last executing test programs: 1.248998494s ago: executing program 2 (id=711): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x3, 0x7fffffffffffffff, 0x0, 0x1000000}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.191871374s ago: executing program 2 (id=712): socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(0x0, 0x7) 1.190719977s ago: executing program 2 (id=715): futex(&(0x7f0000000340)=0x1, 0x8, 0x1, 0x0, 0x0, 0x2) futex(&(0x7f0000000000)=0x20001, 0x9, 0x2, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000580), 0x1) io_setup(0x2, &(0x7f0000000080)=0x0) io_pgetevents(r0, 0x0, 0x9, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000240)={&(0x7f0000000200)={[0x6]}, 0x8}) 1.001739675s ago: executing program 2 (id=718): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x40, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38, 0x65]}}]}) read$FUSE(r4, &(0x7f0000009780)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1694, r2, 0x4, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffffe, 0x46}}}}, [@NL80211_ATTR_TID_CONFIG={0x448, 0x11d, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xdc, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x12, 0xb, 0x5, 0x60, 0x24, 0x9, 0x36, 0x12, 0x39, 0x3]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf3, 0x1, 0x9, 0x9c, 0x7fff, 0x6, 0x6f]}}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x1, 0x3ff, 0x7, 0x29, 0x6, 0x2]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x30, 0x1d, 0x48, 0x6c, 0x1, 0x4, 0x6, 0x2, 0x30, 0x2]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x4, 0x9}, {0x4, 0x4}, {0x3, 0x6}, {0x6}, {0x6, 0x9}, {0x0, 0x8}, {0x4, 0x6}, {0x1}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x7, 0x2}, {0x2, 0x3}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x5}, {0x2}, {}, {0x7, 0x4}, {0x0, 0x9}, {0x7, 0x1}, {0x0, 0x6}, {0x7, 0x1}, {0x7, 0x6}, {0x4, 0x5}, {0x4, 0x6}, {0x1}, {0x3, 0x7}, {0x3}, {0x0, 0x5}, {0x2}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0xa}, {0x6, 0x1}, {0x0, 0x2}, {0x3, 0xa}, {0x7, 0x2}, {0x2, 0x9}, {0x1, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x34e9f9e1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x304, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2d8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0xc, 0x6, 0x69e59104039bd27e, 0x36, 0x3, 0x2, 0xc, 0x1, 0x5, 0x18, 0x5, 0x0, 0x4, 0x48, 0x5, 0x48, 0x12, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x9}, {0x0, 0xa}, {0x3, 0x2}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x3}, {0x1, 0x1}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x5}, {0x0, 0x5}, {0x6, 0xa}, {0x5, 0x7}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x2, 0x7}, {0x3, 0x9}, {0x3, 0x9}, {0x3, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x4}, {0x0, 0xc}, {0x6}, {0x6, 0x6}, {0x3, 0x2}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x3}, {0x0, 0x5}, {0x7, 0x1}, {0x6, 0x3}, {0x0, 0x9}, {0x7, 0x5}, {0x4, 0x8}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0xa}, {0x7, 0x2}, {0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x0, 0x4}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x9}, {0x1, 0x5}, {0x7, 0x4}, {0x3}, {0x0, 0x2}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x90e8, 0xe3, 0x8, 0xe54f, 0x1, 0x80, 0x2d72]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x9, 0x9, 0x1800, 0x5, 0x8000, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x5, 0x4}, {0x3, 0x3}, {0x2, 0x6}, {0x7, 0x6}, {}, {0x0, 0xa}, {0x7, 0x9}, {0x0, 0x3}, {0x2, 0x6}, {0x4, 0x9}, {0x3, 0x2}, {0x4, 0x2}, {0x1, 0x5}, {0x5, 0x7}, {0x4, 0x4}, {0x5, 0x3}, {0x1, 0xa}, {0x6, 0xa}, {0x3, 0x5}, {0x7, 0x6}, {0x0, 0x4}, {0x4, 0x4}, {0x6, 0x7}, {0x3, 0x6}, {0x2, 0xa}, {0x1, 0x8}, {0x7, 0x2}, {0x6}, {0x5}, {0x4, 0x8}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x4, 0x1, 0x12, 0x4, 0x18, 0x6c, 0x4, 0x60, 0x9, 0x48, 0x30, 0x9, 0x30, 0x9, 0x35, 0x6c, 0x0, 0x5, 0x3]}]}, @NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2d, 0x2, [{0x4}, {0x3, 0x9}, {0x0, 0xa}, {0x4, 0x7}, {0x5, 0x5}, {0x0, 0x5}, {0x1, 0xa}, {0x2, 0x2}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x6}, {0x3, 0x4}, {0x7, 0x2}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x9}, {0x1, 0x7}, {0x6, 0x7}, {0x1, 0x1}, {0x3, 0x9}, {0x4, 0xa}, {0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x3, 0x6}, {0x5, 0x8}, {0x4}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x6}, {0x4, 0x8}, {0x6, 0x1}, {0x6, 0x1}, {}, {0x6, 0x5}, {0x2, 0xa}, {0x2, 0x7}, {0x5, 0xa}, {0x4, 0x8}, {0x6, 0x8}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x0, 0x6, 0x9, 0x7ff, 0x400, 0xc, 0xfffa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8, 0x8, 0x9, 0xfff, 0x7, 0x6, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x48, 0x4d, 0x1e6cbc0665dd36c3, 0x30, 0x18, 0x60, 0x1b, 0x60, 0x2, 0x36, 0x0, 0x7, 0x30, 0x4, 0xa, 0x12, 0x16, 0x3, 0x60, 0x9, 0x1b, 0x16, 0x12, 0x5, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x9, 0x26ba, 0x18a3, 0x81, 0x8, 0x480]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfe01, 0x6, 0x1, 0x1, 0xfff, 0x6, 0xfffa, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe8d7, 0x76c, 0x8b2e, 0x0, 0x7, 0x4, 0x0, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x30, 0x5, 0x98e4f259ac338ebc, 0x1, 0x3, 0x0, 0x9, 0x1b, 0x72, 0x60, 0x4, 0x4, 0x6c, 0x6, 0x4, 0xb, 0x16, 0x12, 0xc, 0x6, 0x24, 0x6, 0x3d, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x180c, 0x401, 0xff, 0x81, 0x1ff, 0x0, 0x4]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x30, 0xc, 0x18, 0xc, 0x9, 0x9, 0x3, 0x24, 0x6c]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x2, 0x2, 0x36, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5500, 0x1ff, 0xcbc5, 0x1, 0x1, 0x9, 0x3]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1c, 0x6, 0x99f5, 0xa, 0x3, 0x3ff, 0x1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x4}, {0x0, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x52, 0x4, 0x9, 0x2, 0x2, 0x5, 0x24, 0x3, 0x4, 0x60, 0x5, 0x5, 0x9, 0x12, 0x1b, 0x6c, 0x30]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe3c, 0x1, 0x8000, 0x5, 0x7f, 0x6, 0x6, 0xffff]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x15}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xa10, 0x11d, 0x0, 0x1, [{0x538, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x50c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xe4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x9}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x8}, {0x4}, {0x7, 0x7}, {0x4, 0x6}, {0x3, 0x6}, {0x6}, {0x6, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x4, 0x6}, {0x1, 0x9}, {0x3, 0x3}, {0x3, 0xa}, {0x6, 0x3}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x2}, {0x2, 0x5}, {0x7, 0x4}, {0x1}, {0x2, 0xa}, {0x7, 0x2}, {0x3, 0x7}, {0x7, 0x1}, {0x0, 0x8}, {0x5, 0x9}, {0x5}, {0x5, 0x4}, {0x0, 0x9}, {0x6, 0x9}, {0x6, 0x6}, {0x3}, {0x6, 0x1}, {}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {0x6, 0x5}, {0x4, 0x2}, {0x2, 0xa}, {0x6, 0x5}, {0x4, 0x3}, {0x1, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x1, 0x6}, {0x7, 0x1}, {0x3, 0x9}, {0x5, 0x3}, {0x2, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x4}, {0x2, 0x7}, {0x0, 0xa}, {0x1, 0x4}, {0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x0, 0x7}, {0x6, 0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x7}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x5, 0x4}, {0x0, 0x7}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x9}, {0x6, 0x7}, {0x3, 0x2}, {0x3, 0x2}, {0x6, 0x3}, {0x7, 0x2}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x7}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x2, 0x6}, {0x0, 0x5}, {0x5, 0x2}, {0x2, 0x3}, {0x0, 0x2}, {0x6, 0x1}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x5}, {0x4, 0x6}, {0x4, 0x6}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x6, 0x3}, {0x7, 0x3}, {0x4, 0x1}, {0x3, 0x6}, {0x5, 0xa}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x9}, {0x3, 0xa}, {0x0, 0x1}, {0x3, 0x4}, {0x1, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x3}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x7}, {0x1, 0x3}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x1}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x3}, {0x5}, {0x2, 0x5}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x8}, {0x3, 0x9}, {0x1, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x7, 0x5}, {0x4, 0x6}, {0x4, 0x1}, {0x4, 0x8}, {0x0, 0x6}, {0x4, 0x7}, {0x7, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x2}, {0x1}, {0x3, 0xa}, {0x5, 0x6}, {0x3, 0xa}, {0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0x6}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x2}]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0x3, 0x0, 0x10, 0x192, 0x0, 0x80]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x3, 0x7}, {0x7, 0x7}, {0x4, 0x6}, {0x5, 0x3}, {0x1, 0x8}, {0x6, 0x8}, {0x3}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x3}, {0x4, 0x7}, {0x2}, {0x4, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x2}, {0x1}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x3, 0x8}, {0x2, 0x3}, {0x7, 0x2}, {0x6, 0x5}, {0x7}, {0x4}, {0x2, 0x6}, {0x1, 0x2}, {0x2, 0x1f}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x7}, {0x7}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x8}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0x3}, {0x3, 0x5}, {0x2, 0x8}, {0x6, 0x9}, {0x2, 0x7}, {0x7, 0x4}, {0x1, 0x9}, {0x1, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x4, 0x5}, {0x5}, {0x7, 0x1}]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x0, 0x24, 0x36, 0x24, 0x12, 0xb, 0x16, 0x36, 0x1, 0x1b, 0x18, 0x0, 0x1, 0x1, 0xb, 0x12, 0x24, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x4, 0xb8, 0xbdd8, 0x6, 0x423f, 0x1000, 0x9]}}]}, @NL80211_BAND_6GHZ={0xf0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7f, 0x6, 0xf7f3, 0x1, 0xfffd, 0x25, 0x1]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x24, 0x2, 0x4, 0x0, 0xc, 0x18, 0x2, 0x2, 0x1, 0xb, 0x2, 0xc, 0x6c, 0x5, 0x16, 0x154721dddab9146c, 0x30, 0x30, 0x60, 0x6, 0xc, 0x12, 0x1b, 0x48, 0x18, 0x0, 0x5, 0x1b, 0x30, 0x1b, 0x5]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x5, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x7}, {0x2, 0x5}, {0x5, 0x2}, {0x2, 0x5}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0xa}, {0x4, 0x5}, {0x7, 0x8}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0x8}, {0x0, 0x1}, {0x7, 0x4}, {0x6, 0x9}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x1, 0x5}, {0x2, 0x8}, {0x3, 0x9}, {0x3, 0x7}, {0x6, 0x9}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x6}, {0x7, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x6}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x6, 0x7}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x9}, {0x2, 0x7}, {0x4, 0x9}, {0x6, 0x4}, {0x5, 0x3}, {0x1, 0x4}, {0x7, 0x7}, {0x4, 0xa}, {0x0, 0x1}, {0x6, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x4, 0x6}, {0x0, 0x2}, {0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x1, 0x4}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x3}, {0x4, 0x4}, {0x2, 0x8}, {0x0, 0x9}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x1, 0x4}, {0x1, 0x9}, {0x6, 0xa}, {0x7, 0x6}, {0x2, 0x3}, {0x4, 0x5}, {0x2, 0x4}, {0x1}, {0x3, 0x9}, {0x3, 0x2}, {0x6}, {0x0, 0x7}, {0x4, 0x9}, {0x1, 0x3}, {0x7, 0x4}, {0x2, 0xa}, {0x2, 0x2}, {0x0, 0x1}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x6}, {0x0, 0x8}, {0x6, 0x7}, {0x7, 0x2}, {0x3, 0x1}, {0x6}, {0x3}, {0x6}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x5}, {0x7, 0xa}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x8}, {0x2}, {0x1, 0x3}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x1}, {0x3, 0x6}, {0x6, 0x3}, {0x7}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x9}, {0x0, 0x2}, {0x4, 0x1}, {0x7, 0xa}]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x200, 0x5, 0x40f, 0x5, 0x6, 0x6, 0xf]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x1}, {0x4, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x2}, {0x6, 0x4}, {0x2, 0x4}, {0x4, 0x9}, {0x0, 0x2}, {0x2, 0x2}, {0x4}, {0x4}, {0x2, 0x5}, {0x4, 0xa}, {0x4, 0x6}, {0x3}, {0x2, 0x2}, {0x1, 0x6}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x0, 0x4}, {0x6, 0x7}, {0x5, 0x5}, {0x3, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x5, 0x3}, {0x6, 0x9}, {0x6}, {0x5, 0x2}, {0x1, 0x3}, {0x4}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x5, 0x6}, {0x5, 0xa}]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xef, 0x0, 0xf5d3, 0x0, 0x5f6, 0x80, 0x200, 0xa25a]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x401, 0xed, 0x5, 0x4, 0x7, 0xc, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x401, 0x0, 0x1ff, 0xfff8, 0x8, 0x10, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x200, 0x5, 0x5, 0x9, 0x3, 0xe398, 0x7f]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x4, 0xf3b5, 0x8, 0x3, 0xf, 0x0, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb2, 0xf001, 0x2, 0x4c, 0x6, 0x81, 0xd205, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x48, 0x60, 0x6, 0xb4a87eaf9bdf463f]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7fff, 0x3, 0xdb10, 0xfffb, 0xc000, 0x3e2e, 0xf]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf, 0x8, 0x9, 0x4, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x0, 0x1, 0x7, 0x5, 0x23, 0x9]}}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x0, 0x0, 0xc]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0xf, 0x9, 0x60, 0x5, 0x4, 0xb, 0x4, 0xc, 0x0, 0x1b, 0x36, 0x9, 0x2, 0x60, 0x30]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x2, 0x8}, {0x2, 0x1}, {0x1, 0x6}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0x7}, {0x7, 0x5}, {}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x5}, {0x3, 0x2}, {0x7, 0x6}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x6}, {0x6, 0x6}, {0x2, 0x9}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x7}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x4}, {0x4, 0x10}, {0x3, 0x5}, {0x4, 0x5}, {0x2, 0x7}, {0x7, 0x5}, {0x4, 0x9}, {0x2, 0x7}, {0x1, 0x3}, {0x0, 0x6}, {0x1}, {0x4, 0x2}, {0x5, 0x8}, {0x2, 0x7}, {0x4, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x3, 0x4}, {0x6, 0x8}, {0x7, 0x2}, {0x3}, {0x0, 0x6}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0xa}, {0x4, 0x1}, {0x2, 0x8}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x2}, {0x2, 0x2}, {0x1, 0x3}, {0x1}, {0x3, 0xa}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0xa}, {0x6, 0x2}, {0x3}, {0x4, 0x7}, {0x6, 0x5}, {0x3}, {0x0, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x3, 0x3, 0x7, 0x0, 0xfe9d, 0xff, 0x7]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x5, 0x5, 0x9, 0xffe6, 0x4, 0x9, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x6, 0x3, 0x0, 0x800, 0x6, 0xa000]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xfffd, 0x7, 0x3, 0xb, 0xc, 0x3]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0x9}, {0x3, 0xa}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x3, 0x27, 0x6, 0x9, 0x60, 0x16, 0x48, 0x16, 0x12, 0x9, 0x60, 0x1b, 0x24, 0x4, 0xb, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xd4ac, 0x18, 0xb, 0x4, 0xa8, 0x8, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2cc, 0x5, 0x9, 0x5, 0xfff0, 0x7, 0x7, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa2}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x97}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x1a4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfb}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x17c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xfffb, 0x21f, 0x7, 0x800, 0x0, 0x6723, 0x2]}}]}, @NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x3, 0x5, 0x5, 0x10, 0x16, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x24, 0x6, 0x9, 0x24, 0x1, 0x2, 0x2, 0x9, 0x6, 0x0, 0x4]}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x7}, {0x0, 0x8}, {0x6, 0x4}, {0x2, 0x1}, {0x0, 0x9}, {}, {0x4, 0x4}, {0x0, 0x5}, {}, {0x4, 0xa}, {0x2, 0x6}, {0x7, 0x6}, {}, {0x3, 0x8}, {0x5, 0x4}, {0x5}, {0x4, 0x7}, {0x5, 0x1}, {0x3, 0x9}, {0x6, 0x1}, {0x7, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x2, 0x8}, {0x1, 0x2}, {0x5, 0x6}, {0x2, 0x3}, {0x7, 0x8}, {0x2, 0x1}, {0x5}, {0x2, 0x8}, {0x3, 0x19}, {0x7, 0x7}, {0x0, 0xa}, {0x7, 0x2}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x8}, {0x0, 0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x3, 0x1}, {0x2, 0x4}, {0x6, 0xa}, {0x5, 0x5}, {0x3, 0x4}, {0x5, 0x6}, {0x0, 0x9}, {0x5, 0x2}, {0x3, 0x4}, {0x4, 0x2}, {0x4, 0x2}, {0x1, 0x9}, {0x4, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x5, 0x10, 0x3, 0x1, 0x9, 0x3]}}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x2}, {0x5, 0x1}, {0x2, 0x3}, {0x6, 0x6}, {0x7, 0x8}, {0x7}, {0x4, 0xa}, {0x7, 0x5}, {0x4, 0x4}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x8}, {}, {0x3, 0x4}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x7}, {0x6, 0x3}, {0x4, 0x4}, {0x1, 0x9}, {}, {0x2, 0x9}, {0x1}, {}, {0x7, 0x8}, {0x0, 0x8}, {0x6, 0x9}, {0x6, 0x5}, {0x6, 0x6}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x3}, {0x7}, {0x0, 0xa}, {0x0, 0x3}, {0x6, 0x7}, {0x2, 0x6}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x1}, {0x2, 0x9}, {0x3, 0x2}, {0x0, 0x1}, {0x2, 0x4}, {0x2, 0x4}, {0x4, 0x9}, {0x7, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {}, {0x2, 0x8}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x7}, {0x1, 0x7}, {0x1, 0x6}, {0x4}, {0x5, 0x4}, {0x5, 0x1}, {0x2, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x3, 0x7}, {0x0, 0x5}, {0x6, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x2, 0xc, 0x2, 0xb, 0x30, 0x12, 0x30, 0x16, 0x30, 0x24, 0x6, 0x30, 0x30, 0x9, 0x5, 0x6, 0x24, 0xc, 0x5, 0x4, 0x12, 0x16, 0x4, 0x1b, 0x6c, 0x12, 0x30]}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x800, 0x6, 0x8, 0x6, 0x4, 0x9, 0x3ff, 0x5]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x1}, {0x4, 0x3}, {0x4, 0x9}, {0x4, 0x2}, {0x0, 0x7}, {0x2, 0x1}, {0x5}, {0x6, 0x7}, {0x3, 0x6}, {0x7, 0x9}, {0x6, 0x8}, {0x1, 0x9}, {0x3, 0x1}, {0x0, 0x4}, {0x2, 0x6}, {0x4, 0x2}, {0x7, 0x8}, {0x0, 0x3}, {}, {0x6, 0xa}, {0x3, 0x7}, {0x7, 0x5}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x4}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x4}, {0x4}, {0x2, 0x6}, {0x3, 0x5}, {0x5, 0xa}, {0x1, 0x4}, {0x4, 0x4}, {0x2, 0xa}, {0x4, 0x8}, {0x1}, {0x6}, {0x6, 0x3}, {0x2, 0x7}, {0x6, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x51}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xdd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0xfc707491f6f0fc06}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x328c}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xef}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x18, 0x12, 0x30, 0x9, 0x6, 0xb, 0x12, 0x5, 0x30, 0x6, 0x30, 0x5, 0x6, 0x6c, 0x48, 0x3, 0xb, 0x4, 0x48, 0x6, 0x12, 0x1, 0x36, 0x9, 0x6c, 0x30, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x36, 0x6, 0x48, 0x9, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x6, 0x3ff, 0x7f, 0xc56, 0x101]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x3, 0x4, 0x8, 0x4000, 0x2, 0x1, 0xee]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0xe, 0x8, 0xfffa, 0x6, 0x2845, 0x2]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x80, 0xa4, 0x0, 0x53e4, 0x8, 0xfffe, 0x1000]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x63, 0x0, 0x6c, 0xc, 0x48, 0x0, 0x24, 0x6, 0x30, 0x1b, 0x3, 0x1b, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x2, 0x7, 0x40, 0x5, 0xa6ff, 0x8001, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd10, 0x8, 0x5, 0x8, 0x10, 0x4, 0x1, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x7, 0xffff, 0x0, 0xfff8, 0x2, 0x3]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x4, 0x6c, 0x18, 0x60, 0x1a, 0x60, 0x5, 0x24]}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x7, 0x8}, {0x2, 0xa}, {0x0, 0x1}, {0x6, 0xa}, {0x6, 0xa}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x6}, {0x7, 0x8}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff, 0xb, 0x7a, 0x4abd, 0x2, 0xf, 0xfff7, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc, 0xa29d, 0x3, 0xffff, 0x3, 0x9, 0x7]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x9, 0x5, 0x1b, 0x60, 0x0, 0xc, 0x12, 0x30]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x93d, 0x9, 0x7, 0x100, 0x7, 0xfffa, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x6, 0x12, 0x5, 0x60, 0x3, 0x48, 0x16, 0xb]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x4]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x4, 0x5}, {0x6, 0x2}, {0x7, 0x3}, {0x3, 0xa}, {0x0, 0x4}, {0x4, 0x8}, {0x2, 0x2}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x5}, {0x4}, {0x5, 0x3}, {0x6, 0x4}, {0x0, 0x8}, {0x6, 0xa}, {0x5, 0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0x5}, {0x4, 0x6}, {0x2}, {0x5, 0x4}, {0x2, 0x2}, {0x6, 0x1}, {0x2}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x2}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0x6}, {0x4, 0xa}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0x4}, {0x1, 0x4}, {0x0, 0x6}, {0x7, 0x5}, {0x7, 0xa}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x3}, {0x4, 0x3}, {0x0, 0x8}, {0x4, 0x5}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x9, 0x9, 0x0, 0x4, 0x7, 0xf, 0x81]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x12, 0x9, 0x9, 0x2, 0x30, 0x48, 0x60, 0x48, 0x6, 0x24, 0x30, 0x12, 0x1, 0xb]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xeb8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0x6, 0x6, 0xfffd, 0x2, 0x6, 0xb]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x74, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xde}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xf4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1d}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xb0, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2e}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8001}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x6f0, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9a}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x24c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x230, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xbc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x1]}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x2}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x2, 0x3}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x7}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x2, 0x7}, {0x1, 0x5}, {0x5, 0x2}, {0x5, 0x9}, {0x0, 0xa}, {0x5}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0xa}, {0x7}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x3}, {0x5}, {0x3, 0xa}, {0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0xa}, {0x7, 0x7}, {0x1, 0x7}, {0x5, 0x2}, {0x6, 0x1}, {0x4, 0x1}, {0x2, 0xa}, {0x0, 0x9}, {0x4}, {0x7, 0x5}, {0x4, 0x9}, {0x7, 0x2}, {0x0, 0x2}, {0x1, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x6}, {0x2, 0x8}, {0x7, 0xa}, {0x2, 0x2}, {0x3, 0x5}, {0x6, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x9}, {0x3, 0x6}, {0x5, 0xa}, {0x5, 0x9}, {0x4, 0x7}, {0x5, 0x5}, {0x2, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x0, 0x0, 0x8, 0x1, 0x8, 0x1, 0xd]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4, 0x4, 0x2d7d, 0x9, 0xa9, 0x1c77, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x24, 0xc, 0x24, 0x60, 0x30, 0x16, 0x9, 0x6, 0x2e, 0x1, 0x1b, 0x48, 0x48, 0x4, 0x36, 0x2]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb1, 0x7fff, 0x1, 0xfffe, 0x6, 0x1, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x8, 0xffff, 0x1e, 0x49ef, 0xd, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0xf270, 0xfff7, 0x8, 0x40, 0x2, 0x4]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4}, {0x3, 