last executing test programs: 10.654692824s ago: executing program 1 (id=1409): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000a00)={0x0, 0x0, @pic={0x7, 0xc4, 0x0, 0x0, 0x80, 0xfd, 0x4, 0x5, 0x0, 0x6, 0x3, 0xb, 0x40, 0x0, 0x80}}) r3 = eventfd2(0x2, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = syz_io_uring_setup(0x493, &(0x7f00000000c0)={0x0, 0x7071, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x2, 0x2, r3}) 9.99415194s ago: executing program 1 (id=1411): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x4, {0x0, 0x9c33cbf2f2cca357}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$FUSE_INIT(r2, 0x0, 0x62) (fail_nth: 1) 7.313155663s ago: executing program 0 (id=1426): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0x1], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r2, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0x1000}], 0x1}, 0x7}], 0x2, 0x40000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000800)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 6.853415641s ago: executing program 1 (id=1430): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000008000000e27f000001000000000000002ae6ba0d3e9a5647d6df09e6edc87d8a85ba8035d210e825556c1f2d131a4f8fd3754d65ea56035dfacc97a851bdc5fc8eff", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="2079505d50848f95b900003b8c53600000"], 0x48) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix={0x8, 0x6, 0x32314d54, 0x2, 0x3, 0x8, 0x7, 0x2ae2743f, 0x0, 0x0, 0x0, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mount$fuse(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB, @ANYBLOB=',\x00']) read$FUSE(0xffffffffffffffff, &(0x7f0000004200)={0x2020}, 0x2020) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}}) write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000100)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a46a91"}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) epoll_create(0xfffffffb) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000000380)={0x6, 0x0, 0xfffffffc}) 6.42409174s ago: executing program 0 (id=1433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) 6.283766773s ago: executing program 0 (id=1434): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x42a400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={@loopback, 0x1}}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x8}) preadv(r6, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/77, 0x4d}], 0x3, 0x3, 0x3) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f00000003c0)={{0x0, 0x2}, {0x4, 0x401}, 0x10001}) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 5.567448869s ago: executing program 3 (id=1437): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ff00ffffffffaaaaaa"], 0x0) (async) r0 = syz_io_uring_setup(0x10c, &(0x7f0000000240)={0x0, 0xffeffffe, 0x3000, 0x3, 0x108}, &(0x7f00000001c0), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x21, &(0x7f0000000000), 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = io_uring_setup(0x4822, &(0x7f0000000180)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}], 0x1}], 0x1, 0x0) (async) ioctl$int_in(r3, 0x5452, &(0x7f00000010c0)=0xffff) (async) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1}, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(r5) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 5.462538773s ago: executing program 0 (id=1438): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x4, {0x0, 0x9c33cbf2f2cca357}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@nullb, r2, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$FUSE_INIT(r3, 0x0, 0x62) 5.462284003s ago: executing program 3 (id=1439): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x4, {0x0, 0x9c33cbf2f2cca357}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$FUSE_INIT(r2, 0x0, 0x62) (fail_nth: 2) 4.13451533s ago: executing program 1 (id=1442): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioperm(0x0, 0x6, 0x10000) setreuid(0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 3.931469592s ago: executing program 1 (id=1443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r1, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, 0x0, 0x100) getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, 0x9, 0x2, 0x10001, 0x0, 0x40, 0x7, 0x7f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.012955399s ago: executing program 1 (id=1447): bpf$BPF_PROG_TEST_RUN(0xe, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='limits\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000006fc0)=[{{&(0x7f0000002f40)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{&(0x7f0000004340)={0x2, 0x4e20, @empty}, 0x10, 0x0}}], 0x2, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/74, 0x4a}], 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$fuse(0x20000000, 0x0, 0x0, 0x223216, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r3 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={r2, 0xee00, r3}, 0xc) chdir(&(0x7f0000000100)='./file0\x00') syz_open_dev$loop(0x0, 0x2, 0x40000) openat$snapshot(0xffffffffffffff9c, 0x0, 0x481, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mlock2(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x0) 2.314623397s ago: executing program 0 (id=1450): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x42a400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x8}) preadv(r6, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/77, 0x4d}], 0x3, 0x3, 0x3) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f00000003c0)={{0x0, 0x2}, {0x4, 0x401}, 0x10001}) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 2.314343557s ago: executing program 3 (id=1451): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000040)="14000000140005b7ffccca38b9000000010860eb", 0x14) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8913, &(0x7f0000000040)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r8}, 0x10) openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r7}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'macvlan1\x00'}}}}}, 0x38}}, 0x0) 2.311235424s ago: executing program 3 (id=1452): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES32, @ANYRES64, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x13, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) eventfd(0xa514) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/257, 0x101}], 0x1, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000002d00)=0x0) sendmmsg(r4, &(0x7f0000002fc0)=[{{&(0x7f00000002c0)=@isdn={0x22, 0x1, 0x28, 0x0, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)="cefaf346b50ce6c9b4c29ca988b0a398b86f34725bcdf247c2e606511bc6e33e3a2f3dc2e18571ebee789b25e6fba25912133a6f5148c9671391c9b0b84c37809c3a1a3634de2cb3094a01597a2849d1f4bb905c6f1d7eb161d91386ca41eef19e894a39f2f78964fa", 0x69}], 0x1, &(0x7f0000000500)=[{0xc, 0x109, 0xe11}, {0x60, 0x10f, 0x5, "59e3b76db3c0dc8013e4d7b10fcd94a93a66643c7d01ead0043d4eb4c6e57ad69e6124c346fc9f7a17bdf6bb525fb8f118ee30f5d4bf7f491311368b49e87e5004932db6a7e8a4e37b97e656c06cb2720e"}], 0x6c}}, {{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x0, 0x4, 0x4, 0x0, {0xa, 0x4e21, 0x7, @private2, 0x7fff}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000680)="82437da17eb7b469a310dadda3df3b43a2117c85fc58a2d621b8079e564b0c1deca85a66c7a809fc54a49d481c41b631e3258d6fcf0052142dbe9826753d184fa13aeb90a67665508560ce744ebb03dacf389cdd1b934a55e66f17e9aa1385d8a33c7b10049916c66ae0c97a9d3c9b23445bffc5b71b5324ba4b6cbe873df7f339716313e30f89e805387e0afe1f59feea70aad8e060b4a6d83e44776eadb95bf80d6b273e07228590e75ab0f1a83b6c43102463352810d5f36d1974d9ac2a571e89375d96348d19283a461544a7e032d2de88b5895e54b9c260b0b783a81dec773dba8278443891", 0xe8}, {&(0x7f0000000780)="6dde2a8165a2985e254dc4607de33b0512043eabc9c2e8d3ccbf2fb3f9ff0fb8efce0ed601bf69a928fa962a81946744f9aae334fdc3f6cd485a424a8b37b0708fd55be1fdb1aedb9802ffdb09c561bdd1ea28937556b0a6b92cfc71b2275afcb35b5bd934b599e9cebdf64fb777453cda05ffc1fb883564c857da09d88bb9dcc16e55e368c4fd82c3afc386fd3f37ebc9b1c5a3dbdc97d8a7720efef2c4bc66a7e709258206b984a7ef56d7182ef87bc17662a1b8658ebc325b46e13385aa693d39bbb1a35ed8bb90dd19e5dc56c39b119783df2ba3595ff98ab1b6258be21fe8fd7d4835dc63fda17356ab", 0xec}, {&(0x7f0000000880)="26181f810672f780ceaabd028534ae5ed8181a4e1be15fdaddb178602ef0cc950d19b37c49cdf5aea6df21d982c5b49745684ac8d99bc8a4aa408dcbef0b794c8a41f45e0d15367baba6f80568f0358488c54660", 0x54}], 0x3, &(0x7f0000000940)=[{0x28, 0x111, 0x731, "f5e3e08c2be4fbf806f926156a59bb09e6da2582e492a3b5e6604f"}, {0x48, 0x101, 0x1, "68857260f2c85223dfba4042630c05bb6120fab02a919357320c7a73d0111f63496bb8c0dba2dd80080a68f687006907a8a7c4232cb15de2dbe4"}], 0x70}}, {{&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x4, @empty, 0xf38}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000a40)="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", 0x1000}], 0x1, &(0x7f0000001a80)=[{0x34, 0x104, 0x9, "efd59ac64237c91aff7e0833654ff372a7bdfecced720a5e11be01d0211e23be9ff87ca851e00c"}, {0xfc, 0x114, 0x401, "72365aa61bcab18fec004a63ec2cb1d13eaab35da1ceddee9df3d574ef1bae53677a9a9a648f4834852f3deb1e95c6956a993766e7556c1475b9c158a849ca1dca2b26a91539470dd22c3d840e7eab2faf285513359be28d8b743a1dc95f13a64698d073910f8e1acf8c9864f77fbee023aa814862cf6b898106e36ffeacc33439562fc27902a77e722719884950c3532320739000fc6af72a42c2b172c58e28c5742976b0c0af13b1edd444b0636e5f79006411f933f7ab7f483f2daa54742683af6db376b5c5b0375efef73ef8ac2af4e391e3307ec4f83fecb389c1ce5232f2799f46478683bc65a1ada1fc14221b"}, {0x34, 0x104, 0x7, "9d74897f091d5da2ecc0c3c41661f307dcecd6f6a99d825c89ea903e56f147484d98aeb683"}], 0x164}}, {{&(0x7f0000001c00)=@can, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001c80)="09cd3736ee2d7e78b129fcff94a9d1b3f20b60f95efc79c300293f340334e24c9cbfccd61e92a13bb6b737ae5c22169c9905957bb4de60bd1b8cf2508527e740ed24ff6df86523892846aa4a1befee54de9e75763b0ecc5e59b4d3d35e671b1cf39756d80f7c1ba8ed", 0x69}, {&(0x7f0000001d00)="fed9fcfb644ffdde4ff79ed70b0dd8430042439d6359f1f743b2d60459263f3d607a216ef158881ed7df6cca1457c6852ab0b74bf6ab85775c6705be0061ded1159711ff5fdc64366a28fab1e1552aee032322132a6be365bfa469f76568e41819aaecff2203cc6883faa25c4a40778248215069c954bb30fc3fd60095d9948316b851e9531e4b940201b16f671b64d90b743fe954ef748784514a1082023166b32777c8b8fc3fdef4edf96cebbc870dbe9679f2d215c900f1daa5cba30c4c221bb7ba0f4d6ab285230f04d7955dd2025feb0e16e6fcf1c22c851d0b71792ec02d74c4db156214", 0xe7}, {&(0x7f0000001e00)="cc9d23c2aa39924f741e91cabc0b3cd1786595c09b284073ddd4de4c409fa32d4746cf97e13c2e0cac2938e85d7b8a7fa7c72c1f4373258eceb7d88123500beaf86ed5cdb74fcc7a49ae0655", 0x4c}, {&(0x7f0000001e80)="b702174c5cb995f1b431be2f65a9323a91a05ceec3dae079940a3819e825b5f9be4c1a2572562759fa4e64d5dcdea8f4e86add21dc19a5c82d5bd9d367b32fd6e274a2c15b39ab79f4a198a9f6ff10a423c2856d484f4949c6efb0e84a5c43412cf594004a4be29e04b42b9cddb143dab643c3afc949b8e9708c187659f953010f1aee13a74706f428df9f90469f48090e3747b864d011387daac2ec3a40a82fc192616180ed1158513356647eaba845fad15522d7ad4c0491ddcea84d9802489ac57ec61fc23fe364036729f2c31b07b694788ed4f49e5d22bf7994ab", 0xdd}, {&(0x7f0000001f80)="4468fefe06453d5f45a8452ece63125aeb3dc2531e6fc89b0ccebcdcd8ef1cb62e7321b57f17d33fbace284c7ccc8c16a9", 0x31}, {&(0x7f0000001fc0)="203018fd0cd02555853db9af56398e28f1aad9b9758f6e8816c675ad98955728fdb556699c98b2bec7d3225acaedc403611a791fe99c4d325b858a0e43ad88f987e1645b314097442e6d5b77aae1c3e64c1a65e15ac64f8c4d80c76c3bded7ea2b394e06c018de977f4370e743aea92c93e16362d66faf1b43c27d4ea36c652e8b2a90284491a8f44b769b87df0fcd204ce7e6ca8a66fee037cf42aae030f97cc55af985983a8746d8062ff9900b5357543d61747b5a96cbe82b8def4207b13a4e2d81d65d57d57df2f2b5", 0xcb}], 0x6, &(0x7f0000002100)=[{0x44, 0x101, 0xffff07c6, "1cfe5bd009a5296d5b8e412090909878f6ae3b82df9d3c5fe7e41ef0f30b6883cc96e35fb9a923b3d960f20987095d8f0fab1c664870"}, {0x104, 0x102, 