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.369539][ T7294] Call Trace: [ 77.369544][ T7294] [ 77.369548][ T7294] dump_stack_lvl+0x100/0x190 [ 77.369569][ T7294] should_fail_ex.cold+0x5/0xa [ 77.369582][ T7294] ? prepare_alloc_pages+0x16d/0x5b0 [ 77.369597][ T7294] should_fail_alloc_page+0xeb/0x140 [ 77.369612][ T7294] prepare_alloc_pages+0x1f0/0x5b0 [ 77.369627][ T7294] ? unwind_get_return_address+0x59/0xa0 [ 77.369644][ T7294] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 77.369665][ T7294] ? stack_trace_save+0x8e/0xc0 [ 77.369681][ T7294] ? __pfx_stack_trace_save+0x10/0x10 [ 77.369697][ T7294] ? stack_depot_save_flags+0x27/0x9f0 [ 77.369711][ T7294] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 77.369728][ T7294] ? kasan_save_stack+0x3f/0x50 [ 77.369739][ T7294] ? kasan_save_track+0x14/0x30 [ 77.369750][ T7294] ? __kasan_kmalloc+0xaa/0xb0 [ 77.369760][ T7294] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 77.369774][ T7294] ? memory_bm_create+0x12c/0xcf0 [ 77.369787][ T7294] ? create_basic_memory_bitmaps+0xbd/0x350 [ 77.369801][ T7294] ? snapshot_open+0x23b/0x2b0 [ 77.369817][ T7294] ? misc_open+0x26d/0x450 [ 77.369831][ T7294] ? chrdev_open+0x234/0x6a0 [ 77.369842][ T7294] ? do_dentry_open+0x6ab/0x14d0 [ 77.369851][ T7294] ? vfs_open+0x82/0x3f0 [ 77.369863][ T7294] ? path_openat+0x19fa/0x2440 [ 77.369874][ T7294] ? do_file_open+0x20e/0x430 [ 77.369885][ T7294] ? do_sys_openat2+0x10f/0x1e0 [ 77.369914][ T7294] ? __x64_sys_openat+0x12d/0x210 [ 77.369929][ T7294] ? do_syscall_64+0x123/0x790 [ 77.369942][ T7294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.369963][ T7294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.369976][ T7294] ? policy_nodemask+0xed/0x4f0 [ 77.369993][ T7294] alloc_pages_mpol+0x201/0x550 [ 77.370008][ T7294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 77.370022][ T7294] ? kasan_save_track+0x14/0x30 [ 77.370032][ T7294] ? __kasan_kmalloc+0xaa/0xb0 [ 77.370050][ T7294] alloc_pages_noprof+0x1a/0x160 [ 77.370066][ T7294] get_zeroed_page_noprof+0x18/0xb0 [ 77.370079][ T7294] get_image_page+0x18/0x1a0 [ 77.370094][ T7294] memory_bm_create+0x408/0xcf0 [ 77.370115][ T7294] create_basic_memory_bitmaps+0xbd/0x350 [ 77.370134][ T7294] snapshot_open+0x23b/0x2b0 [ 77.370151][ T7294] ? __pfx_snapshot_open+0x10/0x10 [ 77.370169][ T7294] misc_open+0x26d/0x450 [ 77.370186][ T7294] ? __pfx_misc_open+0x10/0x10 [ 77.370201][ T7294] chrdev_open+0x234/0x6a0 [ 77.370213][ T7294] ? __pfx_chrdev_open+0x10/0x10 [ 77.370226][ T7294] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 77.370245][ T7294] do_dentry_open+0x6ab/0x14d0 [ 77.370254][ T7294] ? __pfx_chrdev_open+0x10/0x10 [ 77.370269][ T7294] vfs_open+0x82/0x3f0 [ 77.370284][ T7294] path_openat+0x19fa/0x2440 [ 77.370299][ T7294] ? __pfx_path_openat+0x10/0x10 [ 77.370315][ T7294] do_file_open+0x20e/0x430 [ 77.370328][ T7294] ? __pfx_do_file_open+0x10/0x10 [ 77.370351][ T7294] ? _raw_spin_unlock+0x28/0x50 [ 77.370368][ T7294] ? alloc_fd+0x471/0x7a0 [ 77.370385][ T7294] do_sys_openat2+0x10f/0x1e0 [ 77.370398][ T7294] ? __pfx_do_sys_openat2+0x10/0x10 [ 77.370412][ T7294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 77.370430][ T7294] __x64_sys_openat+0x12d/0x210 [ 77.370444][ T7294] ? __pfx___x64_sys_openat+0x10/0x10 [ 77.370464][ T7294] do_syscall_64+0x123/0x790 [ 77.370477][ T7294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.370488][ T7294] RIP: 0033:0x7f8da639e159 [ 77.370499][ T7294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.370509][ T7294] RSP: 002b:00007f8da7184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.370520][ T7294] RAX: ffffffffffffffda RBX: 00007f8da6625fa0 RCX: 00007f8da639e159 [ 77.370528][ T7294] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 77.370534][ T7294] RBP: 00007f8da6435024 R08: 0000000000000000 R09: 0000000000000000 [ 77.370541][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.370547][ T7294] R13: 00007f8da6626038 R14: 00007f8da6625fa0 R15: 00007ffc98044a88 [ 77.370562][ T7294] [ 77.386799][ T7294] gadgetfs: bound to dummy_udc driver [ 77.439501][ T7299] x_tables: duplicate underflow at hook 2 [ 77.440023][ T7299] geneve1: entered allmulticast mode [ 77.563459][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.563531][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.563740][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.563802][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 77.563860][ C0] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.563886][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 77.563912][ C0] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.563937][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 77.563961][ C0] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.563985][ C0] Buffer I/O error on dev loop6, logical block 4, async page read [ 77.564009][ C0] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.564034][ C0] Buffer I/O error on dev loop6, logical block 5, async page read [ 77.565023][ C0] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.565051][ C0] Buffer I/O error on dev loop6, logical block 6, async page read [ 77.567975][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.568009][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 77.568021][ C0] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 77.568050][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 77.572406][ T5139] ldm_validate_partition_table(): Disk read failed. [ 77.576437][ T5139] Dev loop6: unable to read RDB block 0 [ 77.583830][ T5139] loop6: unable to read partition table [ 77.583949][ T5139] loop6: partition table beyond EOD, truncated [ 77.690560][ T7327] netlink: 'syz.2.510': attribute type 2 has an invalid length. [ 77.724639][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.513'. [ 77.778256][ T7325] nfsd: exp_rootfh path not found ӥ)3 @$/ [ 77.906896][ T7354] FAULT_INJECTION: forcing a failure. [ 77.906896][ T7354] name failslab, interval 1, probability 0, space 0, times 0 [ 77.906960][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.1.521 Not tainted syzkaller #0 PREEMPT(full) [ 77.906989][ T7354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 77.906997][ T7354] Call Trace: [ 77.907006][ T7354] [ 77.907011][ T7354] dump_stack_lvl+0x100/0x190 [ 77.907037][ T7354] should_fail_ex.cold+0x5/0xa [ 77.907054][ T7354] should_failslab+0xc2/0x120 [ 77.907071][ T7354] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 77.907084][ T7354] ? gadget_dev_desc_UDC_store+0x51/0x2e0 [ 77.907104][ T7354] kstrdup+0x51/0xe0 [ 77.907121][ T7354] gadget_dev_desc_UDC_store+0x51/0x2e0 [ 77.907135][ T7354] configfs_write_iter+0x302/0x4e0 [ 77.907154][ T7354] vfs_write+0x6af/0x1050 [ 77.907171][ T7354] ? __pfx_configfs_write_iter+0x10/0x10 [ 77.907188][ T7354] ? __pfx_vfs_write+0x10/0x10 [ 77.907203][ T7354] ? find_held_lock+0x2b/0x80 [ 77.907228][ T7354] ksys_write+0x12a/0x250 [ 77.907237][ T7354] ? __pfx_ksys_write+0x10/0x10 [ 77.907252][ T7354] do_syscall_64+0x123/0x790 [ 77.907269][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.907280][ T7354] RIP: 0033:0x7fdac699e159 [ 77.907290][ T7354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.907301][ T7354] RSP: 002b:00007fdac78d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.907315][ T7354] RAX: ffffffffffffffda RBX: 00007fdac6c25fa0 RCX: 00007fdac699e159 [ 77.907322][ T7354] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 77.907329][ T7354] RBP: 00007fdac78d3090 R08: 0000000000000000 R09: 0000000000000000 [ 77.907335][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.907341][ T7354] R13: 00007fdac6c26038 R14: 00007fdac6c25fa0 R15: 00007fff01a219b8 [ 77.907356][ T7354] [ 78.124778][ T7384] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7384 comm=syz.3.530 [ 78.133980][ T7387] FAULT_INJECTION: forcing a failure. [ 78.133980][ T7387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.134062][ T7387] CPU: 3 UID: 0 PID: 7387 Comm: syz.1.531 Not tainted syzkaller #0 PREEMPT(full) [ 78.134096][ T7387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.134108][ T7387] Call Trace: [ 78.134115][ T7387] [ 78.134122][ T7387] dump_stack_lvl+0x100/0x190 [ 78.134151][ T7387] should_fail_ex.cold+0x5/0xa [ 78.134177][ T7387] _copy_to_user+0x32/0xd0 [ 78.134205][ T7387] simple_read_from_buffer+0xcb/0x170 [ 78.134228][ T7387] proc_fail_nth_read+0x1af/0x230 [ 78.134249][ T7387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.134272][ T7387] ? rw_verify_area+0xce/0x6d0 [ 78.134297][ T7387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.134316][ T7387] vfs_read+0x1e4/0xb40 [ 78.134344][ T7387] ? lock_acquire+0x1d1/0x380 [ 78.134361][ T7387] ? __fget_files+0x34/0x3d0 [ 78.134381][ T7387] ? __pfx_vfs_read+0x10/0x10 [ 78.134406][ T7387] ? find_held_lock+0x2b/0x80 [ 78.134430][ T7387] ? __fget_files+0x215/0x3d0 [ 78.134454][ T7387] ? __fget_files+0x21f/0x3d0 [ 78.134482][ T7387] ksys_read+0x12a/0x250 [ 78.134498][ T7387] ? __pfx_ksys_read+0x10/0x10 [ 78.134521][ T7387] do_syscall_64+0x123/0x790 [ 78.134546][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.134564][ T7387] RIP: 0033:0x7fdac695e98e [ 78.134580][ T7387] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 78.134596][ T7387] RSP: 002b:00007fdac78d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.134614][ T7387] RAX: ffffffffffffffda RBX: 00007fdac78d36c0 RCX: 00007fdac695e98e [ 78.134627][ T7387] RDX: 000000000000000f RSI: 00007fdac78d30a0 RDI: 0000000000000004 [ 78.134643][ T7387] RBP: 00007fdac78d3090 R08: 0000000000000000 R09: 0000000000000000 [ 78.134654][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.134664][ T7387] R13: 00007fdac6c26038 R14: 00007fdac6c25fa0 R15: 00007fff01a219b8 [ 78.134690][ T7387] [ 78.151272][ T9] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 78.265022][ T7397] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 78.270383][ T7397] SELinux: Context system_u:object_r:systemd_passwd_agent_exec_t:s0 is not valid (left unmapped). [ 78.350410][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.350481][ T9] usb 5-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 78.382309][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 78.385318][ T9] usb 5-1: config 8 has an invalid interface number: 198 but max is 0 [ 78.385339][ T9] usb 5-1: config 8 has no interface number 0 [ 78.385372][ T9] usb 5-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 78.387953][ T9] usb 5-1: string descriptor 0 read error: -22 [ 78.388057][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.409339][ T7356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 78.450495][ T7404] team0: Port device team_slave_0 removed [ 78.475029][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.537'. [ 78.549199][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.549351][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.549449][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.549541][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.549638][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.549735][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.550895][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.550994][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.551099][ T7418] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 78.579117][ T7429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7429 comm=syz.2.538 [ 78.635987][ T7356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.636265][ T7356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.752771][ T5812] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 78.838787][ T5812] usb 5-1: USB disconnect, device number 2 [ 79.767253][ T7462] geneve1: entered allmulticast mode [ 79.773157][ T7462] UDC core: g1: couldn't find an available UDC or it's busy [ 79.794954][ T7469] netlink: 68 bytes leftover after parsing attributes in process `syz.0.556'. [ 79.879645][ T5735] udevd[5735]: error opening ATTR{/sys/devices/platform/usbip-vudc.0/gadget.32/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 79.905208][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.559'. [ 