0x4}, {0x1, 0x6}, {0x6, 0x4}, {0x0, 0xa}, {0x1, 0x6}, {0x3, 0x6}, {0x3, 0x4}, {0x7, 0x1}, {0x6, 0x5}, {0x4, 0x3}, {0x6, 0x8}, {0x1, 0x2}, {0x6, 0x7}, {0x7, 0xa}, {0x6, 0x3}, {0x5, 0xa}, {0x3, 0x2}, {0x0, 0x3}, {0x3, 0x8}, {0x6, 0x8}, {0x2, 0x1}, {0x3, 0x6}, {0x4, 0x5}, {0x7, 0x5}, {0x2, 0x9}, {0x7}, {}, {0x3, 0x6}, {0x2}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x4}, {0x4, 0x9}, {}, {0x6, 0x6}, {0x7, 0x9}, {}, {}, {0x3, 0x4}, {0x3, 0xa}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x9}, {0x7, 0x6}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x2, 0x6}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x3}, {0x7, 0x5}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x2, 0x8}, {0x1, 0x7}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x3, 0x2}, {0x6, 0x3}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x6}, {0x2, 0x7}, {0x2, 0x2}, {0x6, 0x5}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x5}, {0x3, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x0, 0x9}, {0x4, 0x1}, {0x7, 0x4}, {0x0, 0xa}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x2}, {0x3, 0x7}, {0x2, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x1, 0x5}, {0x0, 0x8}, {0x5}, {0x2, 0x3}, {0x4}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x9, 0x10, 0x1ff, 0x4, 0x9, 0x1, 0x2]}}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x3}, {0x4, 0x9}, {0x0, 0x6}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0x7}, {0x1, 0x6}, {0x7, 0x5}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x1}, {0x2, 0x6}, {0x4, 0x5}, {0x1, 0x2}, {0x7, 0x8}, {0x2, 0x7}, {0x2, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x3, 0x8}, {0x7, 0x7}, {0x7, 0x7}, {0x6, 0x2}, {0x6, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x7}, {0x3, 0x5}, {0x4}, {0x0, 0xa}, {}, {0x4, 0x4}, {0x6, 0x3}, {0x4, 0xa}, {0x2, 0x4}, {0x2, 0x9}, {0x0, 0x1}, {0x1, 0x6}, {0x5, 0x7}, {0x3, 0x8}, {0x6, 0x6}, {0x6, 0x1}, {0x3, 0x6}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x9}, {0x0, 0xa}, {0x5, 0x7}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x6}, {0x3, 0xa}, {0x0, 0x3}, {0x2, 0x4}, {0x4, 0xa}, {0x2, 0xf}, {0x4, 0xa}, {0x1, 0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x6, 0x4}, {0x2, 0x1}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x5, 0xa}, {0x1}, {0x2, 0x3}, {0x1, 0x1}, {0x2, 0x8}, {0x4, 0x5}, {0x4, 0x2}, {0x5, 0x6}, {0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x2}, {0x0, 0x7}, {0x4}, {0x4, 0x5}, {0x1, 0x4}, {0x7, 0x1}, {0x4, 0x2}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x35}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x410, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe8a1, 0x0, 0x74, 0x3c, 0xa, 0x101, 0x100]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x8}, {0x4, 0x9}, {0x7, 0x5}, {0x3, 0x8}, {0x5, 0x6}, {0x7, 0xa}, {0x7, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x6, 0x6}, {0x3, 0x9}, {0x6, 0x1}, {0x2, 0x4}, {0x1, 0x1}, {0x7}, {0x2, 0x2}, {0x7, 0x5}, {0x0, 0x5}, {0x2, 0x1}, {0x6, 0x9}, {0x0, 0x9}, {0x4}, {0x1, 0x5}, {0x3, 0x1}, {0x7, 0xa}, {0x6}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0xa}, {0x2, 0x6}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x2}, {0x5, 0x4}, {0x3, 0x2}, {0x2, 0x1}, {0x1}, {0x7, 0x7}, {0x3}, {0x4, 0xa}, {0x3, 0x2}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0x18, 0x30, 0x18, 0x48, 0x1, 0x3, 0x12, 0xf4898df5eb9129c5, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x3, 0x9, 0x3, 0x0, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x4, 0xa}, {0x2, 0x4}, {0x1, 0xa}, {0x7}, {0x4, 0x2}, {0x1, 0x9}, {0x2, 0x3}, {0x4, 0x2}, {0x6, 0x2}, {0x5}, {0x1, 0xa}, {0x6, 0xa}, {0x5, 0x8}, {0x7, 0xa}, {0x3, 0x2}, {0x6, 0xa}, {0x6, 0x9}, {0x1, 0xa}, {0x7, 0x7}, {0x1, 0x6}, {0x3, 0x2}, {0x4, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x4, 0x9}, {0x7, 0x7}, {0x4}, {0x1}, {0x4, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x5, 0x3}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x2}, {0x7, 0x7}, {}, {0x2, 0x9}, {0x1}, {0x5, 0x5}, {0x7, 0x5}, {0x1, 0x4}, {0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x5, 0x9}, {0x5, 0x1}, {0x5, 0x3}, {0x2, 0x9}, {0x7, 0x1}, {0x5, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x6, 0x9}, {0x3}, {0x5}, {0x2, 0x7}, {0x2, 0x3}, {0x1}, {0x2, 0x5}, {0x0, 0xa}, {0x5, 0xa}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x8}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x24, 0x3, 0x9, 0x48, 0x1, 0x30, 0x4, 0x0, 0x48, 0x9, 0x24, 0x24, 0x9, 0x9, 0x16, 0x36, 0x48, 0xb, 0x5, 0x12, 0x9, 0xc, 0x60, 0x1, 0x16, 0x1b, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x9, 0x7, 0x7, 0xfffa, 0x1, 0xd2, 0x3]}}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x0, 0x1, 0x0, 0x2, 0x8, 0xff]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x7, 0x2}, {0x3, 0x1}, {0x4, 0x2}, {0x7, 0x8}, {0x1, 0x4}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x5}, {0x2, 0x6}, {0x3, 0x7}, {0x3, 0x2}, {0x6}, {0x7, 0x2}, {0x4, 0x8}, {0x5, 0x6}, {0x6, 0x2}, {0x6, 0xa}, {0x0, 0x9}, {0x3, 0x6}, {0x6, 0x3}, {0x6, 0x7}, {0x0, 0x6}, {0x3}, {0x4, 0x9}, {0x0, 0x4}, {0x3, 0x1}, {0x5, 0xa}, {0x6}, {0x4, 0x7}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x4}, {0x5, 0x8}, {0x3}, {0x0, 0x6}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xb6, 0x202d, 0x8, 0x7, 0x7, 0x5, 0x200]}}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xb, 0x6, 0x4, 0x3ff, 0xffff, 0x4, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x268, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x2, 0x8}, {0x2, 0x8}, {0x6, 0x1}, {0x1}, {0x5}, {0x3, 0x4}, {0x0, 0x4}, {0x6, 0x6}, {0x6}, {0x6, 0x3}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0x2}, {}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x4}, {0x7}, {0x4, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x6, 0xa}, {0x4, 0xa}, {0x6, 0x9}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x2}, {0x2, 0x1}, {0x6, 0x6}, {0x3, 0x6}, {0x3, 0xa}, {0x2, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x6, 0x9}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0xa}, {0x1, 0x4}, {0x5, 0x7}, {0x6, 0x8}, {0x0, 0x6}, {0x7, 0x3}, {0x7, 0x7}, {0x4, 0x7}, {0x1, 0x5}, {0x1}, {0x1, 0x1}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0xa}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xf9, 0xfc, 0x401, 0x2, 0x0, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x24, 0x5, 0x18, 0x1b, 0xb, 0x6, 0xc, 0x5, 0x4, 0x4, 0x30, 0x3, 0x6, 0x6, 0x6, 0x18, 0x6c, 0x36, 0x36, 0x1b, 0x6c, 0x48, 0x2, 0x9, 0x2a, 0x6, 0x2, 0x2, 0x21, 0x3, 0x24]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x2}, {0x3, 0x5}, {0x2, 0x7}, {0x0, 0x1}, {0x2, 0x4}, {0x4, 0x5}, {0x5, 0xa}, {0x0, 0x6}, {0x1, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x8}, {0x1, 0x8}, {0x2, 0x1}, {0x3, 0x3}, {0x7, 0x8}, {0x3, 0x2}, {0x7, 0x9}, {0x2, 0x4}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0x1}, {0x4, 0xa}, {0x0, 0x7}, {0x7, 0xa}, {0x2, 0x6}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfa0f, 0x380, 0x3f, 0x11d, 0x4, 0x1, 0x0, 0x1c00]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x6, 0x5}, {0x1, 0x4}, {0x1, 0xa}, {0x7, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x9, 0xffff, 0x4, 0xcb9a, 0x8, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x8}, {0x7, 0x2}, {0x2, 0xa}, {0x0, 0x3}, {0x3, 0x8}, {0x5, 0x1}, {0x1, 0x6}, {0x7, 0x1}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x34, 0xff, 0x6, 0x7ff, 0x9, 0x800, 0x50, 0x7]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x1, 0x4, 0x10, 0x9, 0x3, 0xd, 0x10]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x1b, 0x30, 0x0, 0x5, 0x36, 0x48, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xbd1, 0x6, 0x0, 0x8001, 0x100, 0x2, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x1a8, 0x4, 0x1, 0xe, 0x1, 0x3, 0x401]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x24, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x12, 0x36, 0xe824325be4e5b9f1, 0x12, 0x6, 0x9, 0x3, 0x30, 0x60, 0x60, 0x2, 0x48]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0x2, 0x0, 0x3ff, 0xb, 0x0, 0x57e]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x6}, {0x5, 0x3}, {0x7, 0x7}, {0x7, 0x7}, {0x1, 0xa}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x5}, {0x0, 0x8}, {0x2}, {0x3, 0x9}, {0x1, 0x2}, {0x4, 0x3}, {0x5, 0x7}, {0x0, 0xa}, {0x2, 0x1}, {0x4, 0x6}, {0x1, 0x1}, {0x5, 0x2}, {}, {0x0, 0xa}, {0x0, 0x9}, {0x7}, {0x0, 0x8}, {0x5, 0x6}, {0x2, 0x5}, {0x7, 0x2}, {0x1, 0x8}, {0x4, 0x2}, {0x4, 0x3}, {0x4, 0x6}, {0x3}, {0x6, 0x2}, {0x0, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0xd, 0x0, 0x6, 0x0, 0xff72, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x40, 0x9, 0x9, 0x7, 0x4d5, 0x8, 0x7]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x6, 0x36, 0x4, 0x32, 0x36, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x1, 0x9, 0x6, 0x6c, 0x24, 0x6, 0x18, 0x1, 0x1, 0x6, 0x4, 0x24, 0x24, 0x1, 0x1, 0x4a, 0xc]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x48, 0x3, 0x24, 0x1b, 0x60, 0x67, 0xc, 0x48, 0x16, 0x48, 0x0, 0x12, 0x5, 0x16, 0x30, 0x1b, 0x14, 0x1b, 0x0, 0x6, 0xb, 0x60, 0xb, 0x9, 0x12, 0x1b, 0x26, 0x5, 0x2, 0x1b, 0x12, 0x77]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x4}]}]}, 0x1694}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000031c40)={0x6000001, 0x0, 0x0, 0x9, 0x7}) 853.080552ms ago: executing program 2 (id=719): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9], 0x20}}, 0x0) 816.370077ms ago: executing program 3 (id=722): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x8000000000000000, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0xc000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_genetlink_get_family_id$batadv(0x0, r2) close_range(r0, 0xffffffffffffffff, 0x0) 801.80943ms ago: executing program 3 (id=724): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x5, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="07000001000080ff00000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) accept4(r2, 0x0, 0x0, 0x80000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x305, 0x2, 0x806}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r8 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="46ad0000", @ANYRESOCT=r8, @ANYBLOB="20002cbd7000fedbdf250f00000008003100680d00000500290000000000", @ANYRES8=r1, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x4008}, 0x20000005) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x100800) setsockopt$XDP_TX_RING(r9, 0x11b, 0x3, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x5, 0x400400) close_range(r0, 0xffffffffffffffff, 0x0) 800.575512ms ago: executing program 2 (id=725): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}}}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x3, 0x8695c3813a9bd78d, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="02cbda572ec32cf73bdbc52bfa4e157261eb6cbd0d1d50c9d937a19739fcb9f8697bf69c0e2e526012185f1b86989056f9c2d38906e8a47b9b5fde55a777a6357ac40c211de6325f496fd86dac09bb38b62b37d715d06e3c61b172aa4a662cefc7810ba37161c637a9b56a7c7b022426826076f1d2bf3c3b6f92ab9c27d691385c3efc354f1423d01d6a49d534fca3f2bf518cd645cf18b4ac2d2ac4c5c29ba487c9d27bb488a73146d5b9e21427af37dee4a276646eb2519e4f6c76cce2f7bf7e708d5180959f71d3797220101849c5144ef8338a5a2079ecce466000cf290d4df42e82865512fb5fb01fb655613cf1c469682edd86a4bef86aa23240ca6a2ff38b59339f7530e8a8027aee0628e0f81b2f5c661b149d780f20ec54c8d3d42c0c49f83b1c0d4bec94bc9221e6fc7c75ebd3b68081df207721584055baeaf6429616d57cb35d2977d45971d209e4c45dfe3c5c105e0e2b49fc8685b4945f31c9468f3c950fcf70a8f45e5a3be62f73c228a6a34a99b6f584b42c50506a6c14187f44887270011cc98d7e5e258df533411c8d39bfa9e27014912ed9e9696fd4074fbefcd4817a344be5ea348f4a7a34733a5bc5674b1bcd39404d5a458d1e19b6d4bdb4e23403154249b5798dea7b60bbf0c09c25027a4efd49d36cbe65b7450c0bde580d356ad4e3cc7a9a57e6ac0b542592617869e57d9bed28f0590241bdeb51fa775aa8806a55df2c795a61146bdbe38eb7a716180bb9b728696bb0e78ff11f89b17c7e7fe9b14ea976ccd9991f01f5d0c4620053d0b5ce42af76591fd0706494b91a6dfc43560f9a9538ada19825ffe3a7cc7a56b755d46ae1189b1f1ac729d9938ad48a066624c1b28003a9d193b4b34c4ab2609949df96f693389f27dd3e1f42b178eb17079c1448d7e9fac30ddb53ce8e5a157db8296cd3069d332bad0528ae56a6db41ba84699b85f225a78a33879512a5f0b795fc58957ef6766afcf546fe36c8125276eeaac9d647b2459c164aae86a2703e85d4f552a0647cb4bdfaecf6ec3a264a6b6892a9a1ba08a9055e98b49edc4e1f8010f63f601a8251921df70e15011116c471a70a0580b1789bcff471dcc95ad209a44ca2453d58d3ea4c71e0383db68adf332a497a84faada33f18bd3cd79ff9d6809409769b02a66cf524534ab7134e3066eef904d8961195d9cdc396a012bb3bc1b1ccd60317d08cb059174642aa3f60584e58e7417c1736f6863fae9e7103158711167a53d7d5deddacee6958fd4c2e0672b8dd90b41512b1f59fc49099633860dd6902c1df3d5924b1cf81ec848d51129b3eddea619129e961390d65d2243d400a1e30e524eeee1a701da5e21598acf457947bad693892a2989097ecbe9607a33ffb33425ccac5e19ebd1f88bf3acc03331adf9697bed04b33ac9fceaa3bdc9a417b12108e10f9c45b6d36181099056a448689da4ef68beee35f5930ce4a5712cbed98239a674c5883d6a5e0df9c1cbe1eda8dc19d14c4abe896e3b28bb3d4b2a0e9ae31ca07b9819825f3a6ab82c5501becf023a656cbff569dbc3035ae3c585747fb459581629051286b170b679b683a0b2eea6ef3b41a68012e5f4d64f689c2b909cfd06d37c0a802be2d882351bffeddef1373d8cbafa10fefbc28b31a70b6e912fc61257aa76a0f0dc1d3ef72d2f61517a359053c3dcb7d49d8a4da61bcf3b3dafc0528bb037cec0d986b3949fff38a21dab6b8a3a167bacf067c5f7842ebebcc1bd54776b2e54a098303c6331beb16e42d0669a518af2d173405786439d739b813c145c4f9f98a537b1065bf4636c76e38b71943815a6d1227d0a6965dffc37c00444aebd2ec19286b83443902dba1354a69377e97070a79151e64711111bf3e0a755b0fb1a1d5d009fdf61b665b41a3b7dbd0655236360141c52b93bc907b0672743973c30d6c9ece47fa1fe3625cc8acbe305156012ef1c5ea140be70b804887be593f25faa13ee4ea2d9821d23c3e047d74ad4f7de4d95d275ea3e6c87479f1badfcef002ebc7020b581a096abac1a80ef6ff476a01b01f7c0fb1239fcc182f74e5b5965412c0f4170432af15daf457143b1f41422b8a7f9b81c15a156ddef9af95955090d013cd52aa66ebfbc87c8030e7f86b52aadaa2e63c261185eed7c46b5f8d56e8301a9cc1578aff77b42419a5eb2e263207ef259f4da6ca6466ac9326a633b39e005028c07c9aedf17a70e638d7ed84638406e6028be879fd0fe491152e181d5527933950eb67a52cf155d5c845a6425e41a47b44d9905de26e5132c8d594c1bf6d4f12dbcb96d7431a56546800275623679d6c189e0cebd1fb8063140b89d42da60ed06206d329c29841e69c820428bcde53c998bee0380a816d080b36f64574718b84e0ecafbfd2b9981f4886df258dbf1cfdb148b171516500572a7086516fd519bc861878ec2fceb6872229ff1e9782720e590d8ef4691fa9c4c54bfcc843015913a2ed40bf37048151d17b44365f7f8d3b816d1b1cd40dc5dda6ab8f637b5f6bae92580f1c269c9231c9a79d58d43208be7622147db352b1294260eeab12409f5b5ee94d99548640634bc9479a6e6e06cc8838bf85d9bd95452eaf8ad3cf6c070aac36a7d38fe23cebfaba46c74a6c5c98b1b5243edfe405161b8c3ea0cdb1bcb4e1041fc62451a6094b0c56ee2ed29520b87228959bc01a9a9f54d214704bd321b152a0e88d0646e99a92a390dfa6bc2c34d418e5e900a3b641ab34a5fd8de751bfb3253b7aae3948d871892d7b76b351b073a93f3ad82b0c59bc49ed922c8d63f8d12c14ce1912bf877bc7877f619b03d09200836c775675e0614efabfd5665c3bf12e6131a7232639729b79ac1c5e807246d30934b0f63b31a06c4722278299949c7785d796b6d3d4a5f2fa652b7fe8be447cafe93fcb07167f3ef16b94261fc3a9d22a57a7aac56562a231d79dbf3bdc1f436206337ff0f8e019d76b823c5976ee23ba4e553ec62d261bdc7da90fee46d3472cc267a7a74b88112ef765091df03bb59cf303feaa0149b371a7bdd75c0187ce842dd1e4cdaf7fc0f5ef7ffb559c535f19100ba653728cd936987731d5ac99cb9ef772975b17b2aff8b872df0d189c7944d63ed66cfce8ee92e7a1082c2a501007aacbe0011e6c32489bcb888e1c464bec59902d940d81136c543098a60104bcfd0f4e7c27cb114ff42e8d31fe09a4bcc21cae5ef2f8e4890bd8139fff1b1b2a39e29eaf2e5d2fb810ea37a13e6d2105a6c2ccd03fc110c6f9063e2433e1450dc8ebd8ede0445af662cf7ee705003630ab7d9fc6ed30169ed674dda2802d519e3b49016c6f11612ae53230b062281ddf7a678784516c3d177857f8bdbec7910af8c81333e471bd8a973ce858a14756ef6ec85498714fe8e1e6600023804004b968eea42c410bf0f5c5b2471835454f20230a6d342f96f71a2e64f54b838e5cd939d7a651d402fd60a8a2a081de0c536d5b81345d92165e79fa65140b91c23cdb5829db55f1f93b88bb43a355e9304a17355851d52c0d745b611a30eb400044dce6ac742bcce9df9583b827514af8a2ed4a04553817ba6ea22e9beaba65d32189a5c2bf65a09d2c8a8798c0645fb24157a4e71be7889fe65c34869d8852b21661407feed92afb0bfe582693a21c050e5adce1fe97755b0be276c36b81b89700b99d23d315a64f7e115eacdb3ade725cb3cfe36c27a5e2addad60290b022a9fc26132b5ec3b5f1d884399fd992525a3e17e18e7ee6078a64b7efc3bbd116e5c305d8ad935baff18ed94c7a8720e729132e110f986991a3ad21cc637282f55588b12756895e2d10afce85b1a04fc271b217278f156c7ffb1ed9dd52b18fc8b153802fc329dca81b278d715f6e31fbcc77d8ce5c2786573bacac30791aff5771fece44063d1e84abcd6a4ae016858893605eecf253c79e59c2152efbe9fdfee3c441e4bc9cb14fc96a675aa17bf7d2024d665fe3982b61888bbe7129a1ec8fafc3480170c71d05f5d22ef7ff0e2ca598fd02bbd0ad82e6ab0e775388bf3aa421c20b6a2a5e256386abff1103f46a8b5c54c2d54b81c50d8bd98aea724bda55f99d95956e939b85d59abdc50ea4cf1d44afa3e8dffc9d84c6b7d28b78c40d7498670602b97c5e2a6281c7876dabc1d14d156e827873818bc590644d2a1d084d39c84e78127b087bf2cd9353fd13d4ab12350318aedadaca6a2728267e6f5f16547caadf3ac2fade3c86b516c6ab53d61ea1c148835b9a2c91fd0ded7283ef720086dfc7728968924731715f78915045a69122d8b23a6db47cc6fccf402b9913e46c9a36924327ca9bba6bb8cf7cc80952501fc2181a2ec7ae4364cc6eac0cba0edda68f3b398a249d114702147f8b1cd9c7f8a15345f42a7a50334928eb4e2de974e4ae2ffb796bc640922f7ada0933460e0c0fc06276dfd228da9bfbbe5a3eade6f98594b0226339156022aad7aa8c9650417cb1551b3b6b31ce436396f68134a6ef23d6b926988fc410f81e1ae01282f244e70051f1b93644f78af3ef6359d106b291568e1ad00ad6ee102964fb7aaaec9732e43a21ea28cda496e4ae367ea738482e777290cca2ef61c8ff10c1b9546b5d395d21c98542f37578d297c13899247a6fdcdf0b8cba6b498875926a19852f97ef60dc1a0c4069fdd4d1fb87a6cd58b8786210687d644a4bad6f8fee0bc5fb94294cffc323e97597be6a5e457a5dd27fe2ebf5c34aef3bb5c43ba0a7d931e7ab02b7c290c5d04a41c01d14d6fc1ba80bfedf71caa0f7e59b135fad73e28d4861d601f79ad32edc6f8d1978d8ecf787f3c9ac71b2404939827b16f3915c8b1445dd1ec012aaeff88789c396665a50df52b244ce5b100d9a29ce52903b8f7f3662c0d0599fd1a7071798b759be02d58e5c6e4626b477653655fb7f5d7bc0ad94dbfe131c9ba5a994c1605c03b9f5173f8205c580bff685e693b23ab4cc7b2e4b21282b14f65684747ad98c0d855a205a6e17b5bb4c2b07097ae32393690e4e07a7f3e25d6bd01c1fb973a67edfa4e1d4a7a96b68570dd9d3bdfbe8a5a69adbd17167533ddbd2a58d70ca1ccea6428770dbcfeb47ddffa99e8b5e69bd34641c1f1a033e86215447fd2927482b12a85f11ae1d8b2054d7f642a9ba526e5a7d8e3d81bd394c264666f4b4dc3ff9c1584f277ff31a29c1358d9a953e0ae2822a3d174a0ce3da386083ae06f02723aea03931a38116a8e4afbc36fb9c094eb340214881a6f838f8d66141e451b9a1bd250363e591bc4ac566123a379272c08c0511e29e1dd1bc06869f3fd151bada9b28a6a71970ae3580d5bb0ab76b38068f504659bc335be1bb2a285329f749303600211d6ef7e151ad861b946d99f36d20074d65426f68a6758270ff946dd387ed3b150199fd81fd2e76a70a2fe2d7a2f8899079068ce48c5380db7e69a1a91f244ed32400e8d9e3097ec2065570dbde88faaee4a938f0b4cc20f31f175df62bf6cd88968ef7e24912dbbf91869eb9b34498d7f6000ef9a62c9441f4177ab5da1428d647b6e3cea1ca8a91b1a1246c2e048654e350cbf3dd4daaaa2558ff9c505ce0fcbcf93601a725289c38724290cffddf87e5345b43a66eb5f9fef718b0df4bcfe82c466017c3d8f0bbfd5544ff2d834a6e653ae789561df44281c8510b4bad838d04ab4a8e84fc4fc022bbe8454b36273cec843731c1df6fce42947a029f61e030990c0002b6f2c9c552227c8785c0b53683de3e518123548e332d25f2b270f595aad389951d1edbb9c6fb14cb4e479acff1ffac191da3d80a696b8be5919710c9137ecc0ca383d8666e30a356759a5299f44c2bfcd03a8df33de0e27d6038a9551cfc5ff43de0d42a6d033bf15f3a44d52f8a71554d1a2efb78042c1c9957256d7ea06b7751b40668feefff205c74f0f947ae0920aa746f17027bbef312708bf72fb23c12d0dcf6493584c1bdd0b5780017c038bc23fb6c25c560bb6da3775cf03502c07b987e64f8a2b84a870b5dd90c6aea7fad3d0a3ee46fda953dc085d272ee5855104b8bab8ed8bfd3338e75eb9ad8118f25c7e580fec613e30cf3eb7059e06d9be015709ba6c9de9dc9b6df8228b13f0439fa8d530aa9a4dc1d44abc3191c159a8816e7368fc5c6a0e57eb881d734c7a5459ba3be1b8a17b5ee6777ee42e962aee199f35ee2c2d4a39275e1dd6a8546daadc7ceab2c90667ad48c75bc7008ec2d7daa57562260d6d4509e67850e988b640569c050d3bedbd6c2de9b4f466e2d0c6f83c3c2392a5adcce1523e89f730a84f8cad28f84d1a0991f44aa4714f93088ec2a2836766d73569c7b0c1f70a067a3f0dff1d01661937aecb39e3d0f8e0ea282cffebbfdac63196eb13c4e53f144fc66a82cc0590f1d6d249c333420c24db92177c89cf0869346c34147dab6c3b94c325ef635d0e6d75c23906e71a7940e13364aef81b97108a4b209d372558d3bb0424ecb6a9a9ee28f7d1585c8af6f1256c812eb48515feda309a08f1a2954039ff0a60a2ab75717d2eb93024586837e552942eb63e0d6735d01258eb4dac6209370c109c1a1763dd742f3551276768648919f9093fd4e0cedff9442ac404e463eaea0ffe58a5085c987c093fd30e121218123457916ced3a7250a796a40451a4729125bce2ba5b6406e6626ecfb1d3f16287ba238feb575f60eba96443c60252d5927b81b73574ff1b7d424623b6cff5ce0d1b31b3d199c85da27f8736d990063f09dfef93402d880b2c5d7a9cdf45cbb4d1baf95be490f3dc9998c2c7ccfcc6e6395e7e09e6c44865834cd3e0968ffcc1d0f54406b55a8952cd8096e8968cdca3632b71546192c76472a66c4a8584eb748c1b3c30d52e8699adbef91329aefbf94d251d0b82bf42a648f73020881a914ea7c529802772b4b60617e9c1d9712a31d0ec3e92af4b97f50ec96e794486101a9e15daf8b7f13078d22767dc3b57bc0431ef39b3ca12b2932aa585bc856e8cf5496d78eaa50f06b483f416b31f78767bd25e260042e84c10e9cf9bb53a3f4fce11d703e90004949b55044907242f8eddef627cfc9642f4a828476074c298ea2d7b07ddb7b4a2b9f8f1e5a32fac7d105c5a12186da19ef5f6475763ee19aa670e7b45f37248fdfa796d6ae761dd77955851faa33675ee22e8174e0a126ac58b9998ccb5e4d12c3e00165533ddf710bf0ab0edf6ba1fecf9548ca1618fd980a4f9a35eeb5c1aa329a288378b9b5ed54b56075810cd22abf0c06ce0f1054805410375d6e41564b71b86cab6929c5c1cedb72e0b1237fdad44edbcfd326312caa49ed0c8f7c5a33986c89245fec75d0f9a34f744bf74d6e0f901c12ea25edd60c43d22f6644fa294534cac1c581b0cbf5d9765fc18fe6c223dcff4a85c7eeaf4cb1a9a889c236778b85e69d50d482743664bdeade11b4ced78c3d0b62ba07f98a898c6e89241ed6522fdfc430b75593673d43d695082b0114b25f231c8a141be953290b1a3855adc0146adee0b784fce2cf8243838bdcdbcf4e0dbcc2a9945deea1d02858a9e9dc54f0e818b81d024bd9b2e052a73fb59d037ab526c78faadfcdecc15f2a1d843e84aabc403e84b2fefbfbec982f22b89a2be560002d45ae12a8a2d00f0a3f55e26789a593fb8bdf20efb8a51e3d0dad9ad2caec39ea7392c58eebebc7201c78276f0127e43d5c8efef6e17ca522d69586a9e096efe80844c38841640238584936d8a96c0ba41dc0dc96a11623ff1e70ef54a9c43ec3cd0359dfdf55c8f8c306110d833d7de7a35f015369bf6d92b3b6f0f7dc717c84e51ce475df451b9a6a91c8d564aeb389267082b9cea77f09c6c6490084da3820f80d3e62bbd41a6540591c6c5cf2a18e4e829b82a6780b6b1f66d96fcfb1639a335a78f8c3ecf381148b2625859e514d35eb8c4acc98f7f8220e1827d7745f1f054691eeb1625e2d238ae03c93991058c1567be4938de2e60537749ee81f327f1f1e586ee3af4ccf53b29741c1bb0e774a1d27672ec27b43719d3710e9fd8634213738d98844717c8b1f707bd42f4077c9e59eb539f9cb32c11b47bcb7cb3efd3bf4994e90166a5ae380c821d2640fa99df59978e9b7e50f0b830943de787b1bf99e14edcdfe8565556ae2a8c0552d67898fd13551c007eb779edb60e85210a418cf0a4a41764fe9ece74f5d8000d168fab61588c5549113e8d8a059f17699d976fc7dc68cfd0ec404ef0c7eca459fbad1c40317d81b95a94b037cf96ba677697cfdce4c2c4e02cea296f25e556c02381ca891ddb6adcb0535e262b26290000c542e7616d63b211c16f86048079ca5167598aece3288f86658249e939cb6b59b6cdd3fce0e9ea81a3bb3f88908c600ea031b0028f12632d7ac2f81e54f7e7eb70ba70bc937571b242c4ef228f801b6a4376d11eabadaebb1322823eb30faf6cf21a8b38a769824e8b7009ff278f80ac2af39f0943a29458d127eabae81d2915557b09e3c49f8c22564edea93e8717306fb198dcc92eb3c9212f03dac94fa3fa1fa4e1dbd2119e024639f0ddc87cd906d3317c6ebc6e698257f73912ff46fe8d9adbd3f57ecc78cea5c1eb04ac5fd1bb79a53921fddaffd2d34f444b54208096cbd2aa3e26ca01359b05c10ff36e98e1ac97d51380c99e1b685928eced0d2f1e754001e7023d2473596feb7c7601619277dd7e844bd5544e7e360f8e4223fbd9e24b3fb69a34ced39bf7590fb853e44031d075fe647190ac7811522c73a6c6033457c14c415e4a84663d2540784a1cbb4a398f1d8612f4f3d334576c99d5721bbeac95cc34d18080e3b1365b6844152b8259c8d4618597f291f2b9e8812ab7729e108a8d44487f8993faabf6c6a8f49db727f17cdfec43b34c39cfdd3916fa6953e34f316100368c7b2836c11dcd4710986980356b7ec4ba23fab5cc5a8c6cacb61cc65570231407ca647946393031986cf4736280ed2d7976d66618fc240191455ae405f1d62145297179c040a707093fb8f60f5a3738b8bf78bbdf952478da7e9d3c892af5b83cd9dd4f00fcfa13beb9e6988e3c4b4e5300e3757a93efaef9023fb9d7442cb1a49d7efdec32ac1f98e6227cad38538f6383c3b6efca2fda7c101ec548c3549e7ac5e737478343ca47cdcd65acb71e0eade28c684b69785ae1fe31aaec713834b6635938d7d66426e965498978e4b467f6132daa6026c39dcbf95656b9be5c074badc18b5a74e12967b45e23099fa765ea5c8c18f0feae94755827e494f251ae96882b5c5f6d54713de02501faef1fcb59bf0d66f9d0cd3a493b139237aefdbd402a3df9dd5beb2887a055261a08047be52fa51f61636255870366e837f20d0f83b8557fa4a003647152ee27bd34b5af52743d4c431ff4a116ae1184c810e8397ef2a056845c6e3b5c0beafbf8f78488102412e04e47fb87be9a9ddc075ab519f424ebf821da659b18ae3b61a7b243ff94e3d1ba420cb342db7b8060937749892a7954d3ba5e63017703f5224602616ff6d3fec42444b2524f97dfa467d9db91681dce08de5ccb1ac2bf6cb5e6c1d586b2fc62e78b0bc23e1924a4f023adb39803fd6c3d52c40b13df9c6f54bb2b4ef88f5d0ffdfef13ae46dbf75aa6457da3bdc1781dc814b0b69debee7456aa7f75571caef87f624ef703fea75f136cc7f90af0ae558cf3de5e8cc92f3e803bd46e05f42e4167af8136db6982ad26a52778e1fefcbabe61a57f00cbf04e3c82445c04bbd8832b8bb9a7cb854a22f98cd7b422a7abafe6a00571539802e56f036d5a26d79a86cb100b90ae168d2406c2c0b9c5274ad69298e7983f4b30e006cf4882e90ca8af4e445dc06d0639231638dd39929065d920af913cc7284619fcacab0023893352468eec73d7014407e5d4bca9e49d412ffb12e68610c26206de0b3282e925b83389cbdfbc41cf279440a13838a1431ea4f1a371b6b143b914238773d171bc7b44c07729e8723fe51b8180fc9c9be6694477132cb82b22b2512518266781e687fcd460995ed581059d3c692ecbdc8daf3c76e5a5bc8e57973fed5fb3465a3dcb5557f92dba1e212f9bda66fc4829e10ce3e8b6c117b1214cb246211c861eaabf8ccaa94aedd58349399e619c2dc587719d7901d2cd85ced669d0ea898c4f127d1a4cf274aa0405d225605edf425dc9b7375c8ac2940bb369eec586097f0cc07940ecc8bd400976b9b36027a040be6e64a2fa4f7ba5d59ce9b4f76192d260d665290b20faa3a6a941939a0b3042ef4d8f9b980c71a13496b104965e1c3dab25cb46147bca6170baa0237c8a5cd1c437e43a50302490462585410f65e03186df5fc2c5bcd89f6d6a4ac34c971f0579070ab6e9a6a84159b2910a7ba797fb09dbd3ab88c23951b1a91df8cfc2d13de85dc715e2a111458acc4d640a59c199faa2bb28ec3309864fd8a6997ac89833853101a08198aa6ab3e5167b4e8e55843efae1ecd3fc6507f3a97bf2f8c4c4da4896c788a17a5fe8d8c3f79fe41dd7f4497380f1ffc8f8d6cc2c2dead697e4947cfe680a0e2b5100743444536134cde4378b0b1fe6ddc09dfe8d618f93edffeb7d097a37a19248be0bf9c4f536a484a5fc96f18f2eb4f6462b20bee241ce16b4790c854bca10914e3ba98eb0970765571a8ad45baba39d20b8c1bbb7c65717e265f5fc5edefb130aada09aa7f2c50c45de6de7327faef192977f499b7aed9e73c2ecb97f7256f89fc8b4834670f798438fac5a5045d61a7f429eba77de37517b984b0acfbd6f494a1414b0fc040244bb62a19150e0c15e5315b2618d05429263dd1847accc5de9baca08edc921ed9a0af00175c118ab801da9980098fc4a2bf16ba73e580000b49129a5fba00a1f2c45c0d0939be83ad93569dd61330913e8b381f9aff6d6a584862d636c1a4989dd3fd14853bf033be56f21a3cf1eb95d7df7c6436ff3d5a8f472bf4a3fa8b0b0741d953d9644e0ec801d4154336357d2d1492c6d336b9101827c1401898ecdca5a66c6f727d23d3ebb95530ecfee0f7649c221d2c131e56d37a8d422b0803ed0d623a2de36e9279c3c1c806654fbce9305cbb44210e282fa53c72f813440fd0cbfff492716c4a06cf99f4809481d51a03a88911f48f25db6784e16f3a251d5fb75fca164911e4a88d1b904b5372d8660d309f347dce2810552a4789af371f3e67418433cdb0d69a4fc562514cb396141f31312fab85f68c1ecd9d03ba37b40934535cc3e53c71a3a51663a479eca63dc5c15a387e5753cfa806402b6426b8dcaace2553d219b2ae02bd45fd4fde6e3e1bd6370d3e8d558aea69854381f1dad0fe2bbf1a73043f03aafe81c3a3d386c758abcb45cc537bf40d459e138f418802ec61abcad5e333389d74ea941eb5f26b25ed7642e0135fd8e3e2fc998613023dd5b804e2cf1a80ea60b353535b1446e3ebb542c1c15d87c6f5a4716455c8a9f52380161a5d23e9678417fe7ed64760e14c1390bcf73e1d531bb3548d7b9df25b6f85512667af396fad73110d1ab69a8ecdddaf29dc3701a5d927e599f5c2af293a6b276da7a5c917298ea24c2366d5e91593605fcbc4d6462", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xfffffe01, 