0x9, "9d0825092ed9e5669fc857e69251f4545fc2776b71dae438547034e118df0c5339c291bbb0e6f46997a2a382636242115afae5b31cd2188def6ffced61a8ec1806cf86c12c93f9eb93df37b2027a85b856034a405293495425edba752737595221cf864538a991beb04316cf72995fc3462dc06837a384c9dd3b9ff35c1bbf4a657d16709531adba3a4e493d7a106fa0753144c8a7f8fd39c4d665f71ce1e63d54ba1ca10c27d10093d0efc53c2d9d0a301b58815421a9b6fde71c1c3bfcc42df43a9c55ed2f8d00d91e4824ef600800987d7e48e262f65cc4bf0dedc8d68b69cd1886e9cee32e1a2d9031b7f33ba52e0193b5a69f9c0e"}, {0x14, 0xff, 0x5, "9e7f1104a5924b53"}, {0x1c, 0x10d, 0x4, "6b478d1e8eabce96bbf8ed3c3117b3"}, {0xdc, 0x3a, 0x3ff, "0e7f74ee41a88ff0a1c291e41f6f0e7a0c576d261a15cb19dee8b244f53aa610ff26a62ec0319be60989591cf6fe27b0121b0f7e00ff97bc30e107e3b48e98820146162531a0bf58932d0be29e9c5a81dc0d4b3fb4a2cc93d4c56021690d4fd4c5a00e4cc930d6778c7309c69cca04e64b4d77605c7e17aeb915185b56a868042595e6814efe056ffe41b0af14b2428ad00a6f5ea682127c653b5ff13393b8c3dcd4fb1586843cb7b9f3ffba551767994139fa1442d84167fa30e40a98131dc26696bd256dc44b435e88b0f9785d"}, {0x74, 0x115, 0x80000001, "fc97f5466c1a3c412a8d7976215abcc55937bb8adb638d424c506c181071fa7a1dedee264b906532e05235c084716ccf9712213b2e6651da16584efa52b2a37a2384eda6786c091b028a8c628557f3c09624da191b8c089c2ecc38ee0b814ca851b102894f"}, {0x100, 0x10c, 0x2, "84523bc5cc6da4d53b08a8e1e187b3c22bd0ae6502ff9c92370730f3d174e420c4355d0ecbb53ceccb70950df6c3d0621f5341789e448a9ea150c1a0ae116102df03d3d17edfc25646656dc787a8972dae84c77f864ba14d163730c7de2696454276fee58fae770e415211861bb5ea72f34248f8cf27d639b76a3eddead13fa1be074902b4f50400bb51dac779eb1d43f259a0beb48ae2ecaec837be3504d22bf74c19b431423048307bc7e367a6ae5b96e3a15baaebe36325bfca984e7a07cebf3a2adab7fcd7fa334b663c04a4b38b995fc9c91477d494536dcbfeee9761d8be7d773b1235385e11ba829c910718a24735f0b9"}, {0x1c, 0x104, 0x36, "f877e86cfb768b4d1c25bf6d1e7ec1"}, {0x38, 0x101, 0xfffffff9, "4a5070d12876540fef1e747d0bf4005e2245beeb53cdd3082a98b5dcb46293fa31c6a9ddcd59bc3c49"}], 0x41c}}, {{&(0x7f0000002540)=@in6={0xa, 0x4e22, 0xc00, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x80, &(0x7f0000002640)=[{&(0x7f00000025c0)="af9956ecd29371fb5ca663e00b356373181c8d1c415c92425d7cbade13fdb67323b117c7bcf4988b", 0x28}, {&(0x7f0000002600)="5df16bb81a99e73c9fd8cde9e95ef3a26d52003f5bec5b0d6fba", 0x1a}], 0x2, &(0x7f0000002680)=[{0x10, 0x110, 0x1000, "4c1f"}, {0x6c, 0x111, 0x10, "3902a3d9b67437b2c9d23ef77a636db759b92a8747023b3c93d8260ef7f681738f4fae276491c6d55672bda82c717a899f33f9beebc4ddfb7ef17a9432fd83274da55649f176a32ce5660eb88cdcbe2d6e5b7ff28fea90c7fad7d68e29"}, {0x94, 0x13, 0x9, "27f78bea84cb15df1364f7e344b342e45191603220d12a2a75ab6d3fd28ebc54ca83350ac39bb45fc695458885cf0ed51c11154d78943aa16795e7f62663769b5fb6c949be467891bf910472acc171503f89b19b12052cf562b0bd337d578755147373b876ce559b6a588cecdbd12d0e60ff54042681641697e3ba21f49ea28d71248bd44de167"}], 0x110}}, {{&(0x7f00000027c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002840)="02099153e5a34a08e0987ee4869c17ec751857333efbcc8733fb7a1fbe", 0x1d}, {&(0x7f0000002880)="16a48bf595dc518cb1f0e3a54aab4d84b3f9908812ee0ba3ffd874a2f651829b9f6d475bc09dd99c6677952243f2e6f3d050bf", 0x33}, {&(0x7f00000028c0)="c01d0b8f860f0a94ab6023a51a84f090c4ec4e62be40c406a066db04fb342111140fcbcf3f99e279287c8ce4b8264954b0b2b4f51de189cf98b29cfb3a22ed93da3a491a0970ef42a328425ce4477c30a54c204b331e46", 0x57}, {&(0x7f0000002940)="4abdb0f67785066aa46e6a9cbdd80f08a99a4565c8bc9c288876d4e339ba7844f0d285b19efafdd3cdaf2d0435c534f0e10f98a52e10ee56dbb3367ccc95618a06bd294f28071efbfcc65126c8105d68beddc39f1066950372cffd1fee739728b044670d0dc4b647bf53bb30fc4e590b85006d114e9ced373f4d95615b5e6aed1cff037f98032f52cc0cdc3eb2b9661e371c081b71929b78981edeb8e8f89da2baff0fa1adf9569ce09393f35c4596c0aa458871ffb096b7976ffd3e69", 0xbd}, {&(0x7f0000002a00)="a726e15618c8b7d2e344e431d013b5c7ca6ccbd08b93cebc3c3c4ac9381672e66851c2b4a53acf44e4b279452f2e25e1a412", 0x32}, {&(0x7f0000002a40)="53a192c725d937", 0x7}], 0x6, &(0x7f0000002ac0)=[{0x7c, 0x104, 0x8aa, "c0bfa009e0c0614bcf741b9d4b2b966127a85ddb1e88aea95cac00506b6dc766436cda4a6e1a48311fddcd8c8f2179b03a3f89d0a540d62eebb795bd65b1d04791190ef6c5a825be371e2e8171982608f011cea4e0509d55a382125674c20e86d089869c55a5a618cb41420ecf"}, {0x78, 0x101, 0x8, "c59e3a77be644eae94b55f84eb523297e73ab9f8cdf5597e00ca870648852fc98da43fa1f65c9b7f350db4169fab4b52f545f80137345f78198f73320bd90279c76dcc37c9b3128ebccf89f6d4d7331c77336a5569c2c6e92edc1d9868c15af5debf9637ce95b1df411bba"}, {0x88, 0x84, 0x40, "d5bc381522f63164487dbec770ad224e35e3cb8aabe63bd2b2dd3c06405595334e657460257c0edbf4825ce383e66c8bc479db5024eabfd6aff7fe0d5eb545894e5135dc1f7645a93c35c4f91716a6999169f3de67cb2d8987525e9003b60998cf17a3f7d659b3769e9c433d89d2f0db34e3e1001a783f26b566"}, {0x84, 0x10f, 0xff, "6fda574412c8140fbdfc199ef4d8a5a537fac699d68c9153719aca7a2a17ea8aa97b82c0ee58b4f493477f461128f0c52549ced9f33a4214c559ba6da9a4dcc7e3135960b9fb3fc18bf08f7567e97fb70c4613c7635a0377174973ea1a397712d4dab2b47a63bc21759e059ce8433ccf85c97566705a0e"}, {0xc, 0x117, 0x5}], 0x20c}}, {{&(0x7f0000002d40)=@nfc={0x27, r8, 0x1, 0x3}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002dc0)="162ba0c023b754fc8f4d368c3b828b5431cd514367bfce7e7f5bbdc389e4104489658bdf3c80d171b5b5741ff91a35c9a665c379c4aa0590d64400b61914c16d105fdad4fe873d5b8c3edb3800edd012121290160894afeab41b933d91b80b7621df55a33137ad53dd7ea94be50d28b2516c4af60541e25b93390db033ce3a", 0x7f}, {&(0x7f0000002e40)}, {&(0x7f0000002e80)="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", 0xfc}], 0x3}}], 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4018, r0}, 0x18) 2.308141309s ago: executing program 2 (id=1453): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r1, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, 0x0, 0x100) getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141101) dup(r3) r4 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000037000139879deeaa3ce100"/30], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) fcntl$setpipe(r2, 0x407, 0x40) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 1.354647604s ago: executing program 2 (id=1454): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000300)=""/61, 0x3d}], 0x2) 1.354387747s ago: executing program 2 (id=1455): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r1, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, 0x0, 0x100) getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) getpid() socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}, 0x9, 0x2, 0x10001, 0x0, 0x40, 0x7, 0x7f}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.213909573s ago: executing program 3 (id=1456): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000280)={{}, 0x78}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$setperm(0x5, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x42a400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={@loopback, 0x1, 0x0, 0x20, 0x0, [{@empty}, {@empty}]}}) ioctl$UI_SET_LEDBIT(r5, 0x40045569, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x8}) preadv(r6, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/82, 0x52}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/77, 0x4d}], 0x3, 0x3, 0x3) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$PTP_PEROUT_REQUEST2(r6, 0x40383d0c, &(0x7f00000003c0)={{0x0, 0x2}, {0x4, 0x401}, 0x10001}) ioctl$UI_DEV_DESTROY(r5, 0x5502) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) 1.120548002s ago: executing program 0 (id=1457): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x741e00, 0x30) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x1) syz_usb_disconnect(0xffffffffffffffff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xc0) 554.421608ms ago: executing program 3 (id=1458): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200000000f70007404884b24b02a8a7758a688958ed60ecfd057e10926ba77e5596b13e43cd4488e4aa68a75f7236ec205b6e4cac2a0d86c336bf07dbe861f4f57bcef92dcf818d532d4475b5daa4dadc1690f228e860bba5a0b5d9bde86862e8f7fc08f0debd4974c6fae7d737a0007ec948ac4d8714ebff6b25648fb910e0d6d07f023cf5fa4051627b9c5b69e265538f9ba683bf172a5ff815afa543c12e550a1bcc9287080c7c12cc89d216c56febb0b06134672ea6b0077c846396169475f271319988f49ec94f2996e5d0e1cb151fb223e556f10fb681d068e055eb34e5f8fc7a524ffe5f4632a6c74ad0fe0b1542497d76a5a4416c47805e001c0005800800014000000008080002"], 0x1ec}}, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) poll(&(0x7f0000000140)=[{r0, 0x8}, {r3, 0x400}, {r3, 0x4}, {0xffffffffffffffff, 0x16}], 0x4, 0x7) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0xfffffffffffffdba, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r1, r0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$FUSE_INIT(r5, 0x0, 0x62) 431.757953ms ago: executing program 2 (id=1459): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000300)='xen_cpu_write_ldt_entry\x00', r1, 0x0, 0xc6e3}, 0x18) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x2, 0x6, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0, 0x0) rmdir(0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) shutdown(r2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0xa0280, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x30df5ae70c2bc9e7, 0x3, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000020400000000000000000000000000000000082a5fad7c06c1408f6b83c38157d18223ea1e51a4dbda1f06c8d4d0191bfc613652c07f9ca4d2f0ce8c5038f9911414cbf3a58717dad8565ec14b8d750e8297bf1533a1d38813bc9b53c3a0c469ffb927aeac07382b80df97c137559478b2b2922c6c8ce6e89011a9ae295a63889164d166a397408c9d0e84d30338d33ec2800799f9b4b41814ccad948d581d5e6f20a41b45ba32c7d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000c80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b700000014000000b7030000000400008500000005000000bca900000000000035090100000400009500000000000000b70200070000000021876911579c05f9ee1e8e8ab3db632af8ff00000000b509000000000000dbaaf8fff1000000bf1400000000000007080000f8ffffdcbfa400000000000007090000f0ffff7fc70200000800000018220000ef116a318d51e2eb51d900bbc039e32f1d41a088920e6fe6876300324736", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x16, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x4, 0xa2, &(0x7f0000000a00)=""/162, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f00000003c0)="a3a3eff48a76564bfd21073cf03d3c40ccee539b3fc2d26cebf97668118e0797104a9622d86372fa00cb5eee480d657c030c7497cdddbb1b4ec77c79debb9df609ab5ae397692fa6755094981f8872", 0x4f, 0x4, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) 194.444976ms ago: executing program 2 (id=1460): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00') openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x208801, 0x0) r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x3}, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = shmget(0x1, 0x3000, 0x10, &(0x7f00000b3000/0x3000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000000)=""/92) flock(r1, 0x9) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r4 = syz_open_pts(r2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) dup3(r2, r4, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x200002) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) 0s ago: executing program 2 (id=1461): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x4, {0x0, 0x9c33cbf2f2cca357}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x0) write$FUSE_INIT(r2, 0x0, 0x62) (fail_nth: 3) kernel console output (not intermixed with test programs): set by peer [ 176.161212][ T12] vhci_hcd: stop threads [ 176.162881][ T12] vhci_hcd: release socket [ 176.173113][ T12] vhci_hcd: disconnect device [ 177.189205][ T8515] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 177.392807][ T8523] netlink: 'syz.1.604': attribute type 10 has an invalid length. [ 177.541383][ T8525] netlink: 'syz.0.606': attribute type 10 has an invalid length. [ 178.169151][ T8542] input: syz0 as /devices/virtual/input/input18 [ 178.210054][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 178.256600][ T8549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.611'. [ 178.260456][ T8551] binder: binder_mmap: 8550 20001000-2000b000 bad vm_flags failed -1 [ 178.279307][ T8549] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 178.279307][ T8549] program syz.1.611 not setting count and/or reply_len properly [ 179.129377][ T8564] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 179.334240][ T8566] netlink: 'syz.1.618': attribute type 10 has an invalid length. [ 179.884938][ T8589] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 179.979853][ T8594] input: syz0 as /devices/virtual/input/input20 [ 180.100209][ T8597] netlink: 24 bytes leftover after parsing attributes in process `syz.1.626'. [ 180.130143][ T8597] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 180.130143][ T8597] program syz.1.626 not setting count and/or reply_len properly [ 180.925577][ T1014] vhci_hcd: vhci_device speed not set [ 181.003310][ T8617] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 181.227666][ T8635] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 182.696248][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.3.642'. [ 182.721672][ T8656] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 182.721672][ T8656] program syz.3.642 not setting count and/or reply_len properly [ 183.235500][ T56] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 183.387402][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.390222][ T56] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.392704][ T56] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.396536][ T56] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 183.398852][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.405822][ T56] usb 5-1: config 0 descriptor?? [ 183.921317][ T56] usbhid 5-1:0.0: can't add hid device: -71 [ 183.923213][ T56] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 183.939424][ T56] usb 5-1: USB disconnect, device number 9 [ 184.653526][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.659'. [ 184.653532][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.659'. [ 184.718011][ T8721] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 184.720181][ T8721] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 184.727600][ T8721] vhci_hcd vhci_hcd.0: Device attached [ 184.905500][ T56] vhci_hcd: vhci_device speed not set [ 184.965508][ T56] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 185.018010][ T8727] netlink: 28 bytes leftover after parsing attributes in process `syz.3.661'. [ 185.416558][ T8722] vhci_hcd: connection reset by peer [ 185.420230][ T1052] vhci_hcd: stop threads [ 185.421418][ T1052] vhci_hcd: release socket [ 185.425882][ T1052] vhci_hcd: disconnect device [ 186.020981][ T8763] sctp: [Deprecated]: syz.1.671 (pid 8763) Use of int in max_burst socket option. [ 186.020981][ T8763] Use struct sctp_assoc_value instead [ 187.311609][ T8793] 9pnet_fd: Insufficient options for proto=fd [ 187.394346][ T8794] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 187.396797][ T8794] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 187.401330][ T8794] vhci_hcd vhci_hcd.0: Device attached [ 187.585459][ T832] vhci_hcd: vhci_device speed not set [ 187.646088][ T832] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 187.868717][ T8798] vhci_hcd: connection reset by peer [ 187.879013][ T12] vhci_hcd: stop threads [ 187.880183][ T12] vhci_hcd: release socket [ 187.881403][ T12] vhci_hcd: disconnect device [ 187.950889][ T8816] netlink: 'syz.0.686': attribute type 10 has an invalid length. [ 188.084825][ T8817] usb usb4: usbfs: process 8817 (syz.2.687) did not claim interface 0 before use [ 188.968259][ T7916] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 189.127161][ T7916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.130163][ T7916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.133011][ T7916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.136463][ T7916] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 189.138879][ T7916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.143288][ T7916] usb 6-1: config 0 descriptor?? [ 189.647949][ T7916] usbhid 6-1:0.0: can't add hid device: -71 [ 189.652676][ T7916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 189.666430][ T7916] usb 6-1: USB disconnect, device number 10 [ 190.046077][ T56] vhci_hcd: vhci_device speed not set [ 190.374861][ T8886] input: syz0 as /devices/virtual/input/input21 [ 190.509759][ T8894] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 190.740108][ T8896] netlink: 'syz.1.708': attribute type 10 has an invalid length. [ 191.425477][ T8908] netlink: 'syz.0.709': attribute type 10 has an invalid length. [ 192.005562][ T5978] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 192.156675][ T5978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.159537][ T5978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.162208][ T5978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 192.167582][ T5978] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 192.170670][ T5978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.174986][ T5978] usb 6-1: config 0 descriptor?? [ 192.659021][ T8928] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 192.660787][ T8928] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 192.995909][ T5978] usbhid 6-1:0.0: can't add hid device: -71 [ 192.997538][ T5978] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 193.005698][ T5978] usb 6-1: USB disconnect, device number 11 [ 193.026433][ T8928] vhci_hcd vhci_hcd.0: Device attached [ 193.091917][ T8929] vhci_hcd: connection closed [ 193.092127][ T11] vhci_hcd: stop threads [ 193.094576][ T11] vhci_hcd: release socket [ 193.097449][ T832] vhci_hcd: vhci_device speed not set [ 193.097950][ T11] vhci_hcd: disconnect device [ 193.578656][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.595130][ T8943] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 193.597805][ T8943] bond0: (slave wlan1): Opening slave failed [ 194.312737][ T8960] input: syz0 as /devices/virtual/input/input22 [ 194.366236][ T8941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.532125][ T8962] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 194.534482][ T8962] overlayfs: failed to set xattr on upper [ 194.536611][ T8962] overlayfs: ...falling back to redirect_dir=nofollow. [ 194.538489][ T8962] overlayfs: ...falling back to index=off. [ 194.540024][ T8962] overlayfs: ...falling back to uuid=null. [ 194.964669][ T8972] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 195.186400][ T8974] netlink: 'syz.1.729': attribute type 10 has an invalid length. [ 195.493898][ T8976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 195.646951][ T8980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 195.648741][ T8980] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.651351][ T8980] vhci_hcd vhci_hcd.0: Device attached [ 195.820794][ T8984] netlink: 'syz.3.730': attribute type 10 has an invalid length. [ 195.825830][ T832] vhci_hcd: vhci_device speed not set [ 195.885541][ T832] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 196.410981][ T8981] vhci_hcd: connection reset by peer [ 196.414386][ T1052] vhci_hcd: stop threads [ 196.421057][ T1052] vhci_hcd: release socket [ 196.422827][ T1052] vhci_hcd: disconnect device [ 196.867257][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.735'. [ 196.900760][ T8996] sg_write: data in/out 1836477195/60 bytes for SCSI command 0x0-- guessing data in; [ 196.900760][ T8996] program syz.0.735 not setting count and/or reply_len properly [ 197.078912][ T9008] input: syz0 as /devices/virtual/input/input23 [ 198.173985][ T9021] netlink: 56 bytes leftover after parsing attributes in process `syz.0.742'. [ 198.561091][ T9033] overlayfs: failed to resolve './file1': -2 [ 198.692514][ T9038] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 198.694288][ T9038] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 198.699175][ T9038] vhci_hcd vhci_hcd.0: Device attached [ 199.266485][ T9039] vhci_hcd: connection closed [ 199.267150][ T12] vhci_hcd: stop threads [ 199.270093][ T12] vhci_hcd: release socket [ 199.272064][ T12] vhci_hcd: disconnect device [ 199.293938][ T9053] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 199.299612][ T9055] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 199.634447][ T9060] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 199.644717][ T9061] netlink: 'syz.1.750': attribute type 10 has an invalid length. [ 199.917851][ T9067] input: syz0 as /devices/virtual/input/input24 [ 200.305742][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.754'. [ 200.367144][ T9076] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 200.367144][ T9076] program syz.1.754 not setting count and/or reply_len properly [ 200.951288][ T9089] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.759'. [ 200.953992][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 201.015592][ T832] vhci_hcd: vhci_device speed not set [ 201.519754][ T9110] xt_CT: No such helper "snmp" [ 201.523115][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 201.527203][ T9110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'. [ 201.530444][ T9110] netlink: 'syz.3.766': attribute type 1 has an invalid length. [ 201.532968][ T9110] nbd: error processing sock list [ 201.560072][ T9112] netlink: 'syz.0.762': attribute type 10 has an invalid length. [ 201.728901][ T9087] rtc_cmos 00:05: Alarms can be up to one day in the future [ 201.785648][ T9117] input: syz0 as /devices/virtual/input/input25 [ 201.810912][ T9118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.768'. [ 201.847809][ T9118] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 201.847809][ T9118] program syz.2.768 not setting count and/or reply_len properly [ 202.155476][ T832] rtc_cmos 00:05: Alarms can be up to one day in the future [ 202.159226][ T832] rtc_cmos 00:05: Alarms can be up to one day in the future [ 202.163839][ T832] rtc_cmos 00:05: Alarms can be up to one day in the future [ 202.169307][ T832] rtc_cmos 00:05: Alarms can be up to one day in the future [ 202.171616][ T832] rtc rtc0: __rtc_set_alarm: err=-22 [ 202.535235][ T9135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.773'. [ 203.369148][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.782'. [ 203.384727][ T9175] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 203.384727][ T9175] program syz.1.782 not setting count and/or reply_len properly [ 203.555221][ T9179] fuse: Unknown parameter 'grou00000000000000000000' [ 203.838261][ T9188] fuse: Unknown parameter '0x00000000000000030x0000000000000004' [ 204.045204][ T9185] syz.2.785 (9185): drop_caches: 2 [ 204.063625][ T9194] input: syz0 as /devices/virtual/input/input26 [ 205.098951][ T9211] fuse: Unknown parameter 'grou00000000000000000000' [ 205.230022][ T9220] block nbd0: shutting down sockets [ 205.353153][ T9223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.797'. [ 205.373624][ T9223] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 205.373624][ T9223] program syz.0.797 not setting count and/or reply_len properly [ 206.062173][ T9240] input: syz0 as /devices/virtual/input/input27 [ 206.229159][ T9242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.802'. [ 206.256331][ T9202] syz.1.790 (9202) used greatest stack depth: 20016 bytes left [ 206.368287][ T9250] fuse: Unknown parameter 'grou00000000000000000000' [ 206.739429][ T9257] input: syz0 as /devices/virtual/input/input28 [ 207.728134][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 208.330674][ T9295] input: syz0 as /devices/virtual/input/input29 [ 208.377454][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 208.379734][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 208.384619][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 208.397364][ T9298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 208.649725][ T9310] netlink: 'syz.3.821': attribute type 10 has an invalid length. [ 208.666976][ T9310] geneve0: entered promiscuous mode [ 208.708758][ T9310] : (slave geneve0): Enslaving as an active interface with an up link [ 209.450246][ T39] audit: type=1326 audit(1733869993.740:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.456416][ T39] audit: type=1326 audit(1733869993.740:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.461996][ T39] audit: type=1326 audit(1733869993.740:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.468068][ T39] audit: type=1326 audit(1733869993.740:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.469424][ T9333] netfs: Couldn't get user pages (rc=-14) [ 209.474970][ T39] audit: type=1326 audit(1733869993.740:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.484160][ T39] audit: type=1326 audit(1733869993.740:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.491540][ T39] audit: type=1326 audit(1733869993.740:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.498827][ T39] audit: type=1326 audit(1733869993.740:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.506690][ T39] audit: type=1326 audit(1733869993.740:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.514085][ T39] audit: type=1326 audit(1733869993.740:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.2.829" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 209.932386][ T9357] netlink: 'syz.1.834': attribute type 10 has an invalid length. [ 209.974647][ T9357] netlink: 'syz.1.834': attribute type 10 has an invalid length. [ 209.979040][ T9357] netlink: 2 bytes leftover after parsing attributes in process `syz.1.834'. [ 209.981589][ T9357] team0: entered promiscuous mode [ 209.983743][ T9357] team_slave_0: entered promiscuous mode [ 209.986535][ T9357] team_slave_1: entered promiscuous mode [ 209.994246][ T9357] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.996641][ T9357] bridge0: port 3(team0) entered blocking state [ 209.998445][ T9357] bridge0: port 3(team0) entered disabled state [ 210.000371][ T9357] team0: entered allmulticast mode [ 210.001998][ T9357] team_slave_0: entered allmulticast mode [ 210.003524][ T9357] team_slave_1: entered allmulticast mode [ 210.018212][ T9357] bridge0: port 3(team0) entered blocking state [ 210.020124][ T9357] bridge0: port 3(team0) entered forwarding state [ 210.618420][ T9378] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 210.875944][ T9388] netlink: 'syz.1.841': attribute type 10 has an invalid length. [ 211.139951][ T9389] input: syz0 as /devices/virtual/input/input30 [ 211.620922][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.843'. [ 211.676911][ T9400] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 211.676911][ T9400] program syz.1.843 not setting count and/or reply_len properly [ 212.005490][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 212.034391][ T9418] fuse: Unknown parameter 'group_id00000000000000000000' [ 212.157007][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.159672][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.161936][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.166415][ T30] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 212.169468][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.183067][ T30] usb 8-1: config 0 descriptor?? [ 212.284736][ T9425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.668509][ T30] usbhid 8-1:0.0: can't add hid device: -71 [ 212.670765][ T30] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 212.676458][ T30] usb 8-1: USB disconnect, device number 6 [ 213.085774][ T7916] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 213.137964][ T9444] netlink: 'syz.0.852': attribute type 10 has an invalid length. [ 213.237780][ T7916] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.240817][ T7916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.243662][ T7916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.246509][ T7916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.249907][ T7916] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.251693][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.3.855'. [ 213.252326][ T7916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.265561][ T9450] vlan0: entered promiscuous mode [ 213.266681][ T7916] usb 6-1: config 0 descriptor?? [ 213.268291][ T9450] team0: Device vlan0 is of different type [ 213.556869][ T9455] fuse: Unknown parameter 'group_id00000000000000000000' [ 213.647706][ T9459] input: syz0 as /devices/virtual/input/input31 [ 213.868918][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.859'. [ 213.882671][ T9462] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 213.882671][ T9462] program syz.0.859 not setting count and/or reply_len properly [ 214.540379][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 214.545125][ T9469] fuse: Unknown parameter 'f0x0000000000000008' [ 214.549092][ T9469] 9p: Unknown Cache mode or invalid value 4.}:Kfscache [ 214.811523][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.864'. [ 215.055500][ T9487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 215.256489][ T9503] 9pnet_fd: Insufficient options for proto=fd [ 215.556101][ T7916] usbhid 6-1:0.0: can't add hid device: -71 [ 215.558428][ T7916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 215.562522][ T7916] usb 6-1: USB disconnect, device number 12 [ 215.611818][ T9509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'. [ 215.614600][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'. [ 215.985668][ T9520] input: syz0 as /devices/virtual/input/input32 [ 216.502220][ T9528] qrtr: Invalid version 20 [ 216.764976][ T9544] vxcan3: entered promiscuous mode [ 216.768453][ T9544] vxcan3: entered allmulticast mode [ 216.779407][ T9544] overlayfs: missing 'lowerdir' [ 217.465509][ T832] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 217.581130][ T9562] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'. [ 217.586487][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 217.592601][ T39] kauditd_printk_skb: 41 callbacks suppressed [ 217.592612][ T39] audit: type=1800 audit(1733870001.880:161): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.887" name="file0" dev="9p" ino=40372944 res=0 errno=0 [ 217.593402][ T9563] netfs: Couldn't get user pages (rc=-14) [ 217.596146][ T9562] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 217.596146][ T9562] program syz.1.885 not setting count and/or reply_len properly [ 217.615515][ T832] usb 7-1: Using ep0 maxpacket: 8 [ 217.617980][ T832] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.620532][ T832] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.623447][ T832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 217.627201][ T832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 217.630020][ T832] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 217.632311][ T832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.636476][ T832] hub 7-1:1.0: bad descriptor, ignoring hub [ 217.638281][ T832] hub 7-1:1.0: probe with driver hub failed with error -5 [ 217.640895][ T832] cdc_wdm 7-1:1.0: skipping garbage [ 217.642254][ T832] cdc_wdm 7-1:1.0: skipping garbage [ 217.644473][ T832] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 217.646103][ T832] cdc_wdm 7-1:1.0: Unknown control protocol [ 217.710296][ T9566] netlink: 'syz.0.888': attribute type 30 has an invalid length. [ 217.848878][ T9573] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 217.850642][ T9573] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 217.853252][ T9573] vhci_hcd vhci_hcd.0: Device attached [ 218.025559][ T832] vhci_hcd: vhci_device speed not set [ 218.086815][ T832] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 218.445583][ T9576] vhci_hcd: connection reset by peer [ 218.449635][ T9159] vhci_hcd: stop threads [ 218.450784][ T9159] vhci_hcd: release socket [ 218.455330][ T9159] vhci_hcd: disconnect device [ 218.462784][ T9584] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 218.536672][ T9552] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 218.663612][ T9588] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 218.805586][ T30] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 218.891233][ T9552] random: crng reseeded on system resumption [ 218.900821][ T9552] Restarting kernel threads ... done. [ 218.965675][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 218.968226][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.970906][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.973405][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.976169][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.980352][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.982671][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.995641][ T5978] usb 7-1: USB disconnect, device number 3 [ 219.187720][ T30] usb 8-1: GET_CAPABILITIES returned 0 [ 219.189408][ T30] usbtmc 8-1:16.0: can't read capabilities [ 219.412691][ T9594] input: syz0 as /devices/virtual/input/input33 [ 219.518082][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'. [ 219.520379][ T9596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.895'. [ 219.927566][ T73] usb 8-1: USB disconnect, device number 7 [ 220.315463][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 220.329523][ T9615] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 220.329523][ T9615] program syz.1.900 not setting count and/or reply_len properly [ 220.396853][ T9614] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.428527][ T9614] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 220.439823][ T9614] kvm: requested 147504 ns i8254 timer period limited to 200000 ns [ 220.487039][ T30] usb 5-1: config 0 has no interfaces? [ 220.488821][ T30] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 220.492134][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.500699][ T30] usb 5-1: config 0 descriptor?? [ 220.765295][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.771526][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.859898][ T3227] usb 5-1: USB disconnect, device number 10 [ 221.191571][ T9639] overlay: ./bus is not a directory [ 221.194831][ T39] audit: type=1800 audit(1733870005.480:162): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.904" name="bus" dev="9p" ino=40372956 res=0 errno=0 [ 221.216791][ T9639] syz.1.904: attempt to access beyond end of device [ 221.216791][ T9639] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 221.221313][ T9639] efs: cannot read volume header [ 221.390940][ T9648] ipt_REJECT: TCP_RESET invalid for non-tcp [ 221.452744][ T9655] overlay: ./bus is not a directory [ 221.459084][ T39] audit: type=1800 audit(1733870005.750:163): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.915" name="bus" dev="9p" ino=40372956 res=0 errno=0 [ 221.499494][ T9655] syz.0.915: attempt to access beyond end of device [ 221.499494][ T9655] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 221.503762][ T9655] efs: cannot read volume header [ 221.903790][ T9665] input: syz0 as /devices/virtual/input/input34 [ 222.144956][ T9672] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 222.144956][ T9672] program syz.0.912 not setting count and/or reply_len properly [ 222.225540][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 223.007091][ T5946] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 223.009690][ T5946] CPU: 2 UID: 0 PID: 5946 Comm: kworker/u33:5 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 223.012616][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 223.015379][ T5946] Workqueue: hci2 hci_rx_work [ 223.016787][ T5946] Call Trace: [ 223.017686][ T5946] [ 223.018507][ T5946] dump_stack_lvl+0x16c/0x1f0 [ 