79.905268][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.559'. [ 79.986403][ T43] kauditd_printk_skb: 38 callbacks suppressed [ 79.986555][ T43] audit: type=1400 audit(1788328934.699:543): avc: denied { setattr } for pid=7475 comm="syz.0.559" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 80.270204][ T7507] program syz.0.569 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.279642][ T7507] FAULT_INJECTION: forcing a failure. [ 80.279642][ T7507] name failslab, interval 1, probability 0, space 0, times 0 [ 80.279736][ T7507] CPU: 3 UID: 0 PID: 7507 Comm: syz.0.569 Not tainted syzkaller #0 PREEMPT(full) [ 80.279770][ T7507] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.279783][ T7507] Call Trace: [ 80.279789][ T7507] [ 80.279796][ T7507] dump_stack_lvl+0x100/0x190 [ 80.279826][ T7507] should_fail_ex.cold+0x5/0xa [ 80.279851][ T7507] should_failslab+0xc2/0x120 [ 80.279874][ T7507] kmem_cache_alloc_noprof+0x92/0x6a0 [ 80.279893][ T7507] ? __pfx_map_id_range_down+0x10/0x10 [ 80.279914][ T7507] ? security_inode_alloc+0x3b/0x2c0 [ 80.279943][ T7507] security_inode_alloc+0x3b/0x2c0 [ 80.279968][ T7507] inode_init_always_gfp+0xc6f/0xfb0 [ 80.279991][ T7507] alloc_inode+0x8e/0x250 [ 80.280015][ T7507] new_inode+0x22/0x1c0 [ 80.280040][ T7507] gadgetfs_make_inode+0x23/0x1c0 [ 80.280067][ T7507] gadgetfs_create_file+0x34/0xd0 [ 80.280091][ T7507] gadgetfs_bind+0x42b/0x890 [ 80.280121][ T7507] gadget_bind_driver+0x28c/0xbf0 [ 80.280147][ T7507] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 80.280169][ T7507] ? __pfx_gadget_bind_driver+0x10/0x10 [ 80.280195][ T7507] really_probe+0x241/0xa60 [ 80.280214][ T7507] __driver_probe_device+0x210/0x460 [ 80.280228][ T7507] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 80.280251][ T7507] driver_probe_device+0x4a/0x140 [ 80.280272][ T7507] __driver_attach+0x21f/0x5b0 [ 80.280290][ T7507] ? __pfx___driver_attach+0x10/0x10 [ 80.280305][ T7507] bus_for_each_dev+0x13e/0x1d0 [ 80.280329][ T7507] ? __pfx_bus_for_each_dev+0x10/0x10 [ 80.280349][ T7507] ? bus_add_driver+0x2b5/0x5b0 [ 80.280378][ T7507] bus_add_driver+0x305/0x5b0 [ 80.280405][ T7507] driver_register+0x1e2/0x360 [ 80.280430][ T7507] usb_gadget_register_driver_owner+0x132/0x210 [ 80.280461][ T7507] dev_config+0xdce/0x1610 [ 80.280493][ T7507] ? ksys_write+0xc0/0x250 [ 80.280511][ T7507] ? __pfx_dev_config+0x10/0x10 [ 80.280541][ T7507] vfs_write+0x2aa/0x1050 [ 80.280568][ T7507] ? __pfx_dev_config+0x10/0x10 [ 80.280591][ T7507] ? lock_acquire+0x1d1/0x380 [ 80.280610][ T7507] ? __fget_files+0x34/0x3d0 [ 80.280630][ T7507] ? __pfx_vfs_write+0x10/0x10 [ 80.280655][ T7507] ? find_held_lock+0x2b/0x80 [ 80.280679][ T7507] ? __fget_files+0x215/0x3d0 [ 80.280720][ T7507] ? __fget_files+0x21f/0x3d0 [ 80.280741][ T7507] ksys_write+0x12a/0x250 [ 80.280752][ T7507] ? __pfx_ksys_write+0x10/0x10 [ 80.280767][ T7507] do_syscall_64+0x123/0x790 [ 80.280782][ T7507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.280794][ T7507] RIP: 0033:0x7f9a4899e159 [ 80.280804][ T7507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.280815][ T7507] RSP: 002b:00007f9a497ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 80.280826][ T7507] RAX: ffffffffffffffda RBX: 00007f9a48c25fa0 RCX: 00007f9a4899e159 [ 80.280833][ T7507] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000007 [ 80.280842][ T7507] RBP: 00007f9a48a35024 R08: 0000000000000000 R09: 0000000000000000 [ 80.280848][ T7507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.280854][ T7507] R13: 00007f9a48c26038 R14: 00007f9a48c25fa0 R15: 00007ffe89a185e8 [ 80.280869][ T7507] [ 80.285981][ T7507] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 80.286003][ T7507] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 80.288102][ T7507] gadgetfs: bound to dummy_udc driver [ 80.658615][ T7531] netlink: 112 bytes leftover after parsing attributes in process `syz.2.579'. [ 80.698805][ T7540] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 80.705229][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 80.747106][ T43] audit: type=1400 audit(1788328935.459:544): avc: denied { connect } for pid=7543 comm="syz.2.