0x8000, 0xfff, 0x0, 0xee00, 0x0, 0xc3fa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x0) 704.463823ms ago: executing program 3 (id=728): r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x0, 0x4) r1 = openat(r0, &(0x7f00000000c0)='./file1\x00', 0x1f1f03, 0x14c) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) 645.764739ms ago: executing program 3 (id=729): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000840)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x300}, 0x0) 645.510174ms ago: executing program 3 (id=730): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x2c, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x32) r6 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000200)={"aa9c7481", 0x0, 0xf7, 0x0, 0x8, 0x2, "2fbab4cd34744fe00799fe7087dc89", "a998f2c6", "89e9832a", "6f9cff89", ["bd99adaf7e8b7e34f59653cd", "171404168e45b72df3972316", "74cded730c5395ddbf12171b", "734fbd64cf725dfac1dc3171"]}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can={0x1d, r4}}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x6) 601.010279ms ago: executing program 3 (id=732): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000040)=""/229, 0xe5}, {&(0x7f0000000140)=""/135, 0x87}, {&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/26, 0x1a}], 0x5}, 0x1ff}], 0x1, 0x40010000, &(0x7f0000000400)={0x0, 0x989680}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x3, &(0x7f0000000440)=0x5e, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000480)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000004c0)="7599f2786f08d1123f0153179ed8a109faa0fb0cb676ee857bd6dd1f2476823e0b85d583d354760797c26ed438ced60f0207052d1738b8678ddc0f7528fb8efff07e3a294d82a1b2909d03ca24c7c1f09b33f59b5fd7577adfc56b20065e98dc295dcb06008250085cb7098e6a9cecc8b4a394f3dc374cfc9939792b66ec03dcf445405de327d79d08f5a9435bb521fc3a4742d6b15f2ac6263640adb18b71e3e9375cb97b13d10826311597227061bfdeacb8e61f08d78adefda7ede94a53469eda97974b49db299a3445f48bafe1da5c251d9a3b9c1aa99dff872f48944e36a89ab2f0852cd32b71de8b6abeb1b54686641dd8a64deb47", 0xf8}], 0x1, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x7, 0x8, "e75d8a57aaaa"}, @ssrr={0x89, 0x13, 0xa4, [@loopback, @local, @loopback, @loopback]}, @lsrr={0x83, 0xf, 0xf6, [@private=0xa010102, @empty, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)="108b1a80f60422ce8208b4bd189607a57b8be297c593cabd4fc23d22d0849a1cead91af16f78613bf5bdc785342618656ce848a115ba", 0x36}], 0x1}}], 0x2, 0x8000) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000800)=0x5, 0x4) r2 = memfd_secret(0x0) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000840)={r2, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) fcntl$setlease(r2, 0x400, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x19, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x3, 0xd, 0x0, 0xb}, 0x10, 0x0, r2, 0x5, &(0x7f0000000ac0)=[0xffffffffffffffff, r2], &(0x7f0000000b00)=[{0x0, 0x2, 0x2, 0x3}, {0x3, 0x400, 0x5, 0x6}, {0x1, 0x3, 0x0, 0x4}, {0x3, 0x4, 0xd, 0x4}, {0x3, 0x2, 0x7, 0xc}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r4, 0x0, 0xc7, 0xd7, &(0x7f0000000c40)="57067ec251b89c3d7d03f34d004e9298fc77b6017bd1edbdd85d2d124e27581737265f381442992449dce92ff013ff5df0e740660658333ec68e0ffef10e7fcbb68b776d3c80083ad3b643340ee87b475c12c1c23801f74d029f4a26110ad234d791a7427a04d1bb465eaf0b898788c036a4aa2cbfa0e5ecc7f76c28afc036d542567719768627d20aaff2b9ba22eb45ba3f6b20889ad4298e15f604fe6f71fb4e9194888b0696d4481027dfd62b91cbe75da21c61a6e8298206df394bcd74c4e8e7f5387e92ff", &(0x7f0000000d40)=""/215, 0x10000, 0x0, 0x1000, 0xb5, &(0x7f0000000e40)="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", &(0x7f0000001e40)="b7bd681de042c658b95eb1e4f1b48e8b155feee4ad9c987bfc366a047cc6ee48c9322dc01315db66ee05b968097f9530e6c0e064e07976cc2ae50744b528520d7ea96e2703717b0dc7d9066da17ed06bade517672f1dc2f5d2a361cc80edec018eacb8c09ee1889188a302c4320479405d611e0e55ca4b34df36260c7dddb3e4fdd29f69a76b7c32ccfe064b51efb05d93083cdbf01c4079621e33e2dec5288c1c6f818d942e14aec10208ad188425742510512d8a", 0x4, 0x0, 0x3}, 0x50) connect$x25(r2, &(0x7f0000001f80)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)={0x98, 0x1, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0xc) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000002140)=0x8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000021c0)={0x0}, &(0x7f0000002200)=0xc) r6 = syz_open_procfs(r5, &(0x7f0000002240)='net/hci\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r2) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000002600)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002300)={0x2a0, r7, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x10}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf3c00000}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffb}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffcc20}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffe}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}]}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4f3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x25}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x17c, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x860c}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x94d50bb4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x280000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x734}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffc01}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd86}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008045) syz_genetlink_get_family_id$smc(&(0x7f0000002640), r2) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000002680)={0x4, 0x4}) r8 = dup3(r3, r4, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002700), r8) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x30, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) close_range(0xffffffffffffffff, r6, 0x2) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) 532.737458ms ago: executing program 0 (id=734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000012000/0x4000)=nil, 0x4000, &(0x7f0000000000)='/dev/snd/midiC#D#\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0008a16000008009f000d000000080026000816"], 0x40}}, 0x200040b4) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f0000009000/0x4000)=nil, 0x4000}, 0x1}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) 532.32272ms ago: executing program 1 (id=735): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0xfffffffc) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000018fcffffffffffff4d02000000000000faffbaecf78581b9081e060076ceababffff000038000100fdff7f000808030000000400000007000000000000000a000000000000000101000000000000060000000000000007000000000000007fffffffffffffffdb55a3354ca6d746db00abec7dc7bab5a753e28de04049bfa713bf4cef51bb53d0ad"], 0x9a) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000780)={0x1200000000003}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01040000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000030000000180a0101000b000000000000010000000900020073797a30000000f30800010073797a30"], 0xb8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x3f, &(0x7f00000008c0), 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x42142, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r5, 0x0, 0x0) bind$rds(r5, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x6000001, 0x0, 0x0, 0x9, 0x20007}) 443.392744ms ago: executing program 1 (id=736): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x1fc, 0x4) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000a40)="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", 0x1be}], 0x1}}], 0x1, 0x80) 443.157834ms ago: executing program 1 (id=737): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) syz_open_dev$dri(0x0, 0x8000000000000000, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x20044850) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000002c0)=ANY=[@ANYBLOB="820000000000000005010040"]) 383.296055ms ago: executing program 0 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0xb, 0xae, 0x7, 0x3, 0x0, 0x70bd2d, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0x1}]}, 0x18}}, 0x4) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) syz_open_dev$evdev(0x0, 0x1bbc, 0x801) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r2, 0x10001, 0x0) 282.119145ms ago: executing program 1 (id=739): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f"], 0xfdef) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 82) 70.918238ms ago: executing program 1 (id=740): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x2c, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f00000000c0)=0x32) r6 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000200)={"aa9c7481", 0x0, 0xf7, 0x0, 0x8, 0x2, "2fbab4cd34744fe00799fe7087dc89", "a998f2c6", "89e9832a", "6f9cff89", ["bd99adaf7e8b7e34f59653cd", "171404168e45b72df3972316", "74cded730c5395ddbf12171b", "734fbd64cf725dfac1dc3171"]}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can={0x1d, r4}}) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x6) 70.757201ms ago: executing program 0 (id=741): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) 70.481412ms ago: executing program 1 (id=742): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x8000000000000000, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_genetlink_get_family_id$batadv(0x0, r4) close_range(r0, 0xffffffffffffffff, 0x0) 70.288285ms ago: executing program 0 (id=743): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2085, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 549.867µs ago: executing program 0 (id=744): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000100001040000000000f0ffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) 0s ago: executing program 0 (id=745): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) (async) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0x100, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd6, 0x4, 0x6, 0x0, 0x3, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x350bae1a, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xd4f, 0x7, 0xf2, 0x10, 0x5, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x4, 0x4, 0x3, 0x0, 0x0, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x3, 0xa, 0x0, 0x10000, 0x401, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x1, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffd, 0xa7d6, 0xb6eb, 0xc74, 0x77, 0x1, 0xff, 0x5cb5, 0xfffffffe, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0x2, 0x401, 0x2, 0x2, 0x4680, 0x7, 0xe665, 0x3c6e, 0x3, 0x40, 0x80, 0x4b, 0x8000, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x9, 0xfd, 0x101, 0x4, 0x40, 0xa, 0x1b, 0x1ff, 0x7ff, 0x2, 0x80000000, 0xffff, 0x9, 0x0, 0x6, 0x2, 0x1, 0x3, 0xa0, 0xf, 0x1ff, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x9, 0x1, 0xf1a, 0x664, 0x4, 0x9, 0x9, 0x2, 0x4, 0xfffffffd, 0x10, 0x0, 0x9, 0x10000, 0x1, 0x9, 0xf7a, 0xc6, 0x1, 0x4, 0x6, 0xffffffff, 0x6, 0x10001, 0x8, 0x68, 0x7, 0x1, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0x2, 0x40, 0x1c, 0x80, 0xb5f8, 0x8bc, 0x3, 0x101, 0x5, 0x63, 0x4, 0x8001, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x7, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x8, 0x6688, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0xce, 0xf, 0x0, 0x1, 0x667, 0x3, 0x0, 0x9, 0x9, 0x37d, 0x10001, 0xc, 0x1, 0x1, 0x2, 0x6, 0x4, 0x6, 0x1, 0x9, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80000001, 0x8, 0x8000, 0x3a, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x4, 0x10000, 0x4, 0xffff, 0xe, 0x89, 0x2, 0x7, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x0, 0x8, 0x0, 0x2, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x4, 0x0, 0x1, 0x4, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x4, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0xbf, 0x0, 0x8, 0x40, 0xd3, 0x7, 0x1, 0x89aa, 0x8, 0x0, 0xf0ce, 0x4, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x1, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xc, 0x6, 0x1, 0xfffffeff, 0x4, 0x2, 0x7fff, 0x101, 0x7, 0x6, 0x706, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x6, 0x80000000, 0x5, 0x1, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x5, 0x1ff, 0x9, 0x3, 0x3, 0x10001, 0xffff0000, 0xf, 0x1, 0xffffa5ba, 0xffffa9b4, 0x1, 0x4, 0x5, 0x3, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0xc8f, 0x1, 0x7, 0x8, 0x1, 0x10000, 0x57dc, 0x818a, 0x10, 0x8, 0x13, 0xfffffffc, 0xfffff001, 0xa, 0x5, 0x5, 0x4, 0xfff, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x2, 0x80000000, 0xd, 0x3, 0x1, 0x0, 0x5, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xae6, 0x9, 0xffffa0ae, 0x9, 0x6, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x9a, 0x9, 0xb, 0x800, 0x4, 0x3ff, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x2, 0x20000000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x8000001, 0x0, 0xfff, 0x101, 0x4, 0x0, 0x96c6, 0xc, 0x5, 0xfff, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x6, 0x4b15, 0x10000, 0x1, 0x9, 0x1, 0xd, 0x9, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x3, 0x10001, 0x1, 0x7, 0x1, 0x5, 0x8, 0xffffc487, 0x200, 0x10001, 0x37c, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x0, 0x2, 0x4, 0x80000000, 0xb46d, 0x3, 0xffe, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x9, 0x3, 0xffffffff, 0x9, 0x7f, 0x6, 0x8, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x80000001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0xff, 0x5, 0x2, 0x2, 0x4, 0x10000, 0x80000001, 0x5, 0x8001, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0xffff, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x9, 0x8, 0x0, 0x5, 0xf, 0x5, 0xe, 0x8, 0x1000, 0x2, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x9, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x7, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x1, 0x30, 0xffffff7e, 0x1, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x0, 0x1, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x43, 0x3, 0x9, 0x5, 0x80000000, 0x9, 0x0, 0x5, 0x81, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x1a, 0x9, 0x2, 0x9, 0xffffffff, 0x9, 0x7, 0x2c1, 0x9e95, 0x2, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x9, 0x6, 0x9, 0x9, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x2, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0xfb4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x8001, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0x3, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x100, 0x4, 0x3, 0x6, 0x80000000, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x5, 0x6, 0x1, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xd, 0x3, 0x4, 0x3, 0x81, 0x8, 0x14, 0x8, 0x9, 0x6, 0xffff, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0x0, 0x924, 0x6, 0x100, 0x1, 0x5, 0xffff351b, 0x8, 0xfffffffb, 0x7, 0x9, 0x2, 0x5, 0x4, 0x1, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x5, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0xb8, 0x8, 0x5, 0xfffffff7, 0x7, 0x7, 0x5, 0x6332, 0x0, 0x6, 0xea, 0x0, 0xfff, 0x809, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x3ff, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x44, 0xa, 0x9b, 0x3, 0xe, 0x1, 0x1, 0xc, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x9, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0xc0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x77, 0x93c, 0x6, 0x0, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xfffffff8, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x8, 0x1, 0xfffffffc, 0x1af88, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x40, 0x8, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x4, 0xf05, 0x0, 0x101, 0x200, 0x7, 0x7ff, 0x0, 0x1, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xdd, 0x8, 0x89, 0x0, 0x100, 0x1, 0x9, 0xe75, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0xfffffff8, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0x9, 0x1, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x5, 0x8]}) (async) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={[], [], 0x3a}) (async, rerun: 32) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (rerun: 32) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="c75d967b39d16c86aa0ecf273dc0b6e62d4680c457d127b4a4f7f2ed65f683d52bffcbb15ceda31e3bf9074790f9ee6c32d72b867511b307ac8880ac3366d6ea0f18a6deb51e7a9462f5e1fef487b7a333b7993a22ee83a338ec53128449a8cfd337390e385c050a90bbc6550570ba042e8d4775ec8ae3af2c31281c948bf0ee313f084c481274e6bb181e18e1efc2060821d2268660c94d81bcdf8140d99016370141b89710", 0xa6) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="180000002d00010026bd720300dbdf250400000004000e"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20040000) 0s ago: executing program 2 (id=748): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)=@ethtool_cmd={0x9, 0x40, 0x9, 0x8, 0x0, 0x4, 0x1, 0x8, 0x6, 0x8, 0x200, 0x5, 0x8, 0xc, 0x9, 0xffffff57, [0x4, 0x6]}}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x40, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000240)={@hyper}) write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x2d, 'blkio'}, {0x2b, 'net_prio'}, {0x2b, 'blkio'}]}, 0x18) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000180)={&(0x7f00000019c0)={{@local, 0xb2ef}, {@hyper, 0x5}, 0xdc, "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"}, 0x418, 0x6}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000280)={0xffffffffffffff49, 0x0}) kernel console output (not intermixed with test programs): ll be removed in the future, [ 51.934102][ C3] vkms_vblank_simulate: vblank timer overrun [ 51.936670][ T6300] use the actual size instead. [ 52.038350][ T6307] binder: BC_ACQUIRE_RESULT not supported [ 52.040167][ T6307] binder: 6306:6307 ioctl c0306201 200000000180 returned -22 [ 52.134153][ T6317] FAULT_INJECTION: forcing a failure. [ 52.134153][ T6317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.139358][ T6317] CPU: 0 UID: 0 PID: 6317 Comm: syz.1.112 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 52.139373][ T6317] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.139380][ T6317] Call Trace: [ 52.139384][ T6317] [ 52.139388][ T6317] dump_stack_lvl+0x16c/0x1f0 [ 52.139410][ T6317] should_fail_ex+0x512/0x640 [ 52.139430][ T6317] _copy_to_user+0x32/0xd0 [ 52.139441][ T6317] simple_read_from_buffer+0xcb/0x170 [ 52.139459][ T6317] proc_fail_nth_read+0x197/0x270 [ 52.139476][ T6317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.139493][ T6317] ? rw_verify_area+0xcf/0x680 [ 52.139508][ T6317] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 52.139523][ T6317] vfs_read+0x1e1/0xc60 [ 52.139541][ T6317] ? __pfx___mutex_lock+0x10/0x10 [ 52.139553][ T6317] ? __pfx_vfs_read+0x10/0x10 [ 52.139572][ T6317] ? __fget_files+0x20e/0x3c0 [ 52.139586][ T6317] ksys_read+0x12a/0x250 [ 52.139601][ T6317] ? __pfx_ksys_read+0x10/0x10 [ 52.139616][ T6317] ? v4l2_ioctl+0x1c5/0x250 [ 52.139633][ T6317] ? fput+0x70/0xf0 [ 52.139646][ T6317] do_syscall_64+0xcd/0x4c0 [ 52.139658][ T6317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.139670][ T6317] RIP: 0033:0x7f572e38d3bc [ 52.139682][ T6317] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.139693][ T6317] RSP: 002b:00007f572f1d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.139703][ T6317] RAX: ffffffffffffffda RBX: 00007f572e5b5fa0 RCX: 00007f572e38d3bc [ 52.139710][ T6317] RDX: 000000000000000f RSI: 00007f572f1d60a0 RDI: 0000000000000004 [ 52.139716][ T6317] RBP: 00007f572f1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.139722][ T6317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.139728][ T6317] R13: 0000000000000000 R14: 00007f572e5b5fa0 R15: 00007ffdd2a79948 [ 52.139742][ T6317] [ 52.228967][ T6330] netlink: 'syz.1.117': attribute type 10 has an invalid length. [ 52.234615][ T6324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.254268][ T6330] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 52.299080][ T6324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.338097][ T6340] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 52.340825][ T6340] hsr_slave_0: entered allmulticast mode [ 52.343131][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.347565][ T6340] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 52.350434][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.354830][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.358168][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.362519][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.366810][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.370017][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.372905][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.377473][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.380699][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.383750][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.387080][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.390785][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.393915][ T6349] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 52.394023][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.399760][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.402694][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.424328][ T6324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.440445][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.444249][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.447674][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.450635][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.453813][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.456982][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.460049][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.463153][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.466676][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.469624][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.472411][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.475330][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.478242][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.481117][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.484160][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.487139][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.499371][ T6324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.506598][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.509999][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.512997][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.516023][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.519000][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.521920][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.525563][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.528511][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.531362][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.534620][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.537674][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.540514][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.543414][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.547201][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.550070][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.552874][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.555788][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.558773][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.561885][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.564803][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.568081][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.571340][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.574331][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.577369][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.584041][ T6324] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.587162][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.590153][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.596813][ T6324] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.599939][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.606082][ T6324] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.609255][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.616089][ T6324] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.619292][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.622211][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.625172][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.628060][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.630975][ T6340] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 52.654552][ T6020] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.815201][ T6020] usb 7-1: Using ep0 maxpacket: 32 [ 52.818119][ T6020] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 52.822722][ T6020] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 52.825970][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 52.828649][ T6020] usb 7-1: Product: syz [ 52.830119][ T6020] usb 7-1: Manufacturer: syz [ 52.831580][ T6020] usb 7-1: SerialNumber: syz [ 52.834551][ T5991] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 52.839037][ T6020] usb 7-1: config 0 descriptor?? [ 52.841086][ T6351] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 52.887183][ T6367] FAULT_INJECTION: forcing a failure. [ 52.887183][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 52.891873][ T6367] CPU: 3 UID: 0 PID: 6367 Comm: syz.1.133 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 52.891896][ T6367] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 52.891906][ T6367] Call Trace: [ 52.891912][ T6367] [ 52.891919][ T6367] dump_stack_lvl+0x16c/0x1f0 [ 52.891951][ T6367] should_fail_ex+0x512/0x640 [ 52.891978][ T6367] ? __kmalloc_noprof+0xbf/0x510 [ 52.892006][ T6367] ? ethnl_default_start+0x114/0x420 [ 52.892021][ T6367] should_failslab+0xc2/0x120 [ 52.892038][ T6367] __kmalloc_noprof+0xd2/0x510 [ 52.892067][ T6367] ? __pfx_ethnl_default_start+0x10/0x10 [ 52.892082][ T6367] ethnl_default_start+0x114/0x420 [ 52.892101][ T6367] ? __pfx_ethnl_default_start+0x10/0x10 [ 52.892116][ T6367] genl_start+0x5fc/0x980 [ 52.892142][ T6367] __netlink_dump_start+0x60e/0x990 [ 52.892165][ T6367] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 52.892189][ T6367] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 52.892217][ T6367] ? __pfx_genl_get_cmd+0x10/0x10 [ 52.892236][ T6367] ? __pfx_genl_start+0x10/0x10 [ 52.892255][ T6367] ? __pfx_genl_dumpit+0x10/0x10 [ 52.892274][ T6367] ? __pfx_genl_done+0x10/0x10 [ 52.892297][ T6367] ? __sys_sendmsg+0x16d/0x220 [ 52.892322][ T6367] ? do_syscall_64+0xcd/0x4c0 [ 52.892336][ T6367] ? __radix_tree_lookup+0x21f/0x2c0 [ 52.892365][ T6367] genl_rcv_msg+0x46e/0x800 [ 52.892390][ T6367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.892412][ T6367] ? __pfx_ethnl_default_start+0x10/0x10 [ 52.892426][ T6367] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 52.892441][ T6367] ? __pfx_ethnl_default_done+0x10/0x10 [ 52.892470][ T6367] ? __lock_acquire+0x622/0x1c90 [ 52.892491][ T6367] netlink_rcv_skb+0x155/0x420 [ 52.892511][ T6367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 52.892533][ T6367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 52.892562][ T6367] ? netlink_deliver_tap+0x1ae/0xd30 [ 52.892580][ T6367] ? is_vmalloc_addr+0x86/0xa0 [ 52.892608][ T6367] genl_rcv+0x28/0x40 [ 52.892626][ T6367] netlink_unicast+0x58d/0x850 [ 52.892691][ T6367] ? __pfx_netlink_unicast+0x10/0x10 [ 52.892724][ T6367] netlink_sendmsg+0x8d1/0xdd0 [ 52.892755][ T6367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.892779][ T6367] ____sys_sendmsg+0xa98/0xc70 [ 52.892801][ T6367] ? copy_msghdr_from_user+0x10a/0x160 [ 52.892827][ T6367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 52.892860][ T6367] ___sys_sendmsg+0x134/0x1d0 [ 52.892888][ T6367] ? __pfx____sys_sendmsg+0x10/0x10 [ 52.892911][ T6367] ? __lock_acquire+0x622/0x1c90 [ 52.892958][ T6367] __sys_sendmsg+0x16d/0x220 [ 52.892989][ T6367] ? __pfx___sys_sendmsg+0x10/0x10 [ 52.893031][ T6367] do_syscall_64+0xcd/0x4c0 [ 52.893050][ T6367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.893067][ T6367] RIP: 0033:0x7f572e38e9a9 [ 52.893083][ T6367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.893097][ T6367] RSP: 002b:00007f572f1d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.893114][ T6367] RAX: ffffffffffffffda RBX: 00007f572e5b5fa0 RCX: 00007f572e38e9a9 [ 52.893124][ T6367] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 52.893135][ T6367] RBP: 00007f572f1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 52.893145][ T6367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.893154][ T6367] R13: 0000000000000000 R14: 00007f572e5b5fa0 R15: 00007ffdd2a79948 [ 52.893177][ T6367] [ 53.005198][ C3] vkms_vblank_simulate: vblank timer overrun [ 53.024484][ T5991] usb 8-1: Using ep0 maxpacket: 8 [ 53.028498][ T5991] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 53.031148][ T5991] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.034492][ T5991] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.037518][ T5991] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.040683][ T5991] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.047092][ T5991] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.050037][ T5991] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.050337][ T1331] usb 7-1: USB disconnect, device number 3 [ 53.257931][ T5991] usb 8-1: GET_CAPABILITIES returned 0 [ 53.259779][ T5991] usbtmc 8-1:16.0: can't read capabilities [ 53.264988][ T6370] < [ 53.443587][ T6386] __nla_validate_parse: 1 callbacks suppressed [ 53.443600][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.141'. [ 53.449292][ T6386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.141'. [ 53.466395][ T6357] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 53.479961][ T1331] usb 8-1: USB disconnect, device number 2 [ 53.800221][ T6408] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.873735][ T6408] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.935699][ T6408] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.993773][ T6408] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.084486][ T5991] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 54.089617][ T6408] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.096826][ T6408] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.103472][ T6408] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.110505][ T6408] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.140059][ T6412] FAULT_INJECTION: forcing a failure. [ 54.140059][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 54.146264][ T6412] CPU: 0 UID: 0 PID: 6412 Comm: syz.1.152 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 54.146288][ T6412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.146299][ T6412] Call Trace: [ 54.146305][ T6412] [ 54.146313][ T6412] dump_stack_lvl+0x16c/0x1f0 [ 54.146345][ T6412] should_fail_ex+0x512/0x640 [ 54.146372][ T6412] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 54.146399][ T6412] should_failslab+0xc2/0x120 [ 54.146415][ T6412] __kmalloc_cache_noprof+0x6a/0x3e0 [ 54.146434][ T6412] ? __pfx___mutex_lock+0x10/0x10 [ 54.146450][ T6412] ? snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0x9b/0x5b0 [ 54.146476][ T6412] snd_mixer_oss_get_volume1_vol.constprop.0.isra.0+0x9b/0x5b0 [ 54.146501][ T6412] snd_mixer_oss_get_volume1+0x236/0x610 [ 54.146523][ T6412] snd_mixer_oss_ioctl1+0x28b/0x1cf0 [ 54.146551][ T6412] ? __pfx_snd_mixer_oss_get_volume1+0x10/0x10 [ 54.146570][ T6412] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 54.146596][ T6412] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 54.146635][ T6412] ? hook_file_ioctl_common+0x145/0x410 [ 54.146663][ T6412] ? selinux_file_ioctl+0x180/0x270 [ 54.146692][ T6412] snd_mixer_oss_ioctl+0x3e/0x50 [ 54.146708][ T6412] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 54.146723][ T6412] __x64_sys_ioctl+0x18e/0x210 [ 54.146749][ T6412] do_syscall_64+0xcd/0x4c0 [ 54.146768][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.146785][ T6412] RIP: 0033:0x7f572e38e9a9 [ 54.146798][ T6412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.146814][ T6412] RSP: 002b:00007f572f1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.146830][ T6412] RAX: ffffffffffffffda RBX: 00007f572e5b5fa0 RCX: 00007f572e38e9a9 [ 54.146842][ T6412] RDX: 0000200000000000 RSI: 0000000081044d03 RDI: 0000000000000003 [ 54.146852][ T6412] RBP: 00007f572f1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.146861][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.146871][ T6412] R13: 0000000000000000 R14: 00007f572e5b5fa0 R15: 00007ffdd2a79948 [ 54.146893][ T6412] [ 54.157291][ T6414] vlan2: entered promiscuous mode [ 54.231044][ T6414] vlan2: entered allmulticast mode [ 54.232725][ T6414] hsr_slave_1: entered allmulticast mode [ 54.254642][ T5991] usb 7-1: Using ep0 maxpacket: 32 [ 54.260221][ T5991] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 54.273601][ T5991] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 54.302242][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 54.346078][ T5991] usb 7-1: Product: syz [ 54.347919][ T5991] usb 7-1: Manufacturer: syz [ 54.349871][ T5991] usb 7-1: SerialNumber: syz [ 54.358505][ T5991] usb 7-1: config 0 descriptor?? [ 54.361996][ T6410] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 54.409030][ T6421] FAULT_INJECTION: forcing a failure. [ 54.409030][ T6421] name failslab, interval 1, probability 0, space 0, times 0 [ 54.414623][ T6421] CPU: 0 UID: 0 PID: 6421 Comm: syz.3.156 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 54.414647][ T6421] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 54.414657][ T6421] Call Trace: [ 54.414663][ T6421] [ 54.414677][ T6421] dump_stack_lvl+0x16c/0x1f0 [ 54.414710][ T6421] should_fail_ex+0x512/0x640 [ 54.414736][ T6421] ? __kmalloc_noprof+0xbf/0x510 [ 54.414764][ T6421] ? ethnl_default_start+0x15a/0x420 [ 54.414780][ T6421] should_failslab+0xc2/0x120 [ 54.414798][ T6421] __kmalloc_noprof+0xd2/0x510 [ 54.414828][ T6421] ? __pfx_ethnl_default_start+0x10/0x10 [ 54.414846][ T6421] ethnl_default_start+0x15a/0x420 [ 54.414866][ T6421] ? __pfx_ethnl_default_start+0x10/0x10 [ 54.414882][ T6421] genl_start+0x5fc/0x980 [ 54.414907][ T6421] __netlink_dump_start+0x60e/0x990 [ 54.414930][ T6421] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 54.414956][ T6421] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 54.414985][ T6421] ? __pfx_genl_get_cmd+0x10/0x10 [ 54.415004][ T6421] ? __pfx_genl_start+0x10/0x10 [ 54.415023][ T6421] ? __pfx_genl_dumpit+0x10/0x10 [ 54.415042][ T6421] ? __pfx_genl_done+0x10/0x10 [ 54.415065][ T6421] ? __sys_sendmsg+0x16d/0x220 [ 54.415090][ T6421] ? do_syscall_64+0xcd/0x4c0 [ 54.415104][ T6421] ? __radix_tree_lookup+0x21f/0x2c0 [ 54.415134][ T6421] genl_rcv_msg+0x46e/0x800 [ 54.415160][ T6421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.415182][ T6421] ? __pfx_ethnl_default_start+0x10/0x10 [ 54.415197][ T6421] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 54.415212][ T6421] ? __pfx_ethnl_default_done+0x10/0x10 [ 54.415241][ T6421] ? __lock_acquire+0x622/0x1c90 [ 54.415262][ T6421] netlink_rcv_skb+0x155/0x420 [ 54.415281][ T6421] ? __pfx_genl_rcv_msg+0x10/0x10 [ 54.415304][ T6421] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 54.415334][ T6421] ? netlink_deliver_tap+0x1ae/0xd30 [ 54.415351][ T6421] ? is_vmalloc_addr+0x86/0xa0 [ 54.415381][ T6421] genl_rcv+0x28/0x40 [ 54.415400][ T6421] netlink_unicast+0x58d/0x850 [ 54.415424][ T6421] ? __pfx_netlink_unicast+0x10/0x10 [ 54.415450][ T6421] netlink_sendmsg+0x8d1/0xdd0 [ 54.415475][ T6421] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.415505][ T6421] ____sys_sendmsg+0xa98/0xc70 [ 54.415526][ T6421] ? copy_msghdr_from_user+0x10a/0x160 [ 54.415553][ T6421] ? __pfx_____sys_sendmsg+0x10/0x10 [ 54.415587][ T6421] ___sys_sendmsg+0x134/0x1d0 [ 54.415615][ T6421] ? __pfx____sys_sendmsg+0x10/0x10 [ 54.415640][ T6421] ? __lock_acquire+0x622/0x1c90 [ 54.415696][ T6421] __sys_sendmsg+0x16d/0x220 [ 54.415724][ T6421] ? __pfx___sys_sendmsg+0x10/0x10 [ 54.415768][ T6421] do_syscall_64+0xcd/0x4c0 [ 54.415787][ T6421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.415805][ T6421] RIP: 0033:0x7f5929f8e9a9 [ 54.415820][ T6421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.415836][ T6421] RSP: 002b:00007f592add6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.415853][ T6421] RAX: ffffffffffffffda RBX: 00007f592a1b5fa0 RCX: 00007f5929f8e9a9 [ 54.415864][ T6421] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000008 [ 54.415874][ T6421] RBP: 00007f592add6090 R08: 0000000000000000 R09: 0000000000000000 [ 54.415884][ T6421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.415893][ T6421] R13: 0000000000000000 R14: 00007f592a1b5fa0 R15: 00007ffde58bc588 [ 54.415917][ T6421] [ 54.572653][ T6048] usb 7-1: USB disconnect, device number 4 [ 54.624528][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 54.794982][ T29] usb 5-1: too many configurations: 254, using maximum allowed: 8 [ 54.798219][ T29] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.801321][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 54.806153][ T29] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.809278][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 54.814128][ T29] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.817588][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 54.822046][ T29] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.825664][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 54.830178][ T29] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.833244][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 54.839101][ T29] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.842192][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 54.847311][ T29] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.850434][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 54.855883][ T29] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 54.859496][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 54.866506][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 54.869398][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.872888][ T29] usb 5-1: Product: syz [ 54.874285][ T29] usb 5-1: Manufacturer: syz [ 54.876083][ T29] usb 5-1: SerialNumber: syz [ 54.880978][ T29] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 55.046875][ T6436] Can't find a SQUASHFS superblock on nullb0 [ 55.072102][ T6441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'. [ 55.121361][ T6446] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 55.128033][ T6447] vlan2: entered promiscuous mode [ 55.129739][ T6447] vlan2: entered allmulticast mode [ 55.131364][ T6447] hsr_slave_1: entered allmulticast mode [ 55.137112][ T6446] fuse: Bad value for 'group_id' [ 55.138821][ T6446] fuse: Bad value for 'group_id' [ 55.324835][ T40] kauditd_printk_skb: 18 callbacks suppressed [ 55.324847][ T40] audit: type=1400 audit(1752931095.560:205): avc: denied { unmount } for pid=6466 comm="syz.3.173" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.497543][ T6472] capability: warning: `syz.1.175' uses 32-bit capabilities (legacy support in use) [ 55.501191][ T40] audit: type=1400 audit(1752931095.740:206): avc: denied { read write } for pid=6471 comm="syz.1.175" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.503499][ T6472] loop6: detected capacity change from 0 to 2560 [ 55.508651][ T40] audit: type=1400 audit(1752931095.740:207): avc: denied { open } for pid=6471 comm="syz.1.175" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 55.512726][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.517807][ T40] audit: type=1400 audit(1752931095.740:208): avc: denied { append } for pid=6471 comm="syz.1.175" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 55.520649][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.531703][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.534669][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.537357][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.543791][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.546370][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.548734][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.551098][ T6472] ldm_validate_partition_table(): Disk read failed. [ 55.553304][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.558160][ T6472] Buffer I/O error on dev loop6, logical block 0, async page read [ 55.560927][ T6472] Dev loop6: unable to read RDB block 0 [ 55.570342][ T6472] loop6: unable to read partition table [ 55.572857][ T6472] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 55.608098][ T40] audit: type=1400 audit(1752931095.850:209): avc: denied { create } for pid=6471 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.614091][ T40] audit: type=1400 audit(1752931095.850:210): avc: denied { write } for pid=6471 comm="syz.1.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 55.627689][ T5362] ldm_validate_partition_table(): Disk read failed. [ 55.629928][ T5362] Dev loop6: unable to read RDB block 0 [ 55.631892][ T5362] loop6: unable to read partition table [ 55.721223][ T29] usb 5-1: USB disconnect, device number 2 [ 55.744470][ T40] audit: type=1400 audit(1752931095.980:211): avc: denied { accept } for pid=6490 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.751002][ T40] audit: type=1400 audit(1752931095.980:212): avc: denied { create } for pid=6490 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.759933][ T40] audit: type=1400 audit(1752931095.980:213): avc: denied { setopt } for pid=6490 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 55.765031][ T6494] netlink: 20 bytes leftover after parsing attributes in process `syz.0.185'. [ 55.816440][ T6502] CUSE: unknown device info "<5\z0z,~XY+A}sF'%:Ij!@QmߑRGQq 6*5p)x?," [ 55.831468][ T6502] CUSE: unknown device info "&b%ZW)3\my " [ 55.833685][ T6502] CUSE: unknown device info "ҭSmMi_0˱ݯ;q]{i79{0Եt~>VZ\.9OCU&qmsfkc"" [ 55.838507][ T6502] CUSE: DEVNAME unspecified [ 55.840561][ T6502] netlink: 'syz.1.188': attribute type 11 has an invalid length. [ 55.846424][ T40] audit: type=1400 audit(1752931096.090:214): avc: denied { create } for pid=6504 comm="syz.0.