223.019860][ T5946] sysfs_warn_dup+0x7f/0xa0 [ 223.021094][ T5946] sysfs_create_dir_ns+0x24d/0x2b0 [ 223.022442][ T5946] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 223.023923][ T5946] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 223.025277][ T5946] ? kobject_add_internal+0x12d/0x990 [ 223.026781][ T5946] ? do_raw_spin_unlock+0x172/0x230 [ 223.028096][ T5946] kobject_add_internal+0x2c8/0x990 [ 223.029545][ T5946] kobject_add+0x16f/0x240 [ 223.030792][ T5946] ? __pfx_kobject_add+0x10/0x10 [ 223.032097][ T5946] ? class_to_subsys+0x3e/0x160 [ 223.033410][ T5946] ? do_raw_spin_unlock+0x172/0x230 [ 223.034760][ T5946] ? kobject_put+0xab/0x5a0 [ 223.035979][ T5946] device_add+0x289/0x1a70 [ 223.037230][ T5946] ? __pfx_dev_set_name+0x10/0x10 [ 223.038566][ T5946] ? __pfx_device_add+0x10/0x10 [ 223.039922][ T5946] ? mgmt_send_event_skb+0x2f2/0x460 [ 223.041363][ T5946] hci_conn_add_sysfs+0x17e/0x230 [ 223.042753][ T5946] le_conn_complete_evt+0xfc6/0x1cd0 [ 223.044162][ T5946] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 223.045664][ T5946] ? __mutex_lock+0x1cc/0xa60 [ 223.046959][ T5946] hci_le_conn_complete_evt+0x23c/0x370 [ 223.048416][ T5946] hci_le_meta_evt+0x2e2/0x5d0 [ 223.049753][ T5946] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 223.051413][ T5946] hci_event_packet+0x666/0x1190 [ 223.052790][ T5946] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 223.054253][ T5946] ? __pfx_hci_event_packet+0x10/0x10 [ 223.055688][ T5946] ? mark_held_locks+0x9f/0xe0 [ 223.057014][ T5946] ? kcov_remote_start+0x3cf/0x6e0 [ 223.058409][ T5946] ? lockdep_hardirqs_on+0x7c/0x110 [ 223.059874][ T5946] hci_rx_work+0x2c5/0x16b0 [ 223.061140][ T5946] ? process_one_work+0x8bb/0x1b30 [ 223.062545][ T5946] process_one_work+0x958/0x1b30 [ 223.063898][ T5946] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 223.065406][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 223.067386][ T5946] ? rcu_is_watching+0x12/0xc0 [ 223.068806][ T5946] ? assign_work+0x1a0/0x250 [ 223.070173][ T5946] worker_thread+0x6c8/0xf00 [ 223.071463][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 223.072834][ T5946] kthread+0x2c1/0x3a0 [ 223.073955][ T5946] ? _raw_spin_unlock_irq+0x23/0x50 [ 223.075364][ T5946] ? __pfx_kthread+0x10/0x10 [ 223.076623][ T5946] ret_from_fork+0x45/0x80 [ 223.077830][ T5946] ? __pfx_kthread+0x10/0x10 [ 223.079115][ T5946] ret_from_fork_asm+0x1a/0x30 [ 223.080501][ T5946] [ 223.085608][ T5946] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 223.090286][ T5946] Bluetooth: hci2: failed to register connection device [ 223.226323][ T832] vhci_hcd: vhci_device speed not set [ 223.355952][ T9692] input: syz0 as /devices/virtual/input/input35 [ 223.515437][ T9] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 223.680158][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.687409][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.689929][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.693164][ T9] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 223.697406][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.706431][ T9] usb 8-1: config 0 descriptor?? [ 224.159865][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 224.161605][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 224.170001][ T9] usb 8-1: USB disconnect, device number 8 [ 224.732308][ T9698] overlay: ./bus is not a directory [ 224.740089][ T39] audit: type=1800 audit(1733870009.030:164): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.917" name="bus" dev="9p" ino=40372956 res=0 errno=0 [ 224.760935][ T9700] 9pnet_virtio: no channels available for device syz [ 224.785111][ T9698] syz.3.917: attempt to access beyond end of device [ 224.785111][ T9698] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 224.790921][ T9698] efs: cannot read volume header [ 224.815568][ T9704] 9pnet_virtio: no channels available for device syz [ 224.987334][ T9721] input: syz0 as /devices/virtual/input/input36 [ 225.008513][ T9723] fuse: Bad value for 'fd' [ 225.395525][ T832] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 225.546645][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.549471][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.551984][ T832] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.555282][ T832] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 225.565443][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.568434][ T832] usb 5-1: config 0 descriptor?? [ 225.798278][ T9734] use of bytesused == 0 is deprecated and will be removed in the future, [ 225.800677][ T9734] use the actual size instead. [ 226.131013][ T9744] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 226.132830][ T9744] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 226.135070][ T9744] vhci_hcd vhci_hcd.0: Device attached [ 226.315455][ T56] vhci_hcd: vhci_device speed not set [ 226.385591][ T56] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 226.546277][ T832] usbhid 5-1:0.0: can't add hid device: -71 [ 226.547919][ T832] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 226.550747][ T832] usb 5-1: USB disconnect, device number 11 [ 226.713699][ T9745] vhci_hcd: connection reset by peer [ 226.717616][ T9159] vhci_hcd: stop threads [ 226.724061][ T9159] vhci_hcd: release socket [ 226.729031][ T9159] vhci_hcd: disconnect device [ 226.771005][ T9757] fuse: Bad value for 'fd' [ 226.849192][ T9766] netfs: Couldn't get user pages (rc=-14) [ 226.850110][ T39] audit: type=1800 audit(1733870011.140:165): pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.938" name="file0" dev="9p" ino=40372944 res=0 errno=0 [ 227.012622][ T9781] input: syz0 as /devices/virtual/input/input37 [ 227.858144][ T39] audit: type=1800 audit(1733870012.150:166): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.943" name="file0" dev="9p" ino=40372944 res=0 errno=0 [ 227.861732][ T9790] netfs: Couldn't get user pages (rc=-14) [ 227.967397][ T9800] fuse: Invalid rootmode [ 227.997415][ T39] audit: type=1800 audit(1733870012.290:167): pid=9802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.948" name="file0" dev="9p" ino=40372944 res=0 errno=0 [ 227.997887][ T9802] netfs: Couldn't get user pages (rc=-14) [ 228.007205][ T9802] FAULT_INJECTION: forcing a failure. [ 228.007205][ T9802] name failslab, interval 1, probability 0, space 0, times 0 [ 228.010629][ T9802] CPU: 1 UID: 0 PID: 9802 Comm: syz.3.948 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 228.013357][ T9802] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.016147][ T9802] Call Trace: [ 228.017026][ T9802] [ 228.017820][ T9802] dump_stack_lvl+0x116/0x1f0 [ 228.019059][ T9802] should_fail_ex+0x497/0x5b0 [ 228.020311][ T9802] should_failslab+0xc2/0x120 [ 228.021552][ T9802] __kmalloc_noprof+0xce/0x4f0 [ 228.022824][ T9802] ? virtqueue_add_sgs+0x724/0x1b10 [ 228.024192][ T9802] virtqueue_add_sgs+0x724/0x1b10 [ 228.025522][ T9802] ? __virt_addr_valid+0x1a4/0x590 [ 228.026868][ T9802] ? __pfx_virtqueue_add_sgs+0x10/0x10 [ 228.028285][ T9802] ? __virt_addr_valid+0x5e/0x590 [ 228.029600][ T9802] ? __phys_addr+0xc6/0x150 [ 228.030797][ T9802] ? pack_sg_list.constprop.0+0x255/0x2b0 [ 228.032278][ T9802] p9_virtio_request+0x271/0x6a0 [ 228.033581][ T9802] ? __pfx_p9_virtio_request+0x10/0x10 [ 228.035011][ T9802] ? p9_client_prepare_req+0x111/0x4d0 [ 228.036420][ T9802] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 228.038361][ T9802] ? __lock_acquire+0x15a9/0x3c40 [ 228.039708][ T9802] p9_client_rpc+0x33d/0xc10 [ 228.040914][ T9802] ? __pfx___lock_acquire+0x10/0x10 [ 228.042271][ T9802] ? __pfx_p9_client_rpc+0x10/0x10 [ 228.043596][ T9802] ? lock_acquire.part.0+0x11b/0x380 [ 228.044963][ T9802] ? v9fs_dir_release+0x1dd/0x590 [ 228.046285][ T9802] ? __pfx_lock_release+0x10/0x10 [ 228.047602][ T9802] p9_client_clunk+0x93/0x170 [ 228.048828][ T9802] v9fs_dir_release+0x43e/0x590 [ 228.050015][ T9804] fuse: Invalid rootmode [ 228.050270][ T9802] ? __pfx_v9fs_dir_release+0x10/0x10 [ 228.053085][ T9802] ? __pfx_v9fs_dir_release+0x10/0x10 [ 228.054495][ T9802] __fput+0x3f8/0xb60 [ 228.055617][ T9802] __fput_sync+0xa1/0xc0 [ 228.056799][ T9802] __ia32_sys_close+0x86/0x100 [ 228.058059][ T9802] __do_fast_syscall_32+0x73/0x120 [ 228.059395][ T9802] do_fast_syscall_32+0x32/0x80 [ 228.060664][ T9802] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.062313][ T9802] RIP: 0023:0xf7f26579 [ 228.063379][ T9802] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.068330][ T9802] RSP: 002b:00000000f509657c EFLAGS: 00000292 ORIG_RAX: 0000000000000006 [ 228.070487][ T9802] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 228.072522][ T9802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.074583][ T9802] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.076934][ T9802] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 228.079008][ T9802] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.081085][ T9802] [ 228.082041][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.143869][ T9806] fuse: Invalid rootmode [ 228.198009][ T9808] syzkaller0: entered promiscuous mode [ 228.199492][ T9808] syzkaller0: entered allmulticast mode [ 228.215874][ T7916] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 228.387807][ T7916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.391761][ T7916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.395236][ T7916] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.400593][ T7916] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 228.403978][ T7916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.417883][ T7916] usb 5-1: config 0 descriptor?? [ 228.482306][ T9816] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 228.849167][ T9823] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 229.259656][ T7916] usbhid 5-1:0.0: can't add hid device: -71 [ 229.263184][ T7916] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 229.271272][ T7916] usb 5-1: USB disconnect, device number 12 [ 229.903674][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 230.049380][ T39] audit: type=1800 audit(1733870014.340:168): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.955" name="file0" dev="9p" ino=40372944 res=0 errno=0 [ 230.055848][ T9846] netfs: Couldn't get user pages (rc=-14) [ 230.136509][ T9850] 9pnet_virtio: no channels available for device syz [ 230.174699][ T9851] input: syz0 as /devices/virtual/input/input38 [ 230.186195][ T9853] fuse: Bad value for 'rootmode' [ 231.227316][ T9866] input: syz0 as /devices/virtual/input/input39 [ 231.485489][ T56] vhci_hcd: vhci_device speed not set [ 231.741812][ T9881] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 231.957788][ T9885] netlink: 'syz.2.968': attribute type 10 has an invalid length. [ 232.551019][ T9887] fuse: Bad value for 'rootmode' [ 232.619171][ T9889] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 232.657312][ T9891] syzkaller0: entered promiscuous mode [ 232.658756][ T9891] syzkaller0: entered allmulticast mode [ 232.787707][ T9900] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.789781][ T9900] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 232.810805][ T9900] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.813036][ T9900] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 232.840691][ T9900] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.842977][ T9900] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 232.869098][ T9900] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 232.874274][ T9900] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 232.883403][ T9900] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 232.915022][ T9900] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 234.775564][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 234.780022][ T9900] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 