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.761981][ T7546] lo speed is unknown, defaulting to 1000 [ 80.762056][ T7546] lo speed is unknown, defaulting to 1000 [ 80.763566][ T7546] lo speed is unknown, defaulting to 1000 [ 80.765087][ T7546] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 80.765110][ T7546] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 80.765133][ T7546] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 80.767295][ T7546] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 80.770072][ T7546] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -2 [ 80.796609][ T7546] lo speed is unknown, defaulting to 1000 [ 80.801094][ T7546] lo speed is unknown, defaulting to 1000 [ 80.801811][ T7546] lo speed is unknown, defaulting to 1000 [ 80.802588][ T7546] lo speed is unknown, defaulting to 1000 [ 80.804036][ T7546] lo speed is unknown, defaulting to 1000 [ 80.910826][ T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 81.079411][ T43] audit: type=1400 audit(1788328935.789:545): avc: denied { wake_alarm } for pid=7563 comm="syz.3.590" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 81.091636][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 81.094574][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 81.094602][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.096572][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 81.096594][ T9] usb 5-1: Product: syz [ 81.096607][ T9] usb 5-1: Manufacturer: syz [ 81.096620][ T9] usb 5-1: SerialNumber: syz [ 81.107562][ T7538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 81.171582][ T43] audit: type=1400 audit(1788328935.889:546): avc: denied { ioctl } for pid=7563 comm="syz.3.590" path="/dev/sg0" dev="devtmpfs" ino=720 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.336616][ T43] audit: type=1400 audit(1788328936.049:547): avc: denied { ioctl } for pid=7571 comm="syz.2.592" path="socket:[19486]" dev="sockfs" ino=19486 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 81.341758][ T9] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 81.371810][ T7574] program syz.1.593 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.377577][ T43] audit: type=1400 audit(1788328936.089:548): avc: denied { mount } for pid=7563 comm="syz.3.590" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.432494][ T7577] ================================================================== [ 81.432516][ T7577] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x36/0x50 [ 81.432541][ T7577] Read of size 1 at addr ffff888027931818 by task syz.1.593/7577 [ 81.432551][ T7577] [ 81.432559][ T7577] CPU: 1 UID: 0 PID: 7577 Comm: syz.1.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.432575][ T7577] Tainted: [L]=SOFTLOCKUP [ 81.432579][ T7577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.432586][ T7577] Call Trace: [ 81.432590][ T7577] [ 81.432594][ T7577] dump_stack_lvl+0x100/0x190 [ 81.432612][ T7577] print_report+0x13d/0x4b0 [ 81.432627][ T7577] ? __virt_addr_valid+0x239/0x430 [ 81.432640][ T7577] ? _raw_spin_lock_irq+0x36/0x50 [ 81.432656][ T7577] kasan_report+0xdf/0x1c0 [ 81.432670][ T7577] ? _raw_spin_lock_irq+0x36/0x50 [ 81.432687][ T7577] ? _raw_spin_lock_irq+0x36/0x50 [ 81.432703][ T7577] __kasan_check_byte+0x36/0x50 [ 81.432717][ T7577] lock_acquire+0x132/0x380 [ 81.432729][ T7577] ? _raw_spin_lock_irq+0x45/0x50 [ 81.432746][ T7577] _raw_spin_lock_irq+0x36/0x50 [ 81.432761][ T7577] ? gadget_dev_open+0x44/0x1b0 [ 81.432774][ T7577] gadget_dev_open+0x44/0x1b0 [ 81.432788][ T7577] do_dentry_open+0x6ab/0x14d0 [ 81.432798][ T7577] ? __pfx_gadget_dev_open+0x10/0x10 [ 81.432812][ T7577] vfs_open+0x82/0x3f0 [ 81.432824][ T7577] path_openat+0x19fa/0x2440 [ 81.432837][ T7577] ? __pfx_path_openat+0x10/0x10 [ 81.432851][ T7577] do_file_open+0x20e/0x430 [ 81.432863][ T7577] ? __pfx_do_file_open+0x10/0x10 [ 81.432880][ T7577] ? _raw_spin_unlock+0x28/0x50 [ 81.432895][ T7577] ? alloc_fd+0x471/0x7a0 [ 81.432909][ T7577] do_sys_openat2+0x10f/0x1e0 [ 81.432921][ T7577] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.432937][ T7577] __x64_sys_openat+0x12d/0x210 [ 81.432950][ T7577] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.432966][ T7577] do_syscall_64+0x123/0x790 [ 81.432978][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.432996][ T7577] RIP: 0033:0x7fdac699e159 [ 81.433005][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.433017][ T7577] RSP: 002b:00007fdac78b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.433029][ T7577] RAX: ffffffffffffffda RBX: 00007fdac6c26090 RCX: 00007fdac699e159 [ 81.433037][ T7577] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 81.433045][ T7577] RBP: 00007fdac6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 81.433053][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.433060][ T7577] R13: 00007fdac6c26128 R14: 00007fdac6c26090 R15: 00007fff01a219b8 [ 81.433071][ T7577] [ 81.433076][ T7577] [ 81.433078][ T7577] Allocated by task 5736: [ 81.433084][ T7577] kasan_save_stack+0x30/0x50 [ 81.433095][ T7577] kasan_save_track+0x14/0x30 [ 81.433104][ T7577] __kasan_kmalloc+0xaa/0xb0 [ 81.433113][ T7577] __kmalloc_cache_noprof+0x2f8/0x6d0 [ 81.433127][ T7577] gadgetfs_fill_super+0x1da/0x430 [ 81.433139][ T7577] get_tree_single+0xe2/0x190 [ 81.433147][ T7577] vfs_get_tree+0x92/0x320 [ 81.433160][ T7577] path_mount+0x7d0/0x24c0 [ 81.433172][ T7577] __x64_sys_mount+0x293/0x310 [ 81.433185][ T7577] do_syscall_64+0x123/0x790 [ 81.433195][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.433204][ T7577] [ 81.433206][ T7577] Freed by task 7507: [ 81.433211][ T7577] kasan_save_stack+0x30/0x50 [ 81.433220][ T7577] kasan_save_track+0x14/0x30 [ 81.433230][ T7577] kasan_save_free_info+0x3b/0x70 [ 81.433243][ T7577] __kasan_slab_free+0x5f/0x80 [ 81.433253][ T7577] kfree+0x22b/0x6d0 [ 81.433265][ T7577] put_dev+0xb4/0xd0 [ 81.433275][ T7577] dev_release+0x116/0x1b0 [ 81.433286][ T7577] __fput+0x3ff/0xb50 [ 81.433296][ T7577] task_work_run+0x150/0x240 [ 81.433310][ T7577] exit_to_user_mode_loop+0x1d8/0x700 [ 81.433321][ T7577] do_syscall_64+0x661/0x790 [ 81.433332][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.433343][ T7577] [ 81.433345][ T7577] The buggy address belongs to the object at ffff888027931800 [ 81.433345][ T7577] which belongs to the cache kmalloc-1k of size 1024 [ 81.433353][ T7577] The buggy address is located 24 bytes inside of [ 81.433353][ T7577] freed 1024-byte region [ffff888027931800, ffff888027931c00) [ 81.433363][ T7577] [ 81.433365][ T7577] The buggy address belongs to the physical page: [ 81.433370][ T7577] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888027935000 pfn:0x27930 [ 81.433380][ T7577] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 81.433388][ T7577] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 81.433398][ T7577] page_type: f5(slab) [ 81.433407][ T7577] raw: 00fff00000000240 ffff88801c042dc0 ffffea0001645010 ffffea00009ace10 [ 81.433416][ T7577] raw: ffff888027935000 000000000010000f 00000000f5000000 0000000000000000 [ 81.433425][ T7577] head: 00fff00000000240 ffff88801c042dc0 ffffea0001645010 ffffea00009ace10 [ 81.433434][ T7577] head: ffff888027935000 000000000010000f 00000000f5000000 0000000000000000 [ 81.433443][ T7577] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 81.433452][ T7577] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 81.433457][ T7577] page dumped because: kasan: bad access detected [ 81.433462][ T7577] page_owner tracks the page as allocated [ 81.433466][ T7577] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5469, tgid 5469 (dhcpcd-run-hook), ts 21714988243 [ 81.433482][ T7577] post_alloc_hook+0xfd/0x120 [ 81.433495][ T7577] get_page_from_freelist+0x110d/0x35d0 [ 81.433509][ T7577] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 81.433524][ T7577] new_slab+0xa9/0x6e0 [ 81.433536][ T7577] refill_objects+0xe3/0x410 [ 81.433550][ T7577] __pcs_replace_empty_main+0x35e/0x650 [ 81.433563][ T7577] __kmalloc_noprof+0x67c/0x840 [ 81.433572][ T7577] load_elf_phdrs+0x102/0x210 [ 81.433581][ T7577] load_elf_binary+0x15ef/0x51a0 [ 81.433608][ T7577] bprm_execve+0x8cd/0x1940 [ 81.433625][ T7577] do_execveat_common.isra.0+0x4a5/0x580 [ 81.433635][ T7577] __x64_sys_execve+0x93/0xd0 [ 81.433645][ T7577] do_syscall_64+0x123/0x790 [ 81.433656][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.433666][ T7577] page last free pid 5467 tgid 5467 ts 21662978041 stack trace: [ 81.433673][ T7577] __free_frozen_pages+0x79f/0x10f0 [ 81.433687][ T7577] qlist_free_all+0x47/0xf0 [ 81.433695][ T7577] kasan_quarantine_reduce+0x1a0/0x1f0 [ 81.433706][ T7577] __kasan_slab_alloc+0x69/0x90 [ 81.433717][ T7577] kmem_cache_alloc_noprof+0x269/0x6a0 [ 81.433727][ T7577] do_getname+0x35/0x390 [ 81.433740][ T7577] do_sys_openat2+0xc7/0x1e0 [ 81.433751][ T7577] __x64_sys_openat+0x12d/0x210 [ 81.433763][ T7577] do_syscall_64+0x123/0x790 [ 81.433773][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.433783][ T7577] [ 81.433785][ T7577] Memory state around the buggy address: [ 81.433790][ T7577] ffff888027931700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.433797][ T7577] ffff888027931780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 81.433804][ T7577] >ffff888027931800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.433809][ T7577] ^ [ 81.433814][ T7577] ffff888027931880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.433821][ T7577] ffff888027931900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.433826][ T7577] ================================================================== [ 81.433832][ T7577] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.693400][ T7577] CPU: 1 UID: 0 PID: 7577 Comm: syz.1.593 Tainted: G L syzkaller #0 PREEMPT(full) [ 81.697330][ T7577] Tainted: [L]=SOFTLOCKUP [ 81.699099][ T7577] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 81.702665][ T7577] Call Trace: [ 81.703752][ T7577] [ 81.704834][ T7577] dump_stack_lvl+0x100/0x190 [ 81.706473][ T7577] vpanic+0x553/0x970 [ 81.707998][ T7577] ? __pfx_vpanic+0x10/0x10 [ 81.710051][ T7577] ? __pfx_vprintk_emit+0x10/0x10 [ 81.712239][ T7577] ? _raw_spin_lock_irq+0x36/0x50 [ 81.714404][ T7577] panic+0xd1/0xe0 [ 81.716040][ T7577] ? __pfx_panic+0x10/0x10 [ 81.717847][ T7577] ? end_report.part.0+0x23/0x90 [ 81.719848][ T7577] ? rcu_is_watching+0x13/0xc0 [ 81.721919][ T7577] ? end_report.part.0+0x23/0x90 [ 81.724136][ T7577] check_panic_on_warn.cold+0x19/0x34 [ 81.726564][ T7577] end_report.part.0+0x3a/0x90 [ 81.728412][ T7577] kasan_report.cold+0xe/0x18 [ 81.730226][ T7577] ? _raw_spin_lock_irq+0x36/0x50 [ 81.732379][ T7577] ? _raw_spin_lock_irq+0x36/0x50 [ 81.734542][ T7577] __kasan_check_byte+0x36/0x50 [ 81.736541][ T7577] lock_acquire+0x132/0x380 [ 81.738285][ T7577] ? _raw_spin_lock_irq+0x45/0x50 [ 81.740353][ T7577] _raw_spin_lock_irq+0x36/0x50 [ 81.742370][ T7577] ? gadget_dev_open+0x44/0x1b0 [ 81.744333][ T7577] gadget_dev_open+0x44/0x1b0 [ 81.746095][ T7577] do_dentry_open+0x6ab/0x14d0 [ 81.748145][ T7577] ? __pfx_gadget_dev_open+0x10/0x10 [ 81.750520][ T7577] vfs_open+0x82/0x3f0 [ 81.752673][ T7577] path_openat+0x19fa/0x2440 [ 81.754686][ T7577] ? __pfx_path_openat+0x10/0x10 [ 81.756662][ T7577] do_file_open+0x20e/0x430 [ 81.758450][ T7577] ? __pfx_do_file_open+0x10/0x10 [ 81.760300][ T7577] ? _raw_spin_unlock+0x28/0x50 [ 81.762001][ T7577] ? alloc_fd+0x471/0x7a0 [ 81.763574][ T7577] do_sys_openat2+0x10f/0x1e0 [ 81.765282][ T7577] ? __pfx_do_sys_openat2+0x10/0x10 [ 81.767161][ T7577] __x64_sys_openat+0x12d/0x210 [ 81.768969][ T7577] ? __pfx___x64_sys_openat+0x10/0x10 [ 81.770656][ T7577] do_syscall_64+0x123/0x790 [ 81.772128][ T7577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.774028][ T7577] RIP: 0033:0x7fdac699e159 [ 81.775778][ T7577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.782248][ T7577] RSP: 002b:00007fdac78b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 81.785030][ T7577] RAX: ffffffffffffffda RBX: 00007fdac6c26090 RCX: 00007fdac699e159 [ 81.787736][ T7577] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 81.790354][ T7577] RBP: 00007fdac6a35024 R08: 0000000000000000 R09: 0000000000000000 [ 81.792992][ T7577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.795673][ T7577] R13: 00007fdac6c26128 R14: 00007fdac6c26090 R15: 00007fff01a219b8 [ 81.798244][ T7577] [ 81.799869][ T7577] Kernel Offset: disabled [ 81.801223][ T7577] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:02:16 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000002 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff8edec060 RBP=ffffffff8edec060 RSP=ffffc90003ab6a78 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000200 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81efa24e RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fbafa3d76c0 ffffffff 00c00000 GS =0000 ffff8880d5b61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c266c8b CR3=0000000027d54000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e697a65657266 5f746e657261702e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff01a21ea6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff01a21ea6 00007fff01a21eac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000073 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afe815 RDI=ffffffff9bc63ca0 RBP=ffffffff9bc63c60 RSP=ffffc90003b47100 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000073 R14=0000000000000004 R15=ffffc90003b47418 RIP=ffffffff85afe83f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fdac78b26c0 ffffffff 00c00000 GS =0000 ffff8880d5c61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c40e12c CR3=000000010e31e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff01a21ea6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff01a21ea6 00007fff01a21eac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6a35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6a35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6a357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6a35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdac6bf25f8 00007fdac6bf25c8 00007fdac6bf2600 00007fdac6bf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffffffff8edec060 RCX=ffffffff91f7d801 RDX=0000000000000000 RSI=ffffffff8e4e2047 RDI=ffffffff8c620e80 RBP=0000000000000002 RSP=ffffc90003a66220 R8 =0000000000000001 R9 =0000000000000007 R10=0000000000000200 R11=00000000000189b7 R12=ffff8880276d2580 R13=ffffc90003a66300 R14=0000000000000202 R15=ffffc90003a66334 RIP=ffffffff8bcf68bb RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbafa3f86c0 ffffffff 00c00000 GS =0000 ffff8880d5d61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f8da45f6d58 CR3=00000000573bd000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8da715d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc98044f76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc98044f76 00007ffc98044f7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8da6435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8da6435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8da64357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8da6435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8da65f2600 00007f8da65f25e0 00007f8da65f25e8 00007f8da65f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8da715d020 00007f8da65f25c0 00007f8da65f25d0 00007f8da65f2610 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8da65f25f8 00007f8da65f25c8 00007f8da65f2600 00007f8da65f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff88805ca9a580 RCX=ffffffff81af4c6a RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88805ca9a580 RBP=0000000000000000 RSP=ffffc90003af7ac0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00007f8da45d45c0 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff820bf010 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f8da45d56c0 ffffffff 00c00000 GS =0000 ffff8880d5e61000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbafa35da08 CR3=000000010e209000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000