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 55.849665][ T6505] warning: `syz.0.189' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.858378][ T6504] delete_channel: no stack [ 56.114554][ T6514] loop6: detected capacity change from 0 to 2560 [ 56.120495][ T5965] ldm_validate_partition_table(): Disk read failed. [ 56.123621][ T5965] Dev loop6: unable to read RDB block 0 [ 56.126857][ T5965] loop6: unable to read partition table [ 56.133423][ T6514] ldm_validate_partition_table(): Disk read failed. [ 56.136778][ T6514] Dev loop6: unable to read RDB block 0 [ 56.139694][ T6514] loop6: unable to read partition table [ 56.144784][ T6514] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 56.552365][ T6552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.208'. [ 57.019989][ T6584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 57.094516][ T6588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.137602][ T6593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.223'. [ 57.195696][ T6599] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.201003][ T6599] omfs: Invalid superblock (0) [ 57.227717][ T6603] openvswitch: netlink: Flow key attr not present in new flow. [ 57.238706][ T6605] FAULT_INJECTION: forcing a failure. [ 57.238706][ T6605] name failslab, interval 1, probability 0, space 0, times 0 [ 57.242653][ T6605] CPU: 3 UID: 0 PID: 6605 Comm: syz.2.228 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 57.242668][ T6605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.242675][ T6605] Call Trace: [ 57.242679][ T6605] [ 57.242683][ T6605] dump_stack_lvl+0x16c/0x1f0 [ 57.242706][ T6605] should_fail_ex+0x512/0x640 [ 57.242726][ T6605] should_failslab+0xc2/0x120 [ 57.242738][ T6605] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 57.242755][ T6605] ? skb_clone+0x190/0x3f0 [ 57.242768][ T6605] skb_clone+0x190/0x3f0 [ 57.242778][ T6605] packet_rcv+0x610/0x15a0 [ 57.242796][ T6605] ? __pfx_packet_rcv+0x10/0x10 [ 57.242810][ T6605] __netif_receive_skb_core.constprop.0+0xe2a/0x4a00 [ 57.242831][ T6605] ? kernel_text_address+0x8d/0x100 [ 57.242843][ T6605] ? __lock_acquire+0x622/0x1c90 [ 57.242857][ T6605] ? __kernel_text_address+0xd/0x40 [ 57.242868][ T6605] ? unwind_get_return_address+0x59/0xa0 [ 57.242882][ T6605] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.242902][ T6605] ? stack_trace_save+0x8e/0xc0 [ 57.242918][ T6605] ? __pfx_stack_trace_save+0x10/0x10 [ 57.242932][ T6605] ? stack_depot_save_flags+0x28/0xa40 [ 57.242953][ T6605] ? kasan_save_stack+0x42/0x60 [ 57.242968][ T6605] ? kasan_save_stack+0x33/0x60 [ 57.242983][ T6605] ? kasan_save_track+0x14/0x30 [ 57.242998][ T6605] ? __kasan_slab_alloc+0x89/0x90 [ 57.243007][ T6605] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbc0 [ 57.243023][ T6605] ? xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 57.243034][ T6605] ? bpf_test_run_xdp_live+0x34d/0x500 [ 57.243044][ T6605] ? __sys_bpf+0x170a/0x4ea0 [ 57.243061][ T6605] __netif_receive_skb_list_core+0x355/0x950 [ 57.243080][ T6605] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 57.243097][ T6605] ? lock_acquire+0x179/0x350 [ 57.243112][ T6605] netif_receive_skb_list_internal+0x752/0xdb0 [ 57.243131][ T6605] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 57.243148][ T6605] ? __pfx_eth_type_trans+0x10/0x10 [ 57.243161][ T6605] ? __build_skb_around+0x278/0x3b0 [ 57.243180][ T6605] netif_receive_skb_list+0x4d/0x4b0 [ 57.243197][ T6605] xdp_test_run_batch.constprop.0+0x146b/0x1ad0 [ 57.243212][ T6605] ? __lock_acquire+0x622/0x1c90 [ 57.243223][ T6605] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 57.243240][ T6605] ? read_tsc+0x9/0x20 [ 57.243253][ T6605] ? ktime_get+0x1a7/0x310 [ 57.243271][ T6605] bpf_test_run_xdp_live+0x34d/0x500 [ 57.243283][ T6605] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 57.243295][ T6605] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.243310][ T6605] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 57.243320][ T6605] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.243344][ T6605] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 57.243356][ T6605] ? 0xffffffffa0206200 [ 57.243366][ T6605] ? 0xffffffffa0206200 [ 57.243374][ T6605] ? 0xffffffffa0206200 [ 57.243385][ T6605] bpf_prog_test_run_xdp+0x824/0x1590 [ 57.243402][ T6605] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.243414][ T6605] ? __might_fault+0x70/0x190 [ 57.243433][ T6605] ? fput+0x70/0xf0 [ 57.243445][ T6605] ? __bpf_prog_get+0x97/0x2a0 [ 57.243457][ T6605] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.243469][ T6605] __sys_bpf+0x170a/0x4ea0 [ 57.243486][ T6605] ? __pfx___sys_bpf+0x10/0x10 [ 57.243501][ T6605] ? ksys_write+0x190/0x250 [ 57.243519][ T6605] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 57.243537][ T6605] ? fput+0x70/0xf0 [ 57.243548][ T6605] ? ksys_write+0x1ac/0x250 [ 57.243563][ T6605] ? __pfx_ksys_write+0x10/0x10 [ 57.243581][ T6605] __x64_sys_bpf+0x78/0xc0 [ 57.243597][ T6605] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.243613][ T6605] do_syscall_64+0xcd/0x4c0 [ 57.243624][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.243636][ T6605] RIP: 0033:0x7fc8d958e9a9 [ 57.243645][ T6605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.243655][ T6605] RSP: 002b:00007fc8da35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.243665][ T6605] RAX: ffffffffffffffda RBX: 00007fc8d97b5fa0 RCX: 00007fc8d958e9a9 [ 57.243672][ T6605] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 57.243679][ T6605] RBP: 00007fc8da35c090 R08: 0000000000000000 R09: 0000000000000000 [ 57.243685][ T6605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.243691][ T6605] R13: 0000000000000000 R14: 00007fc8d97b5fa0 R15: 00007ffca25959f8 [ 57.243704][ T6605] [ 57.383195][ C3] vkms_vblank_simulate: vblank timer overrun [ 57.410364][ T6609] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 57.414532][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.615775][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 57.619353][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 57.622172][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 57.790694][ T6643] validate_nla: 64 callbacks suppressed [ 57.790707][ T6643] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 57.920380][ T6657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6657 comm=syz.3.249 [ 57.942953][ T6660] FAULT_INJECTION: forcing a failure. [ 57.942953][ T6660] name failslab, interval 1, probability 0, space 0, times 0 [ 57.947205][ T6660] CPU: 1 UID: 0 PID: 6660 Comm: syz.1.250 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 57.947219][ T6660] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.947226][ T6660] Call Trace: [ 57.947230][ T6660] [ 57.947234][ T6660] dump_stack_lvl+0x16c/0x1f0 [ 57.947256][ T6660] should_fail_ex+0x512/0x640 [ 57.947276][ T6660] should_failslab+0xc2/0x120 [ 57.947289][ T6660] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 57.947306][ T6660] ? skb_clone+0x190/0x3f0 [ 57.947319][ T6660] skb_clone+0x190/0x3f0 [ 57.947329][ T6660] packet_rcv+0x610/0x15a0 [ 57.947348][ T6660] ? __pfx_packet_rcv+0x10/0x10 [ 57.947362][ T6660] __netif_receive_skb_core.constprop.0+0xe2a/0x4a00 [ 57.947382][ T6660] ? kernel_text_address+0x8d/0x100 [ 57.947395][ T6660] ? __lock_acquire+0x622/0x1c90 [ 57.947405][ T6660] ? __kernel_text_address+0xd/0x40 [ 57.947416][ T6660] ? unwind_get_return_address+0x59/0xa0 [ 57.947430][ T6660] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 57.947450][ T6660] ? stack_trace_save+0x8e/0xc0 [ 57.947466][ T6660] ? __pfx_stack_trace_save+0x10/0x10 [ 57.947480][ T6660] ? stack_depot_save_flags+0x28/0xa40 [ 57.947501][ T6660] ? kasan_save_stack+0x42/0x60 [ 57.947516][ T6660] ? kasan_save_stack+0x33/0x60 [ 57.947532][ T6660] ? kasan_save_track+0x14/0x30 [ 57.947547][ T6660] ? __kasan_slab_alloc+0x89/0x90 [ 57.947556][ T6660] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbc0 [ 57.947572][ T6660] ? xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 57.947583][ T6660] ? bpf_test_run_xdp_live+0x34d/0x500 [ 57.947592][ T6660] ? __sys_bpf+0x170a/0x4ea0 [ 57.947610][ T6660] __netif_receive_skb_list_core+0x355/0x950 [ 57.947629][ T6660] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 57.947646][ T6660] ? lock_acquire+0x179/0x350 [ 57.947661][ T6660] netif_receive_skb_list_internal+0x752/0xdb0 [ 57.947684][ T6660] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 57.947702][ T6660] ? __pfx_eth_type_trans+0x10/0x10 [ 57.947715][ T6660] ? __build_skb_around+0x278/0x3b0 [ 57.947733][ T6660] netif_receive_skb_list+0x4d/0x4b0 [ 57.947750][ T6660] xdp_test_run_batch.constprop.0+0x146b/0x1ad0 [ 57.947765][ T6660] ? __lock_acquire+0x622/0x1c90 [ 57.947776][ T6660] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 57.947793][ T6660] ? read_tsc+0x9/0x20 [ 57.947806][ T6660] ? ktime_get+0x1a7/0x310 [ 57.947824][ T6660] bpf_test_run_xdp_live+0x34d/0x500 [ 57.947834][ T6660] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.947852][ T6660] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 57.947865][ T6660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 57.947879][ T6660] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 57.947890][ T6660] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 57.947914][ T6660] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 57.947927][ T6660] ? 0xffffffffa0206200 [ 57.947936][ T6660] ? 0xffffffffa0206200 [ 57.947945][ T6660] ? 0xffffffffa0206200 [ 57.947956][ T6660] bpf_prog_test_run_xdp+0x824/0x1590 [ 57.947973][ T6660] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.947985][ T6660] ? __might_fault+0x70/0x190 [ 57.948004][ T6660] ? fput+0x70/0xf0 [ 57.948017][ T6660] ? __bpf_prog_get+0x97/0x2a0 [ 57.948028][ T6660] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 57.948040][ T6660] __sys_bpf+0x170a/0x4ea0 [ 57.948057][ T6660] ? __pfx___sys_bpf+0x10/0x10 [ 57.948072][ T6660] ? ksys_write+0x190/0x250 [ 57.948091][ T6660] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 57.948109][ T6660] ? fput+0x70/0xf0 [ 57.948120][ T6660] ? ksys_write+0x1ac/0x250 [ 57.948136][ T6660] ? __pfx_ksys_write+0x10/0x10 [ 57.948154][ T6660] __x64_sys_bpf+0x78/0xc0 [ 57.948170][ T6660] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.948186][ T6660] do_syscall_64+0xcd/0x4c0 [ 57.948197][ T6660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.948208][ T6660] RIP: 0033:0x7f572e38e9a9 [ 57.948217][ T6660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.948228][ T6660] RSP: 002b:00007f572f1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.948238][ T6660] RAX: ffffffffffffffda RBX: 00007f572e5b5fa0 RCX: 00007f572e38e9a9 [ 57.948245][ T6660] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 57.948251][ T6660] RBP: 00007f572f1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 57.948257][ T6660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 57.948263][ T6660] R13: 0000000000000000 R14: 00007f572e5b5fa0 R15: 00007ffdd2a79948 [ 57.948276][ T6660] [ 58.251982][ T6669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6669 comm=syz.1.252 [ 58.932485][ T6682] __nla_validate_parse: 5 callbacks suppressed [ 58.932498][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 59.040471][ T6693] FAULT_INJECTION: forcing a failure. [ 59.040471][ T6693] name failslab, interval 1, probability 0, space 0, times 0 [ 59.044829][ T6693] CPU: 0 UID: 0 PID: 6693 Comm: syz.0.263 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 59.044852][ T6693] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.044863][ T6693] Call Trace: [ 59.044869][ T6693] [ 59.044876][ T6693] dump_stack_lvl+0x16c/0x1f0 [ 59.044908][ T6693] should_fail_ex+0x512/0x640 [ 59.044940][ T6693] should_failslab+0xc2/0x120 [ 59.044958][ T6693] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 59.044985][ T6693] ? skb_clone+0x190/0x3f0 [ 59.045004][ T6693] skb_clone+0x190/0x3f0 [ 59.045022][ T6693] packet_rcv+0x610/0x15a0 [ 59.045048][ T6693] ? __pfx_packet_rcv+0x10/0x10 [ 59.045070][ T6693] __netif_receive_skb_core.constprop.0+0xe2a/0x4a00 [ 59.045101][ T6693] ? kernel_text_address+0x8d/0x100 [ 59.045119][ T6693] ? __lock_acquire+0x622/0x1c90 [ 59.045135][ T6693] ? __kernel_text_address+0xd/0x40 [ 59.045153][ T6693] ? unwind_get_return_address+0x59/0xa0 [ 59.045174][ T6693] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 59.045206][ T6693] ? stack_trace_save+0x8e/0xc0 [ 59.045229][ T6693] ? __pfx_stack_trace_save+0x10/0x10 [ 59.045251][ T6693] ? stack_depot_save_flags+0x28/0xa40 [ 59.045281][ T6693] ? kasan_save_stack+0x42/0x60 [ 59.045304][ T6693] ? kasan_save_stack+0x33/0x60 [ 59.045326][ T6693] ? kasan_save_track+0x14/0x30 [ 59.045347][ T6693] ? __kasan_slab_alloc+0x89/0x90 [ 59.045361][ T6693] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbc0 [ 59.045408][ T6693] ? xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 59.045426][ T6693] ? bpf_test_run_xdp_live+0x34d/0x500 [ 59.045441][ T6693] ? __sys_bpf+0x170a/0x4ea0 [ 59.045469][ T6693] __netif_receive_skb_list_core+0x355/0x950 [ 59.045502][ T6693] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 59.045528][ T6693] ? lock_acquire+0x179/0x350 [ 59.045555][ T6693] netif_receive_skb_list_internal+0x752/0xdb0 [ 59.045585][ T6693] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 59.045613][ T6693] ? __pfx_eth_type_trans+0x10/0x10 [ 59.045632][ T6693] ? __build_skb_around+0x278/0x3b0 [ 59.045670][ T6693] netif_receive_skb_list+0x4d/0x4b0 [ 59.045695][ T6693] xdp_test_run_batch.constprop.0+0x146b/0x1ad0 [ 59.045721][ T6693] ? __lock_acquire+0x622/0x1c90 [ 59.045740][ T6693] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 59.045771][ T6693] ? read_tsc+0x9/0x20 [ 59.045790][ T6693] ? ktime_get+0x1a7/0x310 [ 59.045820][ T6693] bpf_test_run_xdp_live+0x34d/0x500 [ 59.045839][ T6693] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 59.045860][ T6693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 59.045884][ T6693] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 59.045900][ T6693] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 59.045941][ T6693] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 59.045961][ T6693] ? 0xffffffffa0206200 [ 59.045977][ T6693] ? 0xffffffffa0206200 [ 59.045992][ T6693] ? 0xffffffffa0206200 [ 59.046012][ T6693] bpf_prog_test_run_xdp+0x824/0x1590 [ 59.046040][ T6693] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.046061][ T6693] ? __might_fault+0x70/0x190 [ 59.046092][ T6693] ? fput+0x70/0xf0 [ 59.046111][ T6693] ? __bpf_prog_get+0x97/0x2a0 [ 59.046129][ T6693] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.046147][ T6693] __sys_bpf+0x170a/0x4ea0 [ 59.046174][ T6693] ? __pfx___sys_bpf+0x10/0x10 [ 59.046198][ T6693] ? ksys_write+0x190/0x250 [ 59.046228][ T6693] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 59.046260][ T6693] ? fput+0x70/0xf0 [ 59.046278][ T6693] ? ksys_write+0x1ac/0x250 [ 59.046304][ T6693] ? __pfx_ksys_write+0x10/0x10 [ 59.046334][ T6693] __x64_sys_bpf+0x78/0xc0 [ 59.046358][ T6693] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.046386][ T6693] do_syscall_64+0xcd/0x4c0 [ 59.046404][ T6693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.046422][ T6693] RIP: 0033:0x7fa91ed8e9a9 [ 59.046435][ T6693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.046450][ T6693] RSP: 002b:00007fa91fb70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.046466][ T6693] RAX: ffffffffffffffda RBX: 00007fa91efb5fa0 RCX: 00007fa91ed8e9a9 [ 59.046477][ T6693] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 59.046488][ T6693] RBP: 00007fa91fb70090 R08: 0000000000000000 R09: 0000000000000000 [ 59.046498][ T6693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 59.046508][ T6693] R13: 0000000000000000 R14: 00007fa91efb5fa0 R15: 00007ffd491ec868 [ 59.046532][ T6693] [ 59.557110][ T6733] SELinux: syz.3.278 (6733) set checkreqprot to 1. This is no longer supported. [ 59.573809][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 59.619085][ T6743] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 59.621269][ T6743] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 59.629196][ T6743] vhci_hcd vhci_hcd.0: Device attached [ 59.636180][ T6746] vhci_hcd: connection closed [ 59.637239][ T6737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.280'. [ 59.654080][ T94] vhci_hcd: stop threads [ 59.656403][ T94] vhci_hcd: release socket [ 59.657876][ T94] vhci_hcd: disconnect device [ 59.672345][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.284'. [ 59.680384][ T6749] ip6gre1: entered promiscuous mode [ 60.208371][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.311'. [ 60.240156][ T6815] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 60.414814][ T6824] 9p: Unknown Cache mode or invalid value fs [ 60.618083][ T6858] netlink: 'syz.0.329': attribute type 20 has an invalid length. [ 60.888689][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 60.888703][ T40] audit: type=1400 audit(1752931101.130:248): avc: denied { mount } for pid=6879 comm="syz.2.337" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 60.974218][ T6894] vivid-004: ================= START STATUS ================= [ 60.977126][ T6894] vivid-004: Radio HW Seek Mode: Bounded [ 60.979369][ T6894] vivid-004: Radio Programmable HW Seek: false [ 60.981411][ T6894] vivid-004: RDS Rx I/O Mode: Block I/O [ 60.983238][ T6894] vivid-004: Generate RBDS Instead of RDS: false [ 60.985717][ T6894] vivid-004: RDS Reception: true [ 60.987372][ T6894] vivid-004: RDS Program Type: 0 inactive [ 60.989234][ T6894] vivid-004: RDS PS Name: inactive [ 60.990968][ T6894] vivid-004: RDS Radio Text: inactive [ 60.992760][ T6894] vivid-004: RDS Traffic Announcement: false inactive [ 60.995520][ T6894] vivid-004: RDS Traffic Program: false inactive [ 60.997751][ T6894] vivid-004: RDS Music: false inactive [ 61.000060][ T6894] vivid-004: ================== END STATUS ================== [ 61.065733][ T6898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.084790][ T6390] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.137165][ T6898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.194229][ T6898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.215490][ T6390] usb 6-1: device descriptor read/64, error -71 [ 61.267691][ T6898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.365891][ T6898] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.375449][ T6898] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.382787][ T6898] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.389797][ T6898] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.414766][ T40] audit: type=1400 audit(1752931101.650:249): avc: denied { add_name } for pid=6908 comm="syz.3.348" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.421669][ T40] audit: type=1400 audit(1752931101.650:250): avc: denied { create } for pid=6908 comm="syz.3.348" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 61.429120][ T40] audit: type=1400 audit(1752931101.650:251): avc: denied { associate } for pid=6908 comm="syz.3.348" name="cpu.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.444464][ T40] audit: type=1400 audit(1752931101.670:252): avc: denied { read append open } for pid=6908 comm="syz.3.348" path="/81/file0/cpu.stat" dev="9p" ino=36047879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.452107][ T40] audit: type=1400 audit(1752931101.670:253): avc: denied { map } for pid=6908 comm="syz.3.348" path="/81/file0/cpu.stat" dev="9p" ino=36047879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.459827][ T6390] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 61.462370][ T40] audit: type=1400 audit(1752931101.670:254): avc: denied { execute } for pid=6908 comm="syz.3.348" path="/81/file0/cpu.stat" dev="9p" ino=36047879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.529936][ T6919] netlink: 156 bytes leftover after parsing attributes in process `syz.2.354'. [ 61.533700][ T6919] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 61.594514][ T6390] usb 6-1: device descriptor read/64, error -71 [ 61.699637][ T6932] netlink: 60 bytes leftover after parsing attributes in process `syz.0.357'. [ 61.705664][ T6390] usb usb6-port1: attempt power cycle [ 61.800157][ T6944] FAULT_INJECTION: forcing a failure. [ 61.800157][ T6944] name failslab, interval 1, probability 0, space 0, times 0 [ 61.802847][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 61.804221][ T6944] CPU: 2 UID: 0 PID: 6944 Comm: syz.0.361 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 61.804244][ T6944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 61.804254][ T6944] Call Trace: [ 61.804261][ T6944] [ 61.804268][ T6944] dump_stack_lvl+0x16c/0x1f0 [ 61.804318][ T6944] should_fail_ex+0x512/0x640 [ 61.804352][ T6944] ? fs_reclaim_acquire+0xae/0x150 [ 61.804375][ T6944] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 61.804407][ T6944] should_failslab+0xc2/0x120 [ 61.804426][ T6944] __kmalloc_noprof+0xd2/0x510 [ 61.804458][ T6944] tomoyo_realpath_from_path+0xc2/0x6e0 [ 61.804478][ T6944] ? tomoyo_profile+0x47/0x60 [ 61.804500][ T6944] tomoyo_path_number_perm+0x245/0x580 [ 61.804523][ T6944] ? tomoyo_path_number_perm+0x237/0x580 [ 61.804549][ T6944] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 61.804573][ T6944] ? find_held_lock+0x2b/0x80 [ 61.804616][ T6944] ? find_held_lock+0x2b/0x80 [ 61.804635][ T6944] ? hook_file_ioctl_common+0x145/0x410 [ 61.804661][ T6944] ? __fget_files+0x20e/0x3c0 [ 61.804681][ T6944] security_file_ioctl+0x9b/0x240 [ 61.804708][ T6944] __x64_sys_ioctl+0xb7/0x210 [ 61.804732][ T6944] do_syscall_64+0xcd/0x4c0 [ 61.804751][ T6944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.804768][ T6944] RIP: 0033:0x7fa91ed8e9a9 [ 61.804781][ T6944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.804796][ T6944] RSP: 002b:00007fa91fb70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.804811][ T6944] RAX: ffffffffffffffda RBX: 00007fa91efb5fa0 RCX: 00007fa91ed8e9a9 [ 61.804823][ T6944] RDX: 00002000000fc680 RSI: 000000008010640b RDI: 0000000000000003 [ 61.804833][ T6944] RBP: 00007fa91fb70090 R08: 0000000000000000 R09: 0000000000000000 [ 61.804844][ T6944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 61.804854][ T6944] R13: 0000000000000000 R14: 00007fa91efb5fa0 R15: 00007ffd491ec868 [ 61.804885][ T6944] [ 61.805025][ T6944] ERROR: Out of memory at tomoyo_realpath_from_path. [ 61.916630][ T40] audit: type=1400 audit(1752931102.160:255): avc: denied { create } for pid=6952 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 61.923231][ T40] audit: type=1400 audit(1752931102.160:256): avc: denied { getopt } for pid=6952 comm="syz.0.