234.855526][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 234.855612][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 234.935491][ T64] Bluetooth: hci3: command 0x0405 tx timeout [ 235.562468][ T9947] input: syz0 as /devices/virtual/input/input40 [ 235.835211][ T9951] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 235.912534][ T9953] input: syz0 as /devices/virtual/input/input41 [ 236.072809][ T9957] netlink: 'syz.1.982': attribute type 10 has an invalid length. [ 236.425057][ T9961] netlink: 64 bytes leftover after parsing attributes in process `syz.0.985'. [ 236.432861][ T9961] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 236.621791][ T9972] input: syz0 as /devices/virtual/input/input42 [ 236.738314][ T9974] FAULT_INJECTION: forcing a failure. [ 236.738314][ T9974] name failslab, interval 1, probability 0, space 0, times 0 [ 236.741575][ T9974] CPU: 1 UID: 0 PID: 9974 Comm: syz.1.987 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 236.744257][ T9974] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 236.746933][ T9974] Call Trace: [ 236.747770][ T9974] [ 236.748520][ T9974] dump_stack_lvl+0x16c/0x1f0 [ 236.749727][ T9974] should_fail_ex+0x497/0x5b0 [ 236.750894][ T9974] ? fs_reclaim_acquire+0xae/0x150 [ 236.752191][ T9974] should_failslab+0xc2/0x120 [ 236.753371][ T9974] __kmalloc_noprof+0xce/0x4f0 [ 236.754603][ T9974] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 236.756149][ T9974] ? tomoyo_realpath_from_path+0xbf/0x710 [ 236.757672][ T9974] tomoyo_realpath_from_path+0xbf/0x710 [ 236.759085][ T9974] ? tomoyo_path_number_perm+0x235/0x5b0 [ 236.760516][ T9974] tomoyo_path_number_perm+0x248/0x5b0 [ 236.762018][ T9974] ? tomoyo_path_number_perm+0x235/0x5b0 [ 236.763487][ T9974] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.765059][ T9974] ? __pfx_lock_release+0x10/0x10 [ 236.766388][ T9974] ? trace_lock_acquire+0x14e/0x1f0 [ 236.767738][ T9974] ? lock_acquire+0x2f/0xb0 [ 236.768900][ T9974] ? __fget_files+0x40/0x3a0 [ 236.770117][ T9974] ? __fget_files+0x206/0x3a0 [ 236.771328][ T9974] security_file_ioctl_compat+0x9b/0x240 [ 236.772771][ T9974] __do_compat_sys_ioctl+0x4e/0x2c0 [ 236.774124][ T9974] __do_fast_syscall_32+0x73/0x120 [ 236.775433][ T9974] do_fast_syscall_32+0x32/0x80 [ 236.776683][ T9974] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.778306][ T9974] RIP: 0023:0xf7f71579 [ 236.779352][ T9974] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 236.784251][ T9974] RSP: 002b:00000000f50e657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 236.786438][ T9974] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01c64a3 [ 236.788468][ T9974] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.790531][ T9974] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.792596][ T9974] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 236.794664][ T9974] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.796719][ T9974] [ 236.797610][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.803704][ T9974] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.857994][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 236.935541][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 236.935606][ T5946] Bluetooth: hci1: command 0x0406 tx timeout [ 237.015582][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 237.184331][ T9981] nr0: entered promiscuous mode [ 237.456828][ T9992] input: syz0 as /devices/virtual/input/input43 [ 237.795976][T10001] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 237.841276][T10003] fuse: Unknown parameter 'user_i00000000000000000000' [ 238.001561][T10008] netlink: 'syz.1.997': attribute type 10 has an invalid length. [ 238.700184][T10021] FAULT_INJECTION: forcing a failure. [ 238.700184][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 238.704170][T10021] CPU: 2 UID: 0 PID: 10021 Comm: syz.2.1003 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 238.707620][T10021] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 238.710688][T10021] Call Trace: [ 238.711697][T10021] [ 238.712554][T10021] dump_stack_lvl+0x16c/0x1f0 [ 238.713850][T10021] should_fail_ex+0x497/0x5b0 [ 238.715092][T10021] ? fs_reclaim_acquire+0xae/0x150 [ 238.716728][T10021] should_failslab+0xc2/0x120 [ 238.718436][T10021] __kmalloc_noprof+0xce/0x4f0 [ 238.720030][T10021] ? d_absolute_path+0x137/0x1b0 [ 238.721628][T10021] ? tomoyo_encode2+0x100/0x3e0 [ 238.723441][T10021] tomoyo_encode2+0x100/0x3e0 [ 238.725147][T10021] tomoyo_realpath_from_path+0x1a7/0x710 [ 238.726838][T10021] tomoyo_path_number_perm+0x248/0x5b0 [ 238.728389][T10021] ? tomoyo_path_number_perm+0x235/0x5b0 [ 238.729996][T10021] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 238.731578][T10021] ? __pfx_lock_release+0x10/0x10 [ 238.732900][T10021] ? trace_lock_acquire+0x14e/0x1f0 [ 238.734367][T10021] ? lock_acquire+0x2f/0xb0 [ 238.735786][T10021] ? __fget_files+0x40/0x3a0 [ 238.736986][T10021] ? __fget_files+0x206/0x3a0 [ 238.738549][T10021] security_file_ioctl_compat+0x9b/0x240 [ 238.740559][T10021] __do_compat_sys_ioctl+0x4e/0x2c0 [ 238.742138][T10021] __do_fast_syscall_32+0x73/0x120 [ 238.743938][T10021] do_fast_syscall_32+0x32/0x80 [ 238.745704][T10021] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.747455][T10021] RIP: 0023:0xf748e579 [ 238.748570][T10021] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 238.753714][T10021] RSP: 002b:00000000f514557c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 238.756097][T10021] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01c64a3 [ 238.758291][T10021] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 238.760460][T10021] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.762875][T10021] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 238.765585][T10021] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.767935][T10021] [ 238.772025][T10021] ERROR: Out of memory at tomoyo_realpath_from_path. [ 238.935828][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.015564][ T5946] Bluetooth: hci2: command 0x0406 tx timeout [ 239.095654][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 239.290091][T10051] input: syz0 as /devices/virtual/input/input44 [ 239.855211][T10060] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 240.097838][T10066] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 240.148514][T10068] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 240.408390][T10072] netlink: 'syz.3.1013': attribute type 10 has an invalid length. [ 240.691654][T10074] FAULT_INJECTION: forcing a failure. [ 240.691654][T10074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.695281][T10074] CPU: 1 UID: 0 PID: 10074 Comm: syz.0.1014 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 240.698345][T10074] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 240.701281][T10074] Call Trace: [ 240.702210][T10074] [ 240.703043][T10074] dump_stack_lvl+0x16c/0x1f0 [ 240.704299][T10074] should_fail_ex+0x497/0x5b0 [ 240.705546][T10074] _copy_from_user+0x2e/0xd0 [ 240.706807][T10074] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 240.708476][T10074] drm_ioctl+0x4fc/0xba0 [ 240.709803][T10074] ? __pfx_drm_ioctl+0x10/0x10 [ 240.711261][T10074] drm_compat_ioctl+0x327/0x460 [ 240.712736][T10074] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 240.714410][T10074] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 240.716288][T10074] __do_fast_syscall_32+0x73/0x120 [ 240.717879][T10074] do_fast_syscall_32+0x32/0x80 [ 240.719335][T10074] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.721167][T10074] RIP: 0023:0xf7fe7579 [ 240.722371][T10074] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 240.727906][T10074] RSP: 002b:00000000f515657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 240.730604][T10074] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01c64a3 [ 240.732779][T10074] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.734990][T10074] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 240.737156][T10074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 240.739165][T10074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.741170][T10074] [ 240.742125][ C1] vkms_vblank_simulate: vblank timer overrun [ 241.055527][ T35] usb 7-1: new low-speed USB device number 4 using dummy_hcd [ 241.185563][ T35] usb 7-1: device descriptor read/64, error -71 [ 241.425553][ T35] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 241.575516][ T35] usb 7-1: device descriptor read/64, error -71 [ 241.686522][ T35] usb usb7-port1: attempt power cycle [ 242.034881][T10103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 242.037507][ T35] usb 7-1: new low-speed USB device number 6 using dummy_hcd [ 242.040481][T10103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 242.043643][T10103] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 242.046144][T10103] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 242.066121][ T35] usb 7-1: device descriptor read/8, error -71 [ 242.110361][T10114] FAULT_INJECTION: forcing a failure. [ 242.110361][T10114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.114089][T10114] CPU: 1 UID: 0 PID: 10114 Comm: syz.3.1024 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 242.117847][T10114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 242.121529][T10114] Call Trace: [ 242.122669][T10114] [ 242.123566][T10114] dump_stack_lvl+0x16c/0x1f0 [ 242.125233][T10114] should_fail_ex+0x497/0x5b0 [ 242.126924][T10114] _copy_from_user+0x2e/0xd0 [ 242.128531][T10114] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 242.130636][T10114] drm_ioctl+0x4fc/0xba0 [ 242.132132][T10114] ? __pfx_drm_ioctl+0x10/0x10 [ 242.133852][T10114] drm_compat_ioctl+0x327/0x460 [ 242.135578][T10114] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 242.137470][T10114] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 242.139343][T10114] __do_fast_syscall_32+0x73/0x120 [ 242.141013][T10114] do_fast_syscall_32+0x32/0x80 [ 242.142339][T10114] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.143979][T10114] RIP: 0023:0xf7f26579 [ 242.145049][T10114] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 242.150018][T10114] RSP: 002b:00000000f509657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 242.152191][T10114] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01c64a3 [ 242.154252][T10114] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.156296][T10114] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.158351][T10114] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 242.160409][T10114] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.162503][T10114] [ 242.163374][ C1] vkms_vblank_simulate: vblank timer overrun [ 242.325491][ T35] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 242.355841][ T35] usb 7-1: device descriptor read/8, error -71 [ 242.399109][T10124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.405170][T10124] option changes via remount are deprecated (pid=10123 comm=syz.1.1027) [ 242.475574][ T35] usb usb7-port1: unable to enumerate USB device [ 242.941988][T10126] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 243.147652][T10130] netlink: 'syz.1.1028': attribute type 10 has an invalid length. [ 243.341418][ T5946] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.344207][T10103] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 243.868278][T10137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.872244][T10137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.882542][T10137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.895681][T10137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.065650][ T5946] Bluetooth: hci3: command 0x0405 tx timeout [ 244.065689][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 244.067331][ T5948] Bluetooth: hci2: command 0x0406 tx timeout [ 