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 62.041618][ T6966] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.054845][ T6390] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.075023][ T6390] usb 6-1: device descriptor read/8, error -71 [ 62.105951][ T6966] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.218843][ T6966] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.279817][ T6966] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.319502][ T40] audit: type=1400 audit(1752931102.560:257): avc: denied { ioctl } for pid=6972 comm="syz.3.373" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 62.334908][ T6390] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 62.345449][ T6966] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.359966][ T6966] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.365329][ T6390] usb 6-1: device descriptor read/8, error -71 [ 62.369609][ T6966] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.376665][ T6966] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.455344][ T6984] FAULT_INJECTION: forcing a failure. [ 62.455344][ T6984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.461540][ T6984] CPU: 2 UID: 0 PID: 6984 Comm: syz.0.376 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 62.461564][ T6984] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.461574][ T6984] Call Trace: [ 62.461580][ T6984] [ 62.461586][ T6984] dump_stack_lvl+0x16c/0x1f0 [ 62.461643][ T6984] should_fail_ex+0x512/0x640 [ 62.461680][ T6984] _copy_to_user+0x32/0xd0 [ 62.461699][ T6984] simple_read_from_buffer+0xcb/0x170 [ 62.461727][ T6984] proc_fail_nth_read+0x197/0x270 [ 62.461752][ T6984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.461777][ T6984] ? rw_verify_area+0xcf/0x680 [ 62.461798][ T6984] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 62.461821][ T6984] vfs_read+0x1e1/0xc60 [ 62.461848][ T6984] ? __pfx___mutex_lock+0x10/0x10 [ 62.461864][ T6984] ? __pfx_vfs_read+0x10/0x10 [ 62.461895][ T6984] ? __fget_files+0x20e/0x3c0 [ 62.461918][ T6984] ksys_read+0x12a/0x250 [ 62.461941][ T6984] ? __pfx_ksys_read+0x10/0x10 [ 62.461972][ T6984] do_syscall_64+0xcd/0x4c0 [ 62.461991][ T6984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.462009][ T6984] RIP: 0033:0x7fa91ed8d3bc [ 62.462023][ T6984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 62.462038][ T6984] RSP: 002b:00007fa91fb70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 62.462054][ T6984] RAX: ffffffffffffffda RBX: 00007fa91efb5fa0 RCX: 00007fa91ed8d3bc [ 62.462065][ T6984] RDX: 000000000000000f RSI: 00007fa91fb700a0 RDI: 0000000000000003 [ 62.462074][ T6984] RBP: 00007fa91fb70090 R08: 0000000000000000 R09: 000000000000001c [ 62.462084][ T6984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.462094][ T6984] R13: 0000000000000000 R14: 00007fa91efb5fa0 R15: 00007ffd491ec868 [ 62.462117][ T6984] [ 62.474582][ T6390] usb usb6-port1: unable to enumerate USB device [ 62.512895][ T1339] cfg80211: failed to load regulatory.db [ 62.585588][ T6988] bridge0: entered promiscuous mode [ 62.587443][ T6988] macsec1: entered promiscuous mode [ 62.589126][ T6988] macsec1: entered allmulticast mode [ 62.591011][ T6988] bridge0: entered allmulticast mode [ 62.593774][ T6988] bridge0: port 3(macsec1) entered blocking state [ 62.596188][ T6988] bridge0: port 3(macsec1) entered disabled state [ 62.601013][ T6988] bridge0: left allmulticast mode [ 62.602748][ T6988] bridge0: left promiscuous mode [ 62.685553][ T7006] vlan2: entered promiscuous mode [ 62.687240][ T7006] vlan2: entered allmulticast mode [ 62.688837][ T7006] hsr_slave_1: entered allmulticast mode [ 62.701762][ T7010] FAULT_INJECTION: forcing a failure. [ 62.701762][ T7010] name failslab, interval 1, probability 0, space 0, times 0 [ 62.707920][ T7010] CPU: 1 UID: 0 PID: 7010 Comm: syz.2.386 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 62.707936][ T7010] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 62.707943][ T7010] Call Trace: [ 62.707946][ T7010] [ 62.707951][ T7010] dump_stack_lvl+0x16c/0x1f0 [ 62.707973][ T7010] should_fail_ex+0x512/0x640 [ 62.707991][ T7010] ? fs_reclaim_acquire+0xae/0x150 [ 62.708005][ T7010] ? tomoyo_encode2+0x100/0x3e0 [ 62.708015][ T7010] should_failslab+0xc2/0x120 [ 62.708026][ T7010] __kmalloc_noprof+0xd2/0x510 [ 62.708043][ T7010] ? d_absolute_path+0x136/0x1a0 [ 62.708059][ T7010] tomoyo_encode2+0x100/0x3e0 [ 62.708071][ T7010] tomoyo_encode+0x29/0x50 [ 62.708081][ T7010] tomoyo_realpath_from_path+0x18f/0x6e0 [ 62.708096][ T7010] tomoyo_path_number_perm+0x245/0x580 [ 62.708111][ T7010] ? tomoyo_path_number_perm+0x237/0x580 [ 62.708127][ T7010] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 62.708144][ T7010] ? find_held_lock+0x2b/0x80 [ 62.708170][ T7010] ? find_held_lock+0x2b/0x80 [ 62.708183][ T7010] ? hook_file_ioctl_common+0x145/0x410 [ 62.708199][ T7010] ? __fget_files+0x20e/0x3c0 [ 62.708213][ T7010] security_file_ioctl+0x9b/0x240 [ 62.708232][ T7010] __x64_sys_ioctl+0xb7/0x210 [ 62.708248][ T7010] do_syscall_64+0xcd/0x4c0 [ 62.708260][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.708272][ T7010] RIP: 0033:0x7fc8d958e9a9 [ 62.708281][ T7010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.708293][ T7010] RSP: 002b:00007fc8da35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.708304][ T7010] RAX: ffffffffffffffda RBX: 00007fc8d97b5fa0 RCX: 00007fc8d958e9a9 [ 62.708311][ T7010] RDX: 00002000000fc680 RSI: 000000008010640b RDI: 0000000000000003 [ 62.708318][ T7010] RBP: 00007fc8da35c090 R08: 0000000000000000 R09: 0000000000000000 [ 62.708324][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.708330][ T7010] R13: 0000000000000000 R14: 00007fc8d97b5fa0 R15: 00007ffca25959f8 [ 62.708344][ T7010] [ 62.708354][ T7010] ERROR: Out of memory at tomoyo_realpath_from_path. [ 62.937991][ T7039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 62.964764][ T7041] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 62.975460][ T7041] CIFS mount error: No usable UNC path provided in device string! [ 62.975460][ T7041] [ 62.979906][ T7041] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 62.989663][ T7043] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 63 [ 63.736154][ T7070] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 63.750280][ T7066] syz.3.406 (7066) used greatest stack depth: 17976 bytes left [ 63.766591][ T7074] FAULT_INJECTION: forcing a failure. [ 63.766591][ T7074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.771960][ T7074] CPU: 2 UID: 0 PID: 7074 Comm: syz.0.409 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 63.771982][ T7074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.771993][ T7074] Call Trace: [ 63.771999][ T7074] [ 63.772007][ T7074] dump_stack_lvl+0x16c/0x1f0 [ 63.772037][ T7074] should_fail_ex+0x512/0x640 [ 63.772066][ T7074] _copy_from_user+0x2e/0xd0 [ 63.772082][ T7074] comedi_unlocked_ioctl+0x154d/0x2e90 [ 63.772109][ T7074] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.772129][ T7074] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 63.772150][ T7074] ? do_vfs_ioctl+0x523/0x1a60 [ 63.772172][ T7074] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.772209][ T7074] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 63.772240][ T7074] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 63.772267][ T7074] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.772301][ T7074] ? hook_file_ioctl_common+0x145/0x410 [ 63.772327][ T7074] ? selinux_file_ioctl+0x180/0x270 [ 63.772352][ T7074] ? selinux_file_ioctl+0xb4/0x270 [ 63.772380][ T7074] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 63.772404][ T7074] __x64_sys_ioctl+0x18e/0x210 [ 63.772429][ T7074] do_syscall_64+0xcd/0x4c0 [ 63.772448][ T7074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.772465][ T7074] RIP: 0033:0x7fa91ed8e9a9 [ 63.772479][ T7074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.772495][ T7074] RSP: 002b:00007fa91fb70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.772513][ T7074] RAX: ffffffffffffffda RBX: 00007fa91efb5fa0 RCX: 00007fa91ed8e9a9 [ 63.772523][ T7074] RDX: 0000200000031c40 RSI: 000000008028640c RDI: 0000000000000003 [ 63.772532][ T7074] RBP: 00007fa91fb70090 R08: 0000000000000000 R09: 0000000000000000 [ 63.772542][ T7074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.772552][ T7074] R13: 0000000000000000 R14: 00007fa91efb5fa0 R15: 00007ffd491ec868 [ 63.772576][ T7074] [ 63.872998][ T7080] FAULT_INJECTION: forcing a failure. [ 63.872998][ T7080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.877674][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.1.413 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 63.877691][ T7080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 63.877697][ T7080] Call Trace: [ 63.877701][ T7080] [ 63.877706][ T7080] dump_stack_lvl+0x16c/0x1f0 [ 63.877726][ T7080] should_fail_ex+0x512/0x640 [ 63.877746][ T7080] _copy_from_user+0x2e/0xd0 [ 63.877758][ T7080] comedi_unlocked_ioctl+0x561/0x2e90 [ 63.877781][ T7080] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 63.877795][ T7080] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 63.877810][ T7080] ? do_vfs_ioctl+0x523/0x1a60 [ 63.877825][ T7080] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 63.877843][ T7080] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 63.877862][ T7080] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 63.877882][ T7080] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 63.877905][ T7080] ? hook_file_ioctl_common+0x145/0x410 [ 63.877922][ T7080] ? selinux_file_ioctl+0x180/0x270 [ 63.877939][ T7080] ? selinux_file_ioctl+0xb4/0x270 [ 63.877956][ T7080] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 63.877972][ T7080] __x64_sys_ioctl+0x18e/0x210 [ 63.877987][ T7080] do_syscall_64+0xcd/0x4c0 [ 63.877999][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.878011][ T7080] RIP: 0033:0x7f572e38e9a9 [ 63.878020][ T7080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.878031][ T7080] RSP: 002b:00007f572f1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.878041][ T7080] RAX: ffffffffffffffda RBX: 00007f572e5b5fa0 RCX: 00007f572e38e9a9 [ 63.878048][ T7080] RDX: 00002000000fc680 RSI: 000000008010640b RDI: 0000000000000003 [ 63.878055][ T7080] RBP: 00007f572f1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 63.878061][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.878068][ T7080] R13: 0000000000000000 R14: 00007f572e5b5fa0 R15: 00007ffdd2a79948 [ 63.878081][ T7080] [ 64.078023][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.419'. [ 64.086923][ T7095] XFS (nullb0): Invalid superblock magic number [ 64.175452][ T7113] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.308046][ T7113] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.407285][ T7113] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.413320][ T7131] trusted_key: syz.3.429 sent an empty control message without MSG_MORE. [ 64.497062][ T7113] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.648552][ T7113] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.655627][ T7113] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.662618][ T7113] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.670230][ T7113] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.824495][ T6020] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.994518][ T6020] usb 5-1: Using ep0 maxpacket: 8 [ 64.998816][ T6020] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 65.002334][ T6020] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.006883][ T6020] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.011128][ T6020] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14112, setting to 1024 [ 65.016644][ T6020] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 65.021036][ T6020] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.028654][ T6020] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.032580][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.036627][ T7148] FAULT_INJECTION: forcing a failure. [ 65.036627][ T7148] name failslab, interval 1, probability 0, space 0, times 0 [ 65.041263][ T7148] CPU: 1 UID: 0 PID: 7148 Comm: syz.1.437 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 65.041279][ T7148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.041286][ T7148] Call Trace: [ 65.041290][ T7148] [ 65.041294][ T7148] dump_stack_lvl+0x16c/0x1f0 [ 65.041317][ T7148] should_fail_ex+0x512/0x640 [ 65.041363][ T7148] ? __kmalloc_noprof+0xbf/0x510 [ 65.041382][ T7148] ? do_insn_ioctl+0xd9/0x450 [ 65.041396][ T7148] should_failslab+0xc2/0x120 [ 65.041407][ T7148] __kmalloc_noprof+0xd2/0x510 [ 65.041423][ T7148] ? __might_fault+0x13b/0x190 [ 65.041442][ T7148] do_insn_ioctl+0xd9/0x450 [ 65.041457][ T7148] comedi_unlocked_ioctl+0x1576/0x2e90 [ 65.041476][ T7148] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.041490][ T7148] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 65.041504][ T7148] ? do_vfs_ioctl+0x523/0x1a60 [ 65.041520][ T7148] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 65.041537][ T7148] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 65.041558][ T7148] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 65.041590][ T7148] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 65.041613][ T7148] ? hook_file_ioctl_common+0x145/0x410 [ 65.041630][ T7148] ? selinux_file_ioctl+0x180/0x270 [ 65.041647][ T7148] ? selinux_file_ioctl+0xb4/0x270 [ 65.041665][ T7148] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 65.041680][ T7148] __x64_sys_ioctl+0x18e/0x210 [ 65.041696][ T7148] do_syscall_64+0xcd/0x4c0 [ 65.041708][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.041720][ T7148] RIP: 0033:0x7f572e38e9a9 [ 65.041729][ T7148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.041740][ T7148] RSP: 002b:00007f572f1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.041750][ T7148] RAX: ffffffffffffffda RBX: 00007f572e5b5fa0 RCX: 00007f572e38e9a9 [ 65.041757][ T7148] RDX: 0000200000031c40 RSI: 000000008028640c RDI: 0000000000000003 [ 65.041764][ T7148] RBP: 00007f572f1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 65.041772][ T7148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.041781][ T7148] R13: 0000000000000000 R14: 00007f572e5b5fa0 R15: 00007ffdd2a79948 [ 65.041802][ T7148] [ 65.226463][ T7156] FAULT_INJECTION: forcing a failure. [ 65.226463][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.230584][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.1.441 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 65.230600][ T7156] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.230606][ T7156] Call Trace: [ 65.230611][ T7156] [ 65.230615][ T7156] dump_stack_lvl+0x16c/0x1f0 [ 65.230637][ T7156] should_fail_ex+0x512/0x640 [ 65.230657][ T7156] _copy_from_user+0x2e/0xd0 [ 65.230669][ T7156] comedi_unlocked_ioctl+0x17b6/0x2e90 [ 65.230700][ T7156] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.230715][ T7156] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 65.230729][ T7156] ? do_vfs_ioctl+0x523/0x1a60 [ 65.230744][ T7156] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 65.230762][ T7156] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 65.230781][ T7156] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 65.230799][ T7156] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 65.230822][ T7156] ? hook_file_ioctl_common+0x145/0x410 [ 65.230839][ T7156] ? selinux_file_ioctl+0x180/0x270 [ 65.230856][ T7156] ? selinux_file_ioctl+0xb4/0x270 [ 65.230874][ T7156] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 65.230889][ T7156] __x64_sys_ioctl+0x18e/0x210 [ 65.230905][ T7156] do_syscall_64+0xcd/0x4c0 [ 65.230917][ T7156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.230929][ T7156] RIP: 0033:0x7f572e38e9a9 [ 65.230939][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.230950][ T7156] RSP: 002b:00007f572f1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.230961][ T7156] RAX: ffffffffffffffda RBX: 00007f572e5b5fa0 RCX: 00007f572e38e9a9 [ 65.230968][ T7156] RDX: 00002000000fc680 RSI: 000000008010640b RDI: 0000000000000003 [ 65.230974][ T7156] RBP: 00007f572f1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 65.230980][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.230998][ T7156] R13: 0000000000000000 R14: 00007f572e5b5fa0 R15: 00007ffdd2a79948 [ 65.231012][ T7156] [ 65.305194][ T6020] usb 5-1: usb_control_msg returned -32 [ 65.307012][ T6020] usbtmc 5-1:16.0: can't read capabilities [ 65.318804][ T6020] usb 5-1: USB disconnect, device number 3 [ 65.391302][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.445'. [ 65.551707][ T7178] dlm: no locking on control device [ 65.690296][ T7188] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.752142][ T7188] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.890783][ T7188] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.901503][ T7206] FAULT_INJECTION: forcing a failure. [ 65.901503][ T7206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.902765][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 65.907056][ T7206] CPU: 3 UID: 0 PID: 7206 Comm: syz.0.462 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 65.907072][ T7206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 65.907079][ T7206] Call Trace: [ 65.907083][ T7206] [ 65.907087][ T7206] dump_stack_lvl+0x16c/0x1f0 [ 65.907108][ T7206] should_fail_ex+0x512/0x640 [ 65.907128][ T7206] _copy_to_user+0x32/0xd0 [ 65.907140][ T7206] simple_read_from_buffer+0xcb/0x170 [ 65.907158][ T7206] proc_fail_nth_read+0x197/0x270 [ 65.907175][ T7206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.907192][ T7206] ? rw_verify_area+0xcf/0x680 [ 65.907206][ T7206] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.907222][ T7206] vfs_read+0x1e1/0xc60 [ 65.907240][ T7206] ? __pfx___mutex_lock+0x10/0x10 [ 65.907251][ T7206] ? __pfx_vfs_read+0x10/0x10 [ 65.907271][ T7206] ? __fget_files+0x20e/0x3c0 [ 65.907285][ T7206] ksys_read+0x12a/0x250 [ 65.907300][ T7206] ? __pfx_ksys_read+0x10/0x10 [ 65.907316][ T7206] ? fput+0x70/0xf0 [ 65.907330][ T7206] do_syscall_64+0xcd/0x4c0 [ 65.907342][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.907353][ T7206] RIP: 0033:0x7fa91ed8d3bc [ 65.907362][ T7206] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.907373][ T7206] RSP: 002b:00007fa91fb70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.907384][ T7206] RAX: ffffffffffffffda RBX: 00007fa91efb5fa0 RCX: 00007fa91ed8d3bc [ 65.907391][ T7206] RDX: 000000000000000f RSI: 00007fa91fb700a0 RDI: 0000000000000004 [ 65.907398][ T7206] RBP: 00007fa91fb70090 R08: 0000000000000000 R09: 0000000000000000 [ 65.907404][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.907410][ T7206] R13: 0000000000000000 R14: 00007fa91efb5fa0 R15: 00007ffd491ec868 [ 65.907424][ T7206] [ 65.950572][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 65.950582][ T40] audit: type=1400 audit(1752931106.190:301): avc: denied { create } for pid=7209 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.978596][ T40] audit: type=1400 audit(1752931106.200:302): avc: denied { setopt } for pid=7209 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.984603][ T40] audit: type=1400 audit(1752931106.200:303): avc: denied { connect } for pid=7209 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.019116][ T7188] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.030540][ T7220] FAULT_INJECTION: forcing a failure. [ 66.030540][ T7220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.034789][ T7220] CPU: 1 UID: 0 PID: 7220 Comm: syz.3.468 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 66.034805][ T7220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.034813][ T7220] Call Trace: [ 66.034818][ T7220] [ 66.034823][ T7220] dump_stack_lvl+0x16c/0x1f0 [ 66.034851][ T7220] should_fail_ex+0x512/0x640 [ 66.034871][ T7220] _copy_to_user+0x32/0xd0 [ 66.034884][ T7220] simple_read_from_buffer+0xcb/0x170 [ 66.034904][ T7220] proc_fail_nth_read+0x197/0x270 [ 66.034922][ T7220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.034939][ T7220] ? rw_verify_area+0xcf/0x680 [ 66.034953][ T7220] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.034970][ T7220] vfs_read+0x1e1/0xc60 [ 66.034988][ T7220] ? __pfx___mutex_lock+0x10/0x10 [ 66.035000][ T7220] ? __pfx_vfs_read+0x10/0x10 [ 66.035019][ T7220] ? __fget_files+0x20e/0x3c0 [ 66.035034][ T7220] ksys_read+0x12a/0x250 [ 66.035050][ T7220] ? __pfx_ksys_read+0x10/0x10 [ 66.035070][ T7220] do_syscall_64+0xcd/0x4c0 [ 66.035082][ T7220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.035094][ T7220] RIP: 0033:0x7f5929f8d3bc [ 66.035104][ T7220] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.035115][ T7220] RSP: 002b:00007f592add6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.035126][ T7220] RAX: ffffffffffffffda RBX: 00007f592a1b5fa0 RCX: 00007f5929f8d3bc [ 66.035133][ T7220] RDX: 000000000000000f RSI: 00007f592add60a0 RDI: 0000000000000003 [ 66.035139][ T7220] RBP: 00007f592add6090 R08: 0000000000000000 R09: 000000000000001c [ 66.035146][ T7220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.035153][ T7220] R13: 0000000000000000 R14: 00007f592a1b5fa0 R15: 00007ffde58bc588 [ 66.035166][ T7220] [ 66.059816][ T7222] FAULT_INJECTION: forcing a failure. [ 66.059816][ T7222] name failslab, interval 1, probability 0, space 0, times 0 [ 66.080380][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'. [ 66.081326][ T7222] CPU: 3 UID: 0 PID: 7222 Comm: syz.3.470 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 66.081344][ T7222] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 66.081351][ T7222] Call Trace: [ 66.081356][ T7222] [ 66.081360][ T7222] dump_stack_lvl+0x16c/0x1f0 [ 66.081383][ T7222] should_fail_ex+0x512/0x640 [ 66.081401][ T7222] ? __kmalloc_noprof+0xbf/0x510 [ 66.081419][ T7222] ? do_insnlist_ioctl+0x595/0x6b0 [ 66.081433][ T7222] should_failslab+0xc2/0x120 [ 66.081445][ T7222] __kmalloc_noprof+0xd2/0x510 [ 66.081464][ T7222] do_insnlist_ioctl+0x595/0x6b0 [ 66.081482][ T7222] comedi_unlocked_ioctl+0x17e6/0x2e90 [ 66.081499][ T7222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 66.081513][ T7222] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 66.081528][ T7222] ? do_vfs_ioctl+0x523/0x1a60 [ 66.081543][ T7222] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 66.081561][ T7222] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 66.081580][ T7222] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 66.081599][ T7222] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 66.081622][ T7222] ? hook_file_ioctl_common+0x145/0x410 [ 66.081638][ T7222] ? selinux_file_ioctl+0x180/0x270 [ 66.081655][ T7222] ? selinux_file_ioctl+0xb4/0x270 [ 66.081673][ T7222] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 66.081688][ T7222] __x64_sys_ioctl+0x18e/0x210 [ 66.081704][ T7222] do_syscall_64+0xcd/0x4c0 [ 66.081716][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.081728][ T7222] RIP: 0033:0x7f5929f8e9a9 [ 66.081738][ T7222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.081749][ T7222] RSP: 002b:00007f592add6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.081761][ T7222] RAX: ffffffffffffffda RBX: 00007f592a1b5fa0 RCX: 00007f5929f8e9a9 [ 66.081768][ T7222] RDX: 00002000000fc680 RSI: 000000008010640b RDI: 0000000000000003 [ 66.081774][ T7222] RBP: 00007f592add6090 R08: 0000000000000000 R09: 0000000000000000 [ 66.081781][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.081787][ T7222] R13: 0000000000000000 R14: 00007f592a1b5fa0 R15: 00007ffde58bc588 [ 66.081800][ T7222] [ 66.130252][ T7228] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 66.132453][ T7224] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'. [ 66.133464][ T7228] netlink: 228 bytes leftover after parsing attributes in process `syz.1.472'. [ 66.156800][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 66.212569][ T7188] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.223443][ T7188] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.238460][ T7188] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.248974][ T7188] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.291360][ T7240] syz.2.478: attempt to access beyond end of device [ 66.291360][ T7240] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 66.298033][ T7240] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 66.339673][ T40] audit: type=1400 audit(1752931106.580:304): avc: denied { write } for pid=7242 comm="syz.1.480" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.357561][ T40] audit: type=1400 audit(1752931106.600:305): avc: denied { execmem } for pid=7248 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.367873][ T40] audit: type=1400 audit(1752931106.610:306): avc: denied { read write } for pid=7238 comm="syz.2.478" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.381773][ T40] audit: type=1400 audit(1752931106.610:307): avc: denied { open } for pid=7238 comm="syz.2.478" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.390346][ T40] audit: type=1400 audit(1752931106.610:308): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 66.397154][ T40] audit: type=1400 audit(1752931106.610:309): avc: denied { ioctl } for pid=7238 comm="syz.2.478" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 66.406705][ T40] audit: type=1400 audit(1752931106.640:310): avc: denied { read write } for pid=5954 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 66.465513][ T7249] loop2: detected capacity change from 0 to 7 [ 66.470319][ T5965] Dev loop2: unable to read RDB block 7 [ 66.472124][ T5965] loop2: unable to read partition table [ 66.473989][ T5965] loop2: partition table beyond EOD, truncated [ 66.480229][ T7249] Dev loop2: unable to read RDB block 7 [ 66.482808][ T7249] loop2: unable to read partition table [ 66.485825][ T7249] loop2: partition table beyond EOD, truncated [ 66.492220][ T7249] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 66.850250][ T7282] program syz.0.496 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.885531][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 66.919095][ T7290] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.980428][ T7290] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.060001][ T7297] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 67.088968][ T7290] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.149592][ T7305] netlink: 'syz.2.506': attribute type 4 has an invalid length. [ 67.229839][ T7290] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.350568][ T7290] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.359825][ T7290] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.368307][ T7290] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.376919][ T7290] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.844262][ T7343] FAULT_INJECTION: forcing a failure. [ 67.844262][ T7343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.845122][ T2298] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 67.851163][ T7343] CPU: 3 UID: 0 PID: 7343 Comm: syz.0.523 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 67.851182][ T7343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 67.851189][ T7343] Call Trace: [ 67.851194][ T7343] [ 67.851199][ T7343] dump_stack_lvl+0x16c/0x1f0 [ 67.851223][ T7343] should_fail_ex+0x512/0x640 [ 67.851243][ T7343] _copy_from_user+0x2e/0xd0 [ 67.851255][ T7343] kstrtouint_from_user+0xd6/0x1d0 [ 67.851270][ T7343] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 67.851284][ T7343] ? __lock_acquire+0xb8a/0x1c90 [ 67.851302][ T7343] proc_fail_nth_write+0x83/0x250 [ 67.851321][ T7343] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.851341][ T7343] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.851356][ T7343] vfs_write+0x2a0/0x1150 [ 67.851376][ T7343] ? __pfx___mutex_lock+0x10/0x10 [ 67.851387][ T7343] ? __pfx_vfs_write+0x10/0x10 [ 67.851407][ T7343] ? __fget_files+0x20e/0x3c0 [ 67.851422][ T7343] ksys_write+0x12a/0x250 [ 67.851437][ T7343] ? __pfx_ksys_write+0x10/0x10 [ 67.851465][ T7343] ? fput+0x70/0xf0 [ 67.851482][ T7343] do_syscall_64+0xcd/0x4c0 [ 67.851500][ T7343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.851512][ T7343] RIP: 0033:0x7fa91ed8d45f [ 67.851521][ T7343] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 67.851533][ T7343] RSP: 002b:00007fa91fb70030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 67.851544][ T7343] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa91ed8d45f [ 67.851551][ T7343] RDX: 0000000000000001 RSI: 00007fa91fb700a0 RDI: 0000000000000004 [ 67.851557][ T7343] RBP: 00007fa91fb70090 R08: 0000000000000000 R09: 0000000000000000 [ 67.851564][ T7343] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 67.851570][ T7343] R13: 0000000000000000 R14: 00007fa91efb5fa0 R15: 00007ffd491ec868 [ 67.851584][ T7343] [ 67.889149][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 68.045846][ T2298] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 68.048951][ T2298] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 68.051788][ T2298] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.058487][ T2298] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.061523][ T2298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.064012][ T2298] usb 7-1: Product: syz [ 68.065860][ T2298] usb 7-1: Manufacturer: syz [ 68.067364][ T2298] usb 7-1: SerialNumber: syz [ 68.093689][ T7365] nbd: must specify a size in bytes for the device [ 68.097979][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.534'. [ 68.274762][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.277834][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.282784][ T2298] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 68.285908][ T2298] cdc_ncm 7-1:1.0: bind() failure [ 68.291295][ T2298] usb 7-1: USB disconnect, device number 5 [ 68.574616][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 68.706937][ T7404] IPVS: persistence engine module ip_vs_pe_s not found [ 68.724529][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 68.728437][ T24] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 68.732137][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 68.737545][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 68.741524][ T24] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14112, setting to 1024 [ 68.746378][ T24] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 68.750556][ T24] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 68.756062][ T24] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 68.759742][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.822297][ T7409] comedi comedi4: bad chanlist[0]=0x0000000b chan=11 range length=2 [ 68.849787][ T7409] Bluetooth: MGMT ver 1.23 [ 68.859583][ T7413] can0: slcan on ttyS3. [ 68.927692][ T7413] can0 (unregistered): slcan off ttyS3. [ 68.979805][ T24] usb 6-1: usb_control_msg returned -32 [ 68.981693][ T24] usbtmc 6-1:16.0: can't read capabilities [ 68.999965][ T24] usb 6-1: USB disconnect, device number 7 [ 69.001189][ T7429] netlink: 'syz.2.559': attribute type 20 has an invalid length. [ 69.139777][ T7439] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.141058][ T7441] __nla_validate_parse: 5 callbacks suppressed [ 69.141074][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 69.207765][ T7439] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.357919][ T7439] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.439725][ T7454] syz.0.569: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 69.445538][ T7454] CPU: 1 UID: 0 PID: 7454 Comm: syz.0.569 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 69.445554][ T7454] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.445561][ T7454] Call Trace: [ 69.445564][ T7454] [ 69.445570][ T7454] dump_stack_lvl+0x16c/0x1f0 [ 69.445591][ T7454] warn_alloc+0x248/0x3a0 [ 69.445610][ T7454] ? __pfx_warn_alloc+0x10/0x10 [ 69.445626][ T7454] ? __pfx_stack_trace_save+0x10/0x10 [ 69.445642][ T7454] ? stack_depot_save_flags+0x28/0xa40 [ 69.445662][ T7454] ? kasan_save_stack+0x42/0x60 [ 69.445678][ T7454] ? kasan_save_stack+0x33/0x60 [ 69.445693][ T7454] ? kasan_save_track+0x14/0x30 [ 69.445709][ T7454] ? xskq_create+0x52/0x1d0 [ 69.445722][ T7454] ? xsk_setsockopt+0x640/0x840 [ 69.445735][ T7454] ? do_sock_setsockopt+0xf0/0x1d0 [ 69.445748][ T7454] ? xskq_create+0xfb/0x1d0 [ 69.445768][ T7454] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 69.445788][ T7454] ? xskq_create+0xfb/0x1d0 [ 69.445806][ T7454] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 69.445826][ T7454] ? xskq_create+0xfb/0x1d0 [ 69.445841][ T7454] vmalloc_user_noprof+0x9e/0xe0 [ 69.445855][ T7454] ? xskq_create+0xfb/0x1d0 [ 69.445871][ T7454] xskq_create+0xfb/0x1d0 [ 69.445887][ T7454] xsk_setsockopt+0x640/0x840 [ 69.445902][ T7454] ? __pfx_xsk_setsockopt+0x10/0x10 [ 69.445917][ T7454] ? find_held_lock+0x2b/0x80 [ 69.445933][ T7454] ? selinux_socket_setsockopt+0x6a/0x80 [ 69.445949][ T7454] ? __pfx_xsk_setsockopt+0x10/0x10 [ 69.445964][ T7454] do_sock_setsockopt+0xf0/0x1d0 [ 69.445978][ T7454] __sys_setsockopt+0x1a0/0x230 [ 69.445996][ T7454] __x64_sys_setsockopt+0xbd/0x160 [ 69.446012][ T7454] ? do_syscall_64+0x91/0x4c0 [ 69.446035][ T7454] ? lockdep_hardirqs_on+0x7c/0x110 [ 69.446052][ T7454] do_syscall_64+0xcd/0x4c0 [ 69.446063][ T7454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.446074][ T7454] RIP: 0033:0x7fa91ed8e9a9 [ 69.446083][ T7454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.446094][ T7454] RSP: 002b:00007fa91fb70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 69.446105][ T7454] RAX: ffffffffffffffda RBX: 00007fa91efb5fa0 RCX: 00007fa91ed8e9a9 [ 69.446112][ T7454] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 69.446119][ T7454] RBP: 00007fa91ee10d69 R08: 0000000000000004 R09: 0000000000000000 [ 69.446126][ T7454] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.446132][ T7454] R13: 0000000000000000 R14: 00007fa91efb5fa0 R15: 00007ffd491ec868 [ 69.446146][ T7454] [ 69.446163][ T7454] Mem-Info: [ 69.447373][ T7439] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.449799][ T7454] active_anon:10524 inactive_anon:0 isolated_anon:0 [ 69.449799][ T7454] active_file:12167 inactive_file:41110 isolated_file:0 [ 69.449799][ T7454] unevictable:1768 dirty:2832 writeback:0 [ 69.449799][ T7454] slab_reclaimable:11629 slab_unreclaimable:71289 [ 69.449799][ T7454] mapped:25787 shmem:2400 pagetables:1200 [ 69.449799][ T7454] sec_pagetables:303 bounce:0 [ 69.449799][ T7454] kernel_misc_reclaimable:0 [ 69.449799][ T7454] free:446216 free_pcp:24604 free_cma:0 [ 69.556356][ T7454] Node 0 active_anon:41928kB inactive_anon:0kB active_file:48668kB inactive_file:164240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:103124kB dirty:11344kB writeback:0kB shmem:5992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12816kB pagetables:4704kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB [ 69.566696][ T7454] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 69.576827][ T7454] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.585788][ T7454] lowmem_reserve[]: 0 1234 1234 1234 1234 [ 69.587711][ T7454] Node 0 DMA32 free:158308kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42172kB inactive_anon:0kB active_file:48668kB inactive_file:164240kB unevictable:3536kB writepending:11344kB present:2080628kB managed:1264296kB mlocked:0kB bounce:0kB free_pcp:85876kB local_pcp:19972kB free_cma:0kB [ 69.597996][ T7454] lowmem_reserve[]: 0 0 0 0 0 [ 69.599513][ T7454] Node 1 Normal free:1612304kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:3536kB writepending:8kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:10276kB local_pcp:2152kB free_cma:0kB [ 69.609968][ T7454] lowmem_reserve[]: 0 0 0 0 0 [ 69.610086][ T7462] syzkaller1: entered allmulticast mode [ 69.611500][ T7454] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 69.617637][ T7454] Node 0 DMA32: 365*4kB (M) 316*8kB (UME) 47*16kB (UM) 271*32kB (UME) 75*64kB (UME) 51*128kB (UME) 34*256kB (UM) 24*512kB (UM) 14*1024kB (UME) 8*2048kB (UM) 20*4096kB (UM) = 158372kB [ 69.623957][ T7454] Node 1 Normal: 6*4kB (UE) 13*8kB (UME) 27*16kB (UE) 17*32kB (UE) 19*64kB (UME) 12*128kB (UME) 3*256kB (UE) 4*512kB (ME) 0*1024kB 2*2048kB (UM) 391*4096kB (M) = 1612304kB [ 69.626895][ T7457] netlink: 32 bytes leftover after parsing attributes in process `syz.0.569'. [ 69.629572][ T7454] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.635431][ T7454] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.638347][ T7454] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.641274][ T7454] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.644143][ T7454] 55671 total pagecache pages [ 69.645757][ T7454] 0 pages in swap cache [ 69.647090][ T7454] Free swap = 124996kB [ 69.648924][ T7454] Total swap = 124996kB [ 69.650306][ T7454] 1048443 pages RAM [ 69.651530][ T7454] 0 pages HighMem/MovableOnly [ 69.652829][ T7454] 283040 pages reserved [ 69.654112][ T7454] 0 pages cma reserved [ 69.960396][ T7498] netlink: 'syz.1.586': attribute type 21 has an invalid length. [ 70.093889][ T7516] batadv_slave_0: entered promiscuous mode [ 70.179125][ T7525] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 70.196041][ T7439] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.206671][ T7439] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.216355][ T7439] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.222282][ T7529] binder: 7527:7529 ioctl c0306201 200000000240 returned -11 [ 70.241363][ T7439] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.266791][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 70.337125][ T7547] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 70.340338][ T7547] lo: entered promiscuous mode [ 70.343188][ T7547] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 70.449825][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 70.456502][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'. [ 70.486486][ T2298] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 70.657839][ T2298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.661682][ T2298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.664794][ T2298] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 70.668830][ T2298] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 70.671692][ T2298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.677193][ T2298] usb 6-1: config 0 descriptor?? [ 70.779263][ T7581] netlink: 156 bytes leftover after parsing attributes in process `syz.3.620'. [ 70.800271][ T7583] bpf: Bad value for 'uid' [ 70.929220][ T7591] GUP no longer grows the stack in syz.2.624 (7591): 200000007000-20000000a000 (200000004000) [ 70.932803][ T7591] CPU: 3 UID: 0 PID: 7591 Comm: syz.2.624 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 70.932832][ T7591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 70.932844][ T7591] Call Trace: [ 70.932851][ T7591] [ 70.932858][ T7591] dump_stack_lvl+0x16c/0x1f0 [ 70.932894][ T7591] gup_vma_lookup+0x1d2/0x220 [ 70.932917][ T7591] __get_user_pages+0x271/0x3b80 [ 70.932945][ T7591] ? kasan_save_stack+0x42/0x60 [ 70.932972][ T7591] ? kasan_save_stack+0x33/0x60 [ 70.932997][ T7591] ? kasan_save_track+0x14/0x30 [ 70.933022][ T7591] ? __kasan_kmalloc+0xaa/0xb0 [ 70.933047][ T7591] ? __kvmalloc_node_noprof+0x27b/0x620 [ 70.933074][ T7591] ? __pfx___get_user_pages+0x10/0x10 [ 70.933094][ T7591] ? __sys_setsockopt+0x1a0/0x230 [ 70.933122][ T7591] ? do_syscall_64+0xcd/0x4c0 [ 70.933138][ T7591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.933165][ T7591] __gup_longterm_locked+0x5e7/0x1840 [ 70.933198][ T7591] ? __pfx___gup_longterm_locked+0x10/0x10 [ 70.933234][ T7591] pin_user_pages+0x13c/0x160 [ 70.933257][ T7591] ? __pfx_pin_user_pages+0x10/0x10 [ 70.933311][ T7591] ? xdp_umem_create+0x652/0x1270 [ 70.933344][ T7591] xdp_umem_create+0x73c/0x1270 [ 70.933377][ T7591] xsk_setsockopt+0x5b2/0x840 [ 70.933401][ T7591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 70.933423][ T7591] ? find_held_lock+0x2b/0x80 [ 70.933452][ T7591] ? selinux_socket_setsockopt+0x6a/0x80 [ 70.933480][ T7591] ? __pfx_xsk_setsockopt+0x10/0x10 [ 70.933506][ T7591] do_sock_setsockopt+0xf0/0x1d0 [ 70.933531][ T7591] __sys_setsockopt+0x1a0/0x230 [ 70.933562][ T7591] __x64_sys_setsockopt+0xbd/0x160 [ 70.933587][ T7591] ? do_syscall_64+0x91/0x4c0 [ 70.933604][ T7591] ? lockdep_hardirqs_on+0x7c/0x110 [ 70.933631][ T7591] do_syscall_64+0xcd/0x4c0 [ 70.933651][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.933669][ T7591] RIP: 0033:0x7fc8d958e9a9 [ 70.933685][ T7591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.933701][ T7591] RSP: 002b:00007fc8da35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 70.933718][ T7591] RAX: ffffffffffffffda RBX: 00007fc8d97b5fa0 RCX: 00007fc8d958e9a9 [ 70.933730][ T7591] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000007 [ 70.933741][ T7591] RBP: 00007fc8d9610d69 R08: 0000000000000020 R09: 0000000000000000 [ 70.933751][ T7591] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 70.933761][ T7591] R13: 0000000000000000 R14: 00007fc8d97b5fa0 R15: 00007ffca25959f8 [ 70.933785][ T7591] [ 71.012059][ C3] vkms_vblank_simulate: vblank timer overrun [ 71.021390][ T7595] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.080357][ T7595] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.101003][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.103283][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.110599][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.113069][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.115773][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.118154][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.120427][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.122711][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.125564][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.127885][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.130199][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.132515][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.136257][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.138640][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.140952][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.143241][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.146032][ T2298] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 71.148713][ T7600] "syz.3.629" (7600) uses obsolete ecb(arc4) skcipher [ 71.153725][ T2298] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 71.161455][ T7595] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.255027][ T7610] program syz.3.631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.293375][ T7595] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.360034][ T7595] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.368665][ T7595] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.378609][ T7595] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.390366][ T7595] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.435057][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 71.435069][ T40] audit: type=1400 audit(1752931111.680:448): avc: denied { create } for pid=7623 comm="syz.0.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.512448][ T40] audit: type=1400 audit(1752931111.750:449): avc: denied { mount } for pid=7631 comm="syz.3.639" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.561972][ T40] audit: type=1400 audit(1752931111.800:450): avc: denied { read } for pid=7631 comm="syz.3.639" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 71.569082][ T40] audit: type=1400 audit(1752931111.800:451): avc: denied { open } for pid=7631 comm="syz.3.639" path="/186/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 71.569813][ T7633] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 71.638209][ T6020] usb 6-1: USB disconnect, device number 8 [ 71.651037][ T40] audit: type=1400 audit(1752931111.890:452): avc: denied { setopt } for pid=7646 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.665930][ T7648] IPVS: Error during creation of socket; terminating [ 71.669186][ T40] audit: type=1400 audit(1752931111.910:453): avc: denied { create } for pid=7646 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.688232][ T40] audit: type=1400 audit(1752931111.930:454): avc: denied { ioctl } for pid=7646 comm="syz.0.646" path="socket:[18208]" dev="sockfs" ino=18208 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.697703][ T40] audit: type=1400 audit(1752931111.930:455): avc: denied { write } for pid=7646 comm="syz.0.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.719409][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 71.833329][ T7655] syz.0.648 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.835723][ T7656] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 71.840621][ T40] audit: type=1400 audit(1752931112.080:456): avc: denied { append } for pid=7652 comm="syz.0.648" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 71.842470][ T7653] ptrace attach of "/syz-executor exec"[5954] was attempted by "/syz-executor exec"[7653] [ 71.860882][ T40] audit: type=1400 audit(1752931112.100:457): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 71.906822][ T7660] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.949899][ T7660] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.048110][ T7660] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.088588][ T7660] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.214475][ T6020] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 72.330084][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.663'. [ 72.335595][ T7685] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 72.337697][ T7685] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 72.341035][ T7685] vhci_hcd vhci_hcd.0: Device attached [ 72.344315][ T7688] vhci_hcd: connection closed [ 72.345659][ T87] vhci_hcd: stop threads [ 72.348598][ T87] vhci_hcd: release socket [ 72.350074][ T87] vhci_hcd: disconnect device [ 72.366257][ T6020] usb 5-1: Using ep0 maxpacket: 8 [ 72.370465][ T6020] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 72.373039][ T6020] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.377939][ T6020] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.381006][ T6020] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.384153][ T6020] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.389522][ T6020] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.392257][ T6020] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.431757][ T7691] tmpfs: Unknown parameter 'rK"D^BPPb΅izC8;/@J"v' [ 72.465877][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.666'. [ 72.599624][ T6020] usb 5-1: GET_CAPABILITIES returned 0 [ 72.601538][ T6020] usbtmc 5-1:16.0: can't read capabilities [ 72.803195][ T6004] usb 5-1: USB disconnect, device number 4 [ 72.838500][ T7700] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 72.842824][ T13] Bluetooth: (null): Invalid header checksum [ 72.868232][ T7703] netlink: 'syz.1.670': attribute type 10 has an invalid length. [ 72.903428][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.671'. [ 73.090231][ T7718] ======================================================= [ 73.090231][ T7718] WARNING: The mand mount option has been deprecated and [ 73.090231][ T7718] and is ignored by this kernel. Remove the mand [ 73.090231][ T7718] option from the mount to silence this warning. [ 73.090231][ T7718] ======================================================= [ 73.101693][ T7718] new mount options do not match the existing superblock, will be ignored [ 73.144494][ T7719] No control pipe specified [ 73.242834][ T7727] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 73.564510][ T53] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 73.646707][ T7739] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 73.715237][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 73.718674][ T53] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 73.721425][ T53] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.724364][ T53] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.728699][ T53] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14112, setting to 1024 [ 73.732620][ T53] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 73.736044][ T53] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.740242][ T53] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.743189][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.950668][ T53] usb 5-1: usb_control_msg returned -32 [ 73.952484][ T53] usbtmc 5-1:16.0: can't read capabilities [ 73.996562][ T7660] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.006611][ T7660] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.013204][ T7660] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.022044][ T7660] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.061771][ T7763] kvm: emulating exchange as write [ 74.185088][ T7776] macvlan2: entered promiscuous mode [ 74.192190][ T7776] macvlan2: entered allmulticast mode [ 74.194382][ T7776] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 74.225894][ T7782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.704'. [ 74.294291][ T7793] netlink: 'syz.3.709': attribute type 10 has an invalid length. [ 74.304301][ T7794] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 74.308081][ T53] usb 5-1: USB disconnect, device number 5 [ 74.498957][ T7809] FAULT_INJECTION: forcing a failure. [ 74.498957][ T7809] name failslab, interval 1, probability 0, space 0, times 0 [ 74.503216][ T7809] CPU: 1 UID: 0 PID: 7809 Comm: syz.3.717 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 74.503232][ T7809] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.503239][ T7809] Call Trace: [ 74.503243][ T7809] [ 74.503247][ T7809] dump_stack_lvl+0x16c/0x1f0 [ 74.503269][ T7809] should_fail_ex+0x512/0x640 [ 74.503301][ T7809] should_failslab+0xc2/0x120 [ 74.503313][ T7809] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 74.503331][ T7809] ? skb_clone+0x190/0x3f0 [ 74.503344][ T7809] skb_clone+0x190/0x3f0 [ 74.503355][ T7809] packet_rcv+0x610/0x15a0 [ 74.503373][ T7809] ? __pfx_packet_rcv+0x10/0x10 [ 74.503387][ T7809] __netif_receive_skb_core.constprop.0+0xe2a/0x4a00 [ 74.503408][ T7809] ? kernel_text_address+0x8d/0x100 [ 74.503420][ T7809] ? __lock_acquire+0x622/0x1c90 [ 74.503430][ T7809] ? __kernel_text_address+0xd/0x40 [ 74.503450][ T7809] ? unwind_get_return_address+0x59/0xa0 [ 74.503464][ T7809] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 74.503485][ T7809] ? stack_trace_save+0x8e/0xc0 [ 74.503501][ T7809] ? __pfx_stack_trace_save+0x10/0x10 [ 74.503515][ T7809] ? stack_depot_save_flags+0x28/0xa40 [ 74.503536][ T7809] ? kasan_save_stack+0x42/0x60 [ 74.503552][ T7809] ? kasan_save_stack+0x33/0x60 [ 74.503567][ T7809] ? kasan_save_track+0x14/0x30 [ 74.503582][ T7809] ? __kasan_slab_alloc+0x89/0x90 [ 74.503591][ T7809] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbc0 [ 74.503606][ T7809] ? xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 74.503618][ T7809] ? bpf_test_run_xdp_live+0x34d/0x500 [ 74.503628][ T7809] ? __sys_bpf+0x170a/0x4ea0 [ 74.503645][ T7809] __netif_receive_skb_list_core+0x355/0x950 [ 74.503665][ T7809] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 74.503682][ T7809] ? lock_acquire+0x179/0x350 [ 74.503697][ T7809] netif_receive_skb_list_internal+0x752/0xdb0 [ 74.503717][ T7809] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 74.503734][ T7809] ? __pfx_eth_type_trans+0x10/0x10 [ 74.503748][ T7809] ? __build_skb_around+0x278/0x3b0 [ 74.503767][ T7809] netif_receive_skb_list+0x4d/0x4b0 [ 74.503784][ T7809] xdp_test_run_batch.constprop.0+0x146b/0x1ad0 [ 74.503799][ T7809] ? __lock_acquire+0x622/0x1c90 [ 74.503811][ T7809] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 74.503829][ T7809] ? read_tsc+0x9/0x20 [ 74.503841][ T7809] ? ktime_get+0x1a7/0x310 [ 74.503860][ T7809] bpf_test_run_xdp_live+0x34d/0x500 [ 74.503872][ T7809] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 74.503887][ T7809] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 74.503902][ T7809] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 74.503912][ T7809] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 74.503937][ T7809] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 74.503949][ T7809] ? 