244.169504][T10139] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1031'. [ 244.270982][T10148] FAULT_INJECTION: forcing a failure. [ 244.270982][T10148] name failslab, interval 1, probability 0, space 0, times 0 [ 244.274488][T10148] CPU: 1 UID: 0 PID: 10148 Comm: syz.0.1033 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 244.277271][T10148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 244.280080][T10148] Call Trace: [ 244.280965][T10148] [ 244.281762][T10148] dump_stack_lvl+0x16c/0x1f0 [ 244.283007][T10148] should_fail_ex+0x497/0x5b0 [ 244.284249][T10148] ? fs_reclaim_acquire+0xae/0x150 [ 244.285624][T10148] should_failslab+0xc2/0x120 [ 244.286826][T10148] __kmalloc_cache_noprof+0x68/0x420 [ 244.288137][T10148] drm_atomic_state_alloc+0xb8/0x120 [ 244.289517][T10148] drm_atomic_helper_update_plane+0x52/0x400 [ 244.291130][T10148] __setplane_atomic+0x250/0x360 [ 244.292401][T10148] drm_mode_cursor_universal+0x4a7/0xcb0 [ 244.293879][T10148] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 244.295496][T10148] ? __pfx_drm_lease_held+0x10/0x10 [ 244.296860][T10148] ? modeset_lock+0x114/0x6e0 [ 244.298100][T10148] drm_mode_cursor_common+0x30a/0x960 [ 244.299442][T10148] ? hlock_class+0x4e/0x130 [ 244.300659][T10148] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 244.302214][T10148] ? lock_acquire.part.0+0x11b/0x380 [ 244.303562][T10148] ? find_held_lock+0x2d/0x110 [ 244.304806][T10148] drm_mode_cursor_ioctl+0xa6/0xe0 [ 244.306170][T10148] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 244.307713][T10148] ? do_raw_spin_unlock+0x172/0x230 [ 244.309343][T10148] drm_ioctl_kernel+0x1e6/0x3d0 [ 244.310777][T10148] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 244.312332][T10148] ? __might_fault+0x91/0x190 [ 244.313920][T10148] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 244.315758][T10148] ? __might_fault+0xe3/0x190 [ 244.317356][T10148] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 244.319294][T10148] drm_ioctl+0x57e/0xba0 [ 244.320718][T10148] ? __pfx_drm_ioctl+0x10/0x10 [ 244.322344][T10148] drm_compat_ioctl+0x327/0x460 [ 244.323608][T10148] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 244.325389][T10148] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 244.326841][T10148] __do_fast_syscall_32+0x73/0x120 [ 244.328179][T10148] do_fast_syscall_32+0x32/0x80 [ 244.329414][T10148] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.331044][T10148] RIP: 0023:0xf7fe7579 [ 244.332087][T10148] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 244.337240][T10148] RSP: 002b:00000000f515657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 244.339392][T10148] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01c64a3 [ 244.341416][T10148] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 244.343411][T10148] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 244.345430][T10148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 244.347417][T10148] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.349381][T10148] [ 244.350290][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.465032][T10162] input: syz0 as /devices/virtual/input/input45 [ 245.079609][T10174] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 245.084518][T10175] fuse: Bad value for 'fd' [ 245.185871][T10177] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 245.187958][T10177] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 245.189982][T10177] vhci_hcd vhci_hcd.0: Device attached [ 245.193525][T10180] vhci_hcd: connection closed [ 245.193869][ T9146] vhci_hcd: stop threads [ 245.196278][ T9146] vhci_hcd: release socket [ 245.197386][ T9146] vhci_hcd: disconnect device [ 245.316700][T10185] netlink: 'syz.2.1039': attribute type 10 has an invalid length. [ 245.330276][T10186] FAULT_INJECTION: forcing a failure. [ 245.330276][T10186] name failslab, interval 1, probability 0, space 0, times 0 [ 245.334397][T10186] CPU: 2 UID: 0 PID: 10186 Comm: syz.1.1043 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 245.337422][T10186] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 245.341169][T10186] Call Trace: [ 245.342382][T10186] [ 245.343458][T10186] dump_stack_lvl+0x16c/0x1f0 [ 245.345115][T10186] should_fail_ex+0x497/0x5b0 [ 245.346375][T10186] ? fs_reclaim_acquire+0xae/0x150 [ 245.347766][T10186] should_failslab+0xc2/0x120 [ 245.348973][T10186] __kmalloc_noprof+0xce/0x4f0 [ 245.350165][T10186] ? drm_atomic_state_init+0xe4/0x320 [ 245.351480][T10186] drm_atomic_state_init+0xe4/0x320 [ 245.352778][T10186] ? __kasan_kmalloc+0xaa/0xb0 [ 245.353968][T10186] drm_atomic_state_alloc+0xd3/0x120 [ 245.355247][T10186] drm_atomic_helper_update_plane+0x52/0x400 [ 245.356701][T10186] __setplane_atomic+0x250/0x360 [ 245.357918][T10186] drm_mode_cursor_universal+0x4a7/0xcb0 [ 245.359711][T10186] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 245.361379][T10186] ? __pfx_drm_lease_held+0x10/0x10 [ 245.362721][T10186] ? modeset_lock+0x114/0x6e0 [ 245.363858][T10186] drm_mode_cursor_common+0x30a/0x960 [ 245.365207][T10186] ? hlock_class+0x4e/0x130 [ 245.366406][T10186] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 245.368035][T10186] ? lock_acquire.part.0+0x11b/0x380 [ 245.369423][T10186] ? find_held_lock+0x2d/0x110 [ 245.370688][T10186] drm_mode_cursor_ioctl+0xa6/0xe0 [ 245.372348][T10186] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 245.373783][T10186] ? do_raw_spin_unlock+0x172/0x230 [ 245.375125][T10186] drm_ioctl_kernel+0x1e6/0x3d0 [ 245.376307][T10186] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 245.377724][T10186] ? __might_fault+0x91/0x190 [ 245.379208][T10186] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 245.380770][T10186] ? __might_fault+0xe3/0x190 [ 245.381956][T10186] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 245.383381][T10186] drm_ioctl+0x57e/0xba0 [ 245.384426][T10186] ? __pfx_drm_ioctl+0x10/0x10 [ 245.385635][T10186] drm_compat_ioctl+0x327/0x460 [ 245.386838][T10186] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 245.388147][T10186] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 245.389488][T10186] __do_fast_syscall_32+0x73/0x120 [ 245.390829][T10186] do_fast_syscall_32+0x32/0x80 [ 245.392012][T10186] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 245.393524][T10186] RIP: 0023:0xf7f71579 [ 245.394572][T10186] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 245.399451][T10186] RSP: 002b:00000000f50c557c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 245.401543][T10186] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01c64a3 [ 245.403485][T10186] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.405517][T10186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 245.407412][T10186] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 245.409339][T10186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 245.411366][T10186] [ 245.415706][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 245.506065][T10188] netlink: 4992 bytes leftover after parsing attributes in process `syz.1.1044'. [ 245.571482][T10190] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 245.979796][T10202] fuse: Bad value for 'fd' [ 246.098880][ T39] audit: type=1800 audit(1733870030.390:169): pid=10208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1052" name="file0" dev="9p" ino=40372944 res=0 errno=0 [ 246.105193][T10208] netfs: Couldn't get user pages (rc=-14) [ 246.198266][T10210] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 246.289134][T10218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1054'. [ 246.299805][T10218] sg_write: data in/out 28753/60 bytes for SCSI command 0x0-- guessing data in; [ 246.299805][T10218] program syz.2.1054 not setting count and/or reply_len properly [ 246.371444][T10212] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 246.514058][T10227] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 246.527729][T10228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'. [ 246.640172][T10228] sg_write: data in/out 28753/60 bytes for SCSI command 0x0-- guessing data in; [ 246.640172][T10228] program syz.0.1055 not setting count and/or reply_len properly [ 246.738819][T10232] netlink: 'syz.1.1056': attribute type 10 has an invalid length. [ 247.194628][T10237] FAULT_INJECTION: forcing a failure. [ 247.194628][T10237] name failslab, interval 1, probability 0, space 0, times 0 [ 247.197813][T10237] CPU: 1 UID: 0 PID: 10237 Comm: syz.2.1057 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 247.200431][T10237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.202998][T10237] Call Trace: [ 247.203807][T10237] [ 247.204535][T10237] dump_stack_lvl+0x16c/0x1f0 [ 247.205724][T10237] should_fail_ex+0x497/0x5b0 [ 247.207066][T10237] ? fs_reclaim_acquire+0xae/0x150 [ 247.208322][T10237] should_failslab+0xc2/0x120 [ 247.209574][T10237] __kmalloc_noprof+0xce/0x4f0 [ 247.210767][T10237] ? drm_atomic_state_init+0x17e/0x320 [ 247.212088][T10237] drm_atomic_state_init+0x17e/0x320 [ 247.213377][T10237] ? __kasan_kmalloc+0xaa/0xb0 [ 247.214551][T10237] drm_atomic_state_alloc+0xd3/0x120 [ 247.215822][T10237] drm_atomic_helper_update_plane+0x52/0x400 [ 247.217274][T10237] __setplane_atomic+0x250/0x360 [ 247.218509][T10237] drm_mode_cursor_universal+0x4a7/0xcb0 [ 247.219848][T10237] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 247.221336][T10237] ? __pfx_drm_lease_held+0x10/0x10 [ 247.222632][T10237] ? modeset_lock+0x114/0x6e0 [ 247.223809][T10237] drm_mode_cursor_common+0x30a/0x960 [ 247.225123][T10237] ? hlock_class+0x4e/0x130 [ 247.226252][T10237] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 247.227702][T10237] ? lock_acquire.part.0+0x11b/0x380 [ 247.229003][T10237] ? find_held_lock+0x2d/0x110 [ 247.230254][T10237] drm_mode_cursor_ioctl+0xa6/0xe0 [ 247.231493][T10237] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 247.232897][T10237] ? do_raw_spin_unlock+0x172/0x230 [ 247.234179][T10237] drm_ioctl_kernel+0x1e6/0x3d0 [ 247.235374][T10237] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 247.236812][T10237] ? __might_fault+0x91/0x190 [ 247.237984][T10237] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 247.239295][T10237] ? __might_fault+0xe3/0x190 [ 247.240467][T10237] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 247.241860][T10237] drm_ioctl+0x57e/0xba0 [ 247.242901][T10237] ? __pfx_drm_ioctl+0x10/0x10 [ 247.244083][T10237] drm_compat_ioctl+0x327/0x460 [ 247.245298][T10237] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 247.246612][T10237] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 247.247883][T10237] __do_fast_syscall_32+0x73/0x120 [ 247.249130][T10237] do_fast_syscall_32+0x32/0x80 [ 247.250315][T10237] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.251867][T10237] RIP: 0023:0xf748e579 [ 247.252868][T10237] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.257406][T10237] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 247.259450][T10237] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01c64a3 [ 247.261392][T10237] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.263351][T10237] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.265281][T10237] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 247.267213][T10237] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.269122][T10237] [ 247.269928][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.284022][T10241] fuse: Bad value for 'fd' [ 247.442131][T10260] overlayfs: failed to resolve './file0': -2 [ 247.449308][T10260] netlink: 'syz.1.1066': attribute type 10 has an invalid length. [ 247.449895][T10261] input: syz0 as /devices/virtual/input/input46 [ 247.481341][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1065'. [ 247.486547][T10256] ALSA: mixer_oss: invalid OSS volume 'Y{UDD ' [ 247.492599][T10256] ALSA: mixer_oss: invalid OSS volume 'ߧ4cT󯆩"m!lT.