0xffffffffa0206200 [ 74.503959][ T7809] ? 0xffffffffa0206200 [ 74.503968][ T7809] ? 0xffffffffa0206200 [ 74.503979][ T7809] bpf_prog_test_run_xdp+0x824/0x1590 [ 74.503996][ T7809] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.504009][ T7809] ? __might_fault+0x70/0x190 [ 74.504028][ T7809] ? fput+0x70/0xf0 [ 74.504040][ T7809] ? __bpf_prog_get+0x97/0x2a0 [ 74.504052][ T7809] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 74.504064][ T7809] __sys_bpf+0x170a/0x4ea0 [ 74.504081][ T7809] ? __pfx___sys_bpf+0x10/0x10 [ 74.504096][ T7809] ? ksys_write+0x190/0x250 [ 74.504114][ T7809] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 74.504132][ T7809] ? fput+0x70/0xf0 [ 74.504143][ T7809] ? ksys_write+0x1ac/0x250 [ 74.504159][ T7809] ? __pfx_ksys_write+0x10/0x10 [ 74.504177][ T7809] __x64_sys_bpf+0x78/0xc0 [ 74.504193][ T7809] ? lockdep_hardirqs_on+0x7c/0x110 [ 74.504210][ T7809] do_syscall_64+0xcd/0x4c0 [ 74.504221][ T7809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.504233][ T7809] RIP: 0033:0x7f5929f8e9a9 [ 74.504242][ T7809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.504253][ T7809] RSP: 002b:00007f592add6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 74.504264][ T7809] RAX: ffffffffffffffda RBX: 00007f592a1b5fa0 RCX: 00007f5929f8e9a9 [ 74.504271][ T7809] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 74.504277][ T7809] RBP: 00007f592add6090 R08: 0000000000000000 R09: 0000000000000000 [ 74.504283][ T7809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.504290][ T7809] R13: 0000000000000000 R14: 00007f592a1b5fa0 R15: 00007ffde58bc588 [ 74.504303][ T7809] [ 74.571820][ T7814] tmpfs: Group quota block hardlimit too large. [ 74.695016][ T7819] netlink: 60 bytes leftover after parsing attributes in process `syz.3.720'. [ 74.710217][ T7821] netlink: 'syz.2.719': attribute type 1 has an invalid length. [ 74.739444][ T7821] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 74.744007][ T46] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 74.745009][ T7821] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.860153][ T87] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 74.902147][ T7841] netlink: 'syz.3.729': attribute type 10 has an invalid length. [ 75.063094][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.735'. [ 75.236023][ T7863] FAULT_INJECTION: forcing a failure. [ 75.236023][ T7863] name failslab, interval 1, probability 0, space 0, times 0 [ 75.240017][ T7863] CPU: 3 UID: 0 PID: 7863 Comm: syz.1.739 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 75.240032][ T7863] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.240039][ T7863] Call Trace: [ 75.240044][ T7863] [ 75.240049][ T7863] dump_stack_lvl+0x16c/0x1f0 [ 75.240089][ T7863] should_fail_ex+0x512/0x640 [ 75.240115][ T7863] should_failslab+0xc2/0x120 [ 75.240127][ T7863] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 75.240145][ T7863] ? skb_clone+0x190/0x3f0 [ 75.240158][ T7863] skb_clone+0x190/0x3f0 [ 75.240169][ T7863] packet_rcv+0x610/0x15a0 [ 75.240187][ T7863] ? __pfx_packet_rcv+0x10/0x10 [ 75.240201][ T7863] __netif_receive_skb_core.constprop.0+0xe2a/0x4a00 [ 75.240221][ T7863] ? kernel_text_address+0x8d/0x100 [ 75.240234][ T7863] ? __lock_acquire+0x622/0x1c90 [ 75.240244][ T7863] ? __kernel_text_address+0xd/0x40 [ 75.240256][ T7863] ? unwind_get_return_address+0x59/0xa0 [ 75.240270][ T7863] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 75.240291][ T7863] ? stack_trace_save+0x8e/0xc0 [ 75.240307][ T7863] ? __pfx_stack_trace_save+0x10/0x10 [ 75.240321][ T7863] ? stack_depot_save_flags+0x28/0xa40 [ 75.240342][ T7863] ? kasan_save_stack+0x42/0x60 [ 75.240358][ T7863] ? kasan_save_stack+0x33/0x60 [ 75.240373][ T7863] ? kasan_save_track+0x14/0x30 [ 75.240388][ T7863] ? __kasan_slab_alloc+0x89/0x90 [ 75.240397][ T7863] ? kmem_cache_alloc_bulk_noprof+0x41a/0xbc0 [ 75.240413][ T7863] ? xdp_test_run_batch.constprop.0+0x12ec/0x1ad0 [ 75.240425][ T7863] ? bpf_test_run_xdp_live+0x34d/0x500 [ 75.240438][ T7863] ? __sys_bpf+0x170a/0x4ea0 [ 75.240456][ T7863] __netif_receive_skb_list_core+0x355/0x950 [ 75.240476][ T7863] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 75.240493][ T7863] ? lock_acquire+0x179/0x350 [ 75.240508][ T7863] netif_receive_skb_list_internal+0x752/0xdb0 [ 75.240527][ T7863] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 75.240544][ T7863] ? __pfx_eth_type_trans+0x10/0x10 [ 75.240557][ T7863] ? __build_skb_around+0x278/0x3b0 [ 75.240577][ T7863] netif_receive_skb_list+0x4d/0x4b0 [ 75.240593][ T7863] xdp_test_run_batch.constprop.0+0x146b/0x1ad0 [ 75.240608][ T7863] ? __lock_acquire+0x622/0x1c90 [ 75.240619][ T7863] ? __pfx_xdp_test_run_batch.constprop.0+0x10/0x10 [ 75.240637][ T7863] ? read_tsc+0x9/0x20 [ 75.240650][ T7863] ? ktime_get+0x1a7/0x310 [ 75.240669][ T7863] bpf_test_run_xdp_live+0x34d/0x500 [ 75.240681][ T7863] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 75.240694][ T7863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.240708][ T7863] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 75.240719][ T7863] ? bpf_dispatcher_change_prog+0x54d/0xa80 [ 75.240743][ T7863] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 75.240756][ T7863] ? 0xffffffffa0206200 [ 75.240766][ T7863] ? 0xffffffffa0206200 [ 75.240774][ T7863] ? 0xffffffffa0206200 [ 75.240785][ T7863] bpf_prog_test_run_xdp+0x824/0x1590 [ 75.240801][ T7863] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.240814][ T7863] ? __might_fault+0x70/0x190 [ 75.240834][ T7863] ? fput+0x70/0xf0 [ 75.240846][ T7863] ? __bpf_prog_get+0x97/0x2a0 [ 75.240858][ T7863] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 75.240870][ T7863] __sys_bpf+0x170a/0x4ea0 [ 75.240887][ T7863] ? __pfx___sys_bpf+0x10/0x10 [ 75.240902][ T7863] ? ksys_write+0x190/0x250 [ 75.240920][ T7863] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 75.240938][ T7863] ? fput+0x70/0xf0 [ 75.240949][ T7863] ? ksys_write+0x1ac/0x250 [ 75.240965][ T7863] ? __pfx_ksys_write+0x10/0x10 [ 75.240984][ T7863] __x64_sys_bpf+0x78/0xc0 [ 75.240999][ T7863] ? lockdep_hardirqs_on+0x7c/0x110 [ 75.241016][ T7863] do_syscall_64+0xcd/0x4c0 [ 75.241027][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.241040][ T7863] RIP: 0033:0x7f572e38e9a9 [ 75.241049][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.241060][ T7863] RSP: 002b:00007f572f1d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.241072][ T7863] RAX: ffffffffffffffda RBX: 00007f572e5b5fa0 RCX: 00007f572e38e9a9 [ 75.241079][ T7863] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 75.241085][ T7863] RBP: 00007f572f1d6090 R08: 0000000000000000 R09: 0000000000000000 [ 75.241092][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.241098][ T7863] R13: 0000000000000000 R14: 00007f572e5b5fa0 R15: 00007ffdd2a79948 [ 75.241111][ T7863] [ 75.385165][ C3] vkms_vblank_simulate: vblank timer overrun [ 75.665553][ T7883] ------------[ cut here ]------------ [ 75.667444][ T7883] WARNING: CPU: 2 PID: 7883 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 75.670677][ T7883] Modules linked in: [ 75.672249][ T7883] CPU: 2 UID: 0 PID: 7883 Comm: syz.2.748 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 75.678722][ T7883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.682525][ T7883] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 75.684895][ T7883] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 4d 43 7d 0e 00 75 0b c6 05 44 43 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 75.692102][ T7883] RSP: 0018:ffffc90020947908 EFLAGS: 00010246 [ 75.694877][ T7883] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 75.698208][ T7883] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000040dc0 [ 75.701495][ T7883] RBP: 00000027ffffe368 R08: 0000000000000007 R09: 0000000000000000 [ 75.704870][ T7883] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000001a [ 75.708144][ T7883] R13: 1ffff92004128f36 R14: 00000027ffffe368 R15: 000000000000001a [ 75.711537][ T7883] FS: 00007fc8da35c6c0(0000) GS:ffff8880d6922000(0000) knlGS:0000000000000000 [ 75.715348][ T7883] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.718202][ T7883] CR2: 000000110c387139 CR3: 00000000374e3000 CR4: 0000000000352ef0 [ 75.721499][ T7883] Call Trace: [ 75.722937][ T7883] [ 75.724221][ T7883] ? __pfx_stack_trace_save+0x10/0x10 [ 75.726587][ T7883] ? stack_depot_save_flags+0x28/0xa40 [ 75.728858][ T7883] ? __lock_acquire+0xb8a/0x1c90 [ 75.730879][ T7883] ? __lock_acquire+0xb8a/0x1c90 [ 75.732405][ T7883] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 75.734615][ T7883] ? __mutex_trylock_common+0xe9/0x250 [ 75.736341][ T7883] ? __lock_acquire+0xb8a/0x1c90 [ 75.738055][ T7883] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.739844][ T7883] __alloc_pages_noprof+0xb/0x1b0 [ 75.741582][ T7883] ___kmalloc_large_node+0x84/0x1e0 [ 75.743215][ T7883] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.745046][ T7883] __kmalloc_large_node_noprof+0x1c/0x70 [ 75.746861][ T7883] __kmalloc_noprof.cold+0xc/0x61 [ 75.748700][ T7883] comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.750663][ T7883] ? do_raw_spin_unlock+0xb4/0x230 [ 75.752280][ T7883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.754159][ T7883] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.756086][ T7883] ? do_vfs_ioctl+0x523/0x1a60 [ 75.757644][ T7883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.759371][ T7883] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 75.761428][ T7883] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 75.763562][ T7883] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.765785][ T7883] ? hook_file_ioctl_common+0x145/0x410 [ 75.767567][ T7883] ? selinux_file_ioctl+0x180/0x270 [ 75.769261][ T7883] ? selinux_file_ioctl+0xb4/0x270 [ 75.770907][ T7883] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.772728][ T7883] __x64_sys_ioctl+0x18e/0x210 [ 75.774269][ T7883] do_syscall_64+0xcd/0x4c0 [ 75.775778][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.777634][ T7883] RIP: 0033:0x7fc8d958e9a9 [ 75.779184][ T7883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.785634][ T7883] RSP: 002b:00007fc8da35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.788472][ T7883] RAX: ffffffffffffffda RBX: 00007fc8d97b5fa0 RCX: 00007fc8d958e9a9 [ 75.791045][ T7883] RDX: 0000200000000280 RSI: 000000008010640b RDI: 0000000000000004 [ 75.793569][ T7883] RBP: 00007fc8d9610d69 R08: 0000000000000000 R09: 0000000000000000 [ 75.796147][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.798861][ T7883] R13: 0000000000000000 R14: 00007fc8d97b5fa0 R15: 00007ffca25959f8 [ 75.801429][ T7883] [ 75.802454][ T7883] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.804820][ T7883] CPU: 2 UID: 0 PID: 7883 Comm: syz.2.748 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 75.808839][ T7883] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.812247][ T7883] Call Trace: [ 75.813351][ T7883] [ 75.814308][ T7883] dump_stack_lvl+0x3d/0x1f0 [ 75.815784][ T7883] panic+0x71c/0x800 [ 75.817067][ T7883] ? __pfx_panic+0x10/0x10 [ 75.818535][ T7883] ? show_trace_log_lvl+0x29b/0x3e0 [ 75.820176][ T7883] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 75.822177][ T7883] check_panic_on_warn+0xab/0xb0 [ 75.823757][ T7883] __warn+0xf6/0x3c0 [ 75.825000][ T7883] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 75.826932][ T7883] report_bug+0x3c3/0x580 [ 75.828343][ T7883] ? __alloc_frozen_pages_noprof+0x30b/0x23f0 [ 75.830266][ T7883] handle_bug+0x184/0x210 [ 75.831701][ T7883] exc_invalid_op+0x17/0x50 [ 75.833151][ T7883] asm_exc_invalid_op+0x1a/0x20 [ 75.834700][ T7883] RIP: 0010:__alloc_frozen_pages_noprof+0x30b/0x23f0 [ 75.836793][ T7883] Code: f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 83 fe 0a 0f 86 0a fe ff ff 80 3d 4d 43 7d 0e 00 75 0b c6 05 44 43 7d 0e 01 90 <0f> 0b 90 45 31 f6 eb 81 4d 85 f6 74 22 44 89 fa 89 ee 4c 89 f7 e8 [ 75.842838][ T7883] RSP: 0018:ffffc90020947908 EFLAGS: 00010246 [ 75.844732][ T7883] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 75.847215][ T7883] RDX: 0000000000000000 RSI: 000000000000001a RDI: 0000000000040dc0 [ 75.849771][ T7883] RBP: 00000027ffffe368 R08: 0000000000000007 R09: 0000000000000000 [ 75.852281][ T7883] R10: 0000000000000000 R11: 0000000000000001 R12: 000000000000001a [ 75.854944][ T7883] R13: 1ffff92004128f36 R14: 00000027ffffe368 R15: 000000000000001a [ 75.857353][ T7883] ? __pfx_stack_trace_save+0x10/0x10 [ 75.859489][ T7883] ? stack_depot_save_flags+0x28/0xa40 [ 75.861354][ T7883] ? __lock_acquire+0xb8a/0x1c90 [ 75.862970][ T7883] ? __lock_acquire+0xb8a/0x1c90 [ 75.864541][ T7883] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 75.866549][ T7883] ? __mutex_trylock_common+0xe9/0x250 [ 75.868263][ T7883] ? __lock_acquire+0xb8a/0x1c90 [ 75.869852][ T7883] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.871634][ T7883] __alloc_pages_noprof+0xb/0x1b0 [ 75.873289][ T7883] ___kmalloc_large_node+0x84/0x1e0 [ 75.874927][ T7883] ? comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.876700][ T7883] __kmalloc_large_node_noprof+0x1c/0x70 [ 75.878754][ T7883] __kmalloc_noprof.cold+0xc/0x61 [ 75.880576][ T7883] comedi_unlocked_ioctl+0x1757/0x2e90 [ 75.882347][ T7883] ? do_raw_spin_unlock+0xb4/0x230 [ 75.883954][ T7883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 75.885809][ T7883] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.887672][ T7883] ? do_vfs_ioctl+0x523/0x1a60 [ 75.889193][ T7883] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 75.890819][ T7883] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 75.892875][ T7883] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 75.894918][ T7883] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 75.897023][ T7883] ? hook_file_ioctl_common+0x145/0x410 [ 75.899176][ T7883] ? selinux_file_ioctl+0x180/0x270 [ 75.900929][ T7883] ? selinux_file_ioctl+0xb4/0x270 [ 75.902617][ T7883] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 75.904434][ T7883] __x64_sys_ioctl+0x18e/0x210 [ 75.905957][ T7883] do_syscall_64+0xcd/0x4c0 [ 75.907424][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.909245][ T7883] RIP: 0033:0x7fc8d958e9a9 [ 75.910745][ T7883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.916725][ T7883] RSP: 002b:00007fc8da35c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 75.919862][ T7883] RAX: ffffffffffffffda RBX: 00007fc8d97b5fa0 RCX: 00007fc8d958e9a9 [ 75.922365][ T7883] RDX: 0000200000000280 RSI: 000000008010640b RDI: 0000000000000004 [ 75.924957][ T7883] RBP: 00007fc8d9610d69 R08: 0000000000000000 R09: 0000000000000000 [ 75.927440][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.929862][ T7883] R13: 0000000000000000 R14: 00007fc8d97b5fa0 R15: 00007ffca25959f8 [ 75.932290][ T7883] [ 75.934034][ T7883] Kernel Offset: disabled [ 75.935399][ T7883] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:18:36 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a63fe20 RCX=ffffffff81afd43d RDX=ffff888024810000 RSI=ffffffff81afd419 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc9002091f928 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=0000000000000003 R14=ffffed100d4c7fc5 R15=ffff88806a43b580 RIP=ffffffff81afd41f RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 000055556a849500 ffffffff 00c00000 GS =0000 ffff8880d6722000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc8d97b7bac CR3=000000003412e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f592a011d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f592a011d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f592a011d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f592a011d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f592a011de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f592a011ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0d5228b54407e52a cc7679e064e0c0e6 30957f0968b905ee 66db1513c02d32c9 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01eced80cc61a3d2 f5c21d2f6717e5ad 6bd07ea16d060004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 e4b3dd7d0c2636df 344bca550e1e615d 40790432c402a388 9188e19ec0b8ac8e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a2d511025742584 18ad0802c1ae142e 948d816f1c8c28c5 dee2331e6279401c ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0db3c08935db0ef 514b06fecc327c6b a7699fd2fde4b3dd 7d0c2636df344bca ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 550e1e615d407904 32c402a3889188e1 9ec0b8ac8e01eced 80cc61a3d2f5c21d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6717e5ad6bd07e a16d06d9c70d7b71 03276ea97e0d5228 b54407e52acc7679 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc900068e0000 RBX=ffff888106220000 RCX=ffffffff819ca8f7 RDX=1ffff11020c4425a RSI=ffffffff86a6f13f RDI=0000000000000016 RBP=0000000000000083 RSP=ffffc900006a0eb8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90a93b60 R13=dffffc0000000000 R14=ffff8881062212d0 R15=0000000000000000 RIP=ffffffff86a6f167 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f93e8949300 ffffffff 00c00000 GS =0000 ffff8880d6822000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2f61fffc CR3=0000000033899000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 87d4000000000000 02ea000000060004 000c000600000000 000c020000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000c001a00100000 0014010000000000 000800080007000c 00080000000c0000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 02e6000000200000 0001000000100008 0000000000000004 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000400000008 0008000000140000 85fc000086140000 8628000086400000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8658000086700000 8688000086a00000 86b8000086cc0000 86e0000086f40000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 870c0000872c0000 8750000000100000 0000000000000000 00a90000000007bf ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a480000000140000 001c0000000e0014 000c000000080004 001c000e00000000 ZMM24=efb823efefb823ef efb823efefb823ef efb823efefb823ef efb823efefb823ef efb823efefb823ef efb823efefb823ef efb823efefb823ef efb823efefb823ef ZMM25=40bf55c940bf55c9 40bf55c940bf55c9 40bf55c940bf55c9 40bf55c940bf55c9 40bf55c940bf55c9 40bf55c940bf55c9 40bf55c940bf55c9 40bf55c940bf55c9 ZMM26=cdc89707cdc89707 cdc89707cdc89707 cdc89707cdc89707 cdc89707cdc89707 cdc89707cdc89707 cdc89707cdc89707 cdc89707cdc89707 cdc89707cdc89707 ZMM27=c4b17657c4b17657 c4b17657c4b17657 c4b17657c4b17657 c4b17657c4b17657 c4b17657c4b17657 c4b17657c4b17657 c4b17657c4b17657 c4b17657c4b17657 ZMM28=00000200000001ff 000001fe000001fd 000001fc000001fb 000001fa000001f9 000001f8000001f7 000001f6000001f5 000001f4000001f3 000001f2000001f1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=5706000057060000 5706000057060000 5706000057060000 5706000057060000 5706000057060000 5706000057060000 5706000057060000 5706000057060000 info registers vcpu 2 CPU#2 RAX=000000000000002e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855a4125 RDI=ffffffff9b0b7e60 RBP=ffffffff9b0b7e20 RSP=ffffc90020947270 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000002e R14=ffffffff9b0b7e20 R15=ffffffff855a40c0 RIP=ffffffff855a414f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc8da35c6c0 ffffffff 00c00000 GS =0000 ffff8880d6922000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c387139 CR3=00000000374e3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8d9611d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8d9611d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8d9611d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8d9611d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8d9611de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8d9611ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8d9786488 00007fc8d9786480 00007fc8d9786478 00007fc8d9786450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8da2ed100 00007fc8d9786440 00007fc8d9786458 00007fc8d97864a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc8d9786498 00007fc8d9786490 00007fc8d9786488 00007fc8d9786480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000070c8d RBX=0000000000000003 RCX=ffffffff8b866c99 RDX=0000000000000000 RSI=ffffffff8de2fdb1 RDI=ffffffff8c1572e0 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a93e50 R15=0000000000000000 RIP=ffffffff8b8657ff RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a22000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa91efb7bac CR3=00000000500f5000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000006 DR2=0000000000000007 DR3=0000000000001000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd491ecbf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee11d42 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee11d4f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee11d49 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee11d5d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee11de3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa91ee11ec1 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000