Π' [ 247.495069][T10256] ALSA: mixer_oss: invalid OSS volume 'lg' [ 247.498430][T10256] ALSA: mixer_oss: invalid OSS volume ')nkKi,rWY\ZV?J`G' [ 247.501150][T10256] ALSA: mixer_oss: invalid OSS volume 'kO0$g{pl{y;_ARW' [ 247.503323][T10256] ALSA: mixer_oss: invalid OSS volume '' [ 247.504745][T10256] ALSA: mixer_oss: invalid OSS volume 'sv Fu{Qby>h%w]' [ 247.506681][T10256] ALSA: mixer_oss: invalid OSS volume 'E= v?@48@hL' [ 247.507340][T10264] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 247.507340][T10264] program syz.2.1065 not setting count and/or reply_len properly [ 247.513371][T10256] ALSA: mixer_oss: invalid OSS volume '+?>3Iq0:iq|UDř' [ 247.516369][T10256] ALSA: mixer_oss: invalid OSS volume 'vӷ*xrN0ܗcAdh' [ 247.518720][T10256] ALSA: mixer_oss: invalid OSS volume 'JM %HJ[~S' [ 247.522547][ T39] audit: type=1800 audit(1733870031.810:170): pid=10267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1067" name="file0" dev="9p" ino=40372944 res=0 errno=0 [ 247.530565][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1067'. [ 247.538119][T10267] netfs: Couldn't get user pages (rc=-14) [ 247.556750][T10269] FAULT_INJECTION: forcing a failure. [ 247.556750][T10269] name failslab, interval 1, probability 0, space 0, times 0 [ 247.561501][T10269] CPU: 1 UID: 0 PID: 10269 Comm: syz.3.1068 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 247.564158][T10269] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.567330][T10269] Call Trace: [ 247.568179][T10269] [ 247.568922][T10269] dump_stack_lvl+0x16c/0x1f0 [ 247.570397][T10269] should_fail_ex+0x497/0x5b0 [ 247.571913][T10269] ? fs_reclaim_acquire+0xae/0x150 [ 247.573341][T10269] should_failslab+0xc2/0x120 [ 247.574589][T10269] __kmalloc_cache_noprof+0x68/0x420 [ 247.576266][T10269] ? ww_mutex_lock_interruptible+0x37/0x160 [ 247.578185][T10269] ? ww_mutex_lock_interruptible+0x37/0x160 [ 247.579924][T10269] vkms_plane_duplicate_state+0x45/0x130 [ 247.581641][T10269] drm_atomic_get_plane_state+0x20b/0x590 [ 247.583201][T10269] drm_atomic_helper_update_plane+0x96/0x400 [ 247.584822][T10269] __setplane_atomic+0x250/0x360 [ 247.586273][T10269] drm_mode_cursor_universal+0x4a7/0xcb0 [ 247.588072][T10269] ? __pfx_drm_mode_cursor_universal+0x10/0x10 [ 247.590133][T10269] ? __pfx_drm_lease_held+0x10/0x10 [ 247.591595][T10269] ? modeset_lock+0x114/0x6e0 [ 247.593093][T10269] drm_mode_cursor_common+0x30a/0x960 [ 247.594756][T10269] ? hlock_class+0x4e/0x130 [ 247.595943][T10269] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 247.597470][T10269] ? lock_acquire.part.0+0x11b/0x380 [ 247.598999][T10269] ? find_held_lock+0x2d/0x110 [ 247.600600][T10269] drm_mode_cursor_ioctl+0xa6/0xe0 [ 247.602172][T10269] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 247.603862][T10269] ? do_raw_spin_unlock+0x172/0x230 [ 247.605442][T10269] drm_ioctl_kernel+0x1e6/0x3d0 [ 247.607037][T10269] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 247.608949][T10269] ? __might_fault+0x91/0x190 [ 247.610420][T10269] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 247.611738][T10269] ? __might_fault+0xe3/0x190 [ 247.612986][T10269] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 247.614601][T10269] drm_ioctl+0x57e/0xba0 [ 247.615657][T10269] ? __pfx_drm_ioctl+0x10/0x10 [ 247.616848][T10269] drm_compat_ioctl+0x327/0x460 [ 247.618040][T10269] ? __pfx_drm_compat_ioctl+0x10/0x10 [ 247.619344][T10269] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 247.620658][T10269] __do_fast_syscall_32+0x73/0x120 [ 247.621925][T10269] do_fast_syscall_32+0x32/0x80 [ 247.623136][T10269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 247.624672][T10269] RIP: 0023:0xf7f26579 [ 247.625680][T10269] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 247.630341][T10269] RSP: 002b:00000000f509657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 247.632356][T10269] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c01c64a3 [ 247.634267][T10269] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 247.636170][T10269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 247.638507][T10269] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 247.640985][T10269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 247.643567][T10269] [ 247.644681][ C1] vkms_vblank_simulate: vblank timer overrun [ 247.726051][T10273] fuse: Unknown parameter '0x0000000000000004' [ 247.875626][T10283] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 247.877303][T10283] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 247.879406][T10283] vhci_hcd vhci_hcd.0: Device attached [ 247.883393][T10284] vhci_hcd: connection closed [ 247.885460][ T9146] vhci_hcd: stop threads [ 247.887973][ T9146] vhci_hcd: release socket [ 247.889272][ T9146] vhci_hcd: disconnect device [ 248.667768][ T832] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 248.675645][T10297] binder: 10295:10297 ioctl c0189374 20000000 returned -22 [ 248.684798][T10296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1077'. [ 248.734735][T10302] fuse: Unknown parameter '0x0000000000000004' [ 248.740545][T10299] kvm: vcpu 0: requested 160 ns lapic timer period limited to 200000 ns [ 248.794860][ T39] audit: type=1800 audit(1733870033.080:171): pid=10305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1080" name="file0" dev="9p" ino=40372944 res=0 errno=0 [ 248.802074][T10305] netfs: Couldn't get user pages (rc=-14) [ 248.837795][ T832] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 248.840025][ T832] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.843020][ T832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 248.846498][ T832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 248.849453][ T832] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 248.852856][ T832] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 248.856349][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.860723][ T832] usb 8-1: config 0 descriptor?? [ 248.862572][T10289] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 248.915246][T10310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1081'. [ 248.929951][T10310] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 248.929951][T10310] program syz.2.1081 not setting count and/or reply_len properly [ 249.045263][T10315] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 249.047022][T10315] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 249.049040][T10315] vhci_hcd vhci_hcd.0: Device attached [ 249.051284][T10322] vhci_hcd: connection closed [ 249.051469][ T9156] vhci_hcd: stop threads [ 249.054474][ T9156] vhci_hcd: release socket [ 249.056286][ T9156] vhci_hcd: disconnect device [ 249.098502][T10324] input: syz0 as /devices/virtual/input/input47 [ 249.274057][ T832] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 249.280787][ T832] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 249.291570][ T832] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 249.540022][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.542383][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.555186][ T5979] usb 8-1: USB disconnect, device number 9 [ 249.659996][T10332] block device autoloading is deprecated and will be removed. [ 249.684891][T10331] pim6reg: entered allmulticast mode [ 249.687724][T10331] pim6reg: left allmulticast mode [ 249.902553][T10337] syz.2.1089: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 249.910954][T10337] CPU: 2 UID: 0 PID: 10337 Comm: syz.2.1089 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 249.914349][T10337] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 249.917657][T10337] Call Trace: [ 249.918732][T10337] [ 249.919753][T10337] dump_stack_lvl+0x16c/0x1f0 [ 249.921446][T10337] warn_alloc+0x24d/0x3a0 [ 249.922673][T10337] ? __pfx_warn_alloc+0x10/0x10 [ 249.923983][T10337] ? __get_vm_area_node+0x1b0/0x2f0 [ 249.925735][T10337] ? __get_vm_area_node+0x1dc/0x2f0 [ 249.927113][T10337] __vmalloc_node_range_noprof+0x1105/0x1530 [ 249.928668][T10337] ? kasan_save_track+0x14/0x30 [ 249.930239][T10337] ? __vcalloc_noprof+0x4d/0x80 [ 249.931943][T10337] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 249.934144][T10337] ? __vcalloc_noprof+0x4d/0x80 [ 249.935849][T10337] __vmalloc_noprof+0x6d/0x90 [ 249.937545][T10337] ? __vcalloc_noprof+0x4d/0x80 [ 249.939265][T10337] __vcalloc_noprof+0x4d/0x80 [ 249.940925][T10337] kvm_set_memslot+0xf37/0x13e0 [ 249.942588][T10337] ? kasan_save_track+0x14/0x30 [ 249.944100][T10337] __kvm_set_memory_region+0xe01/0x1580 [ 249.945833][T10337] ? __pfx___kvm_set_memory_region+0x10/0x10 [ 249.947666][T10337] ? __might_fault+0xe3/0x190 [ 249.949202][T10337] kvm_vm_ioctl+0x152e/0x3df0 [ 249.950549][T10337] ? stack_trace_save+0x95/0xd0 [ 249.952078][T10337] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 249.953633][T10337] ? stack_depot_save_flags+0x28/0x9e0 [ 249.955258][T10337] ? hlock_class+0x4e/0x130 [ 249.956615][T10337] ? kasan_save_stack+0x42/0x60 [ 249.958069][T10337] ? kasan_save_stack+0x33/0x60 [ 249.959541][T10337] ? kasan_save_track+0x14/0x30 [ 249.961057][T10337] ? kasan_save_free_info+0x3b/0x60 [ 249.962801][T10337] ? __kasan_slab_free+0x51/0x70 [ 249.964306][T10337] ? kfree+0x14f/0x4b0 [ 249.965362][T10337] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 249.967060][T10337] ? security_file_ioctl_compat+0x9b/0x240 [ 249.968811][T10337] ? __do_compat_sys_ioctl+0x4e/0x2c0 [ 249.970577][T10337] ? __do_fast_syscall_32+0x73/0x120 [ 249.972351][T10337] ? do_fast_syscall_32+0x32/0x80 [ 249.974048][T10337] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.976184][T10337] ? kvm_arch_vm_compat_ioctl+0x2d1/0x480 [ 249.978142][T10337] ? hlock_class+0x4e/0x130 [ 249.979705][T10337] ? mark_lock+0xb5/0xc60 [ 249.981158][T10337] ? __pfx_kvm_arch_vm_compat_ioctl+0x10/0x10 [ 249.983197][T10337] ? __pfx_mark_lock+0x10/0x10 [ 249.984871][T10337] ? find_held_lock+0x2d/0x110 [ 249.986486][T10337] ? tomoyo_path_number_perm+0x298/0x5b0 [ 249.988406][T10337] ? __pfx_lock_release+0x10/0x10 [ 249.990126][T10337] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 249.992065][T10337] ? do_vfs_ioctl+0x513/0x1950 [ 249.993784][T10337] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 249.995514][T10337] kvm_vm_compat_ioctl+0x399/0x440 [ 249.997246][T10337] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 249.999114][T10337] ? __pfx_lock_release+0x10/0x10 [ 250.000792][T10337] ? trace_lock_acquire+0x14e/0x1f0 [ 250.002561][T10337] ? __fget_files+0x206/0x3a0 [ 250.004157][T10337] ? __pfx_kvm_vm_compat_ioctl+0x10/0x10 [ 250.006070][T10337] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 250.007871][T10337] __do_fast_syscall_32+0x73/0x120 [ 250.009673][T10337] do_fast_syscall_32+0x32/0x80 [ 250.011334][T10337] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.013514][T10337] RIP: 0023:0xf748e579 [ 250.014881][T10337] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 250.020817][T10337] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 250.023596][T10337] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000004020ae46 [ 250.026082][T10337] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.028350][T10337] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.030927][T10337] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 250.033304][T10337] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.035694][T10337] [ 250.045775][T10337] Mem-Info: [ 250.051167][T10337] active_anon:4467 inactive_anon:0 isolated_anon:0 [ 250.051167][T10337] active_file:17453 inactive_file:30813 isolated_file:0 [ 250.051167][T10337] unevictable:1768 dirty:358 writeback:0 [ 250.051167][T10337] slab_reclaimable:6281 slab_unreclaimable:58100 [ 250.051167][T10337] mapped:23392 shmem:2388 pagetables:728 [ 250.051167][T10337] sec_pagetables:303 bounce:0 [ 250.051167][T10337] kernel_misc_reclaimable:0 [ 250.051167][T10337] free:48559 free_pcp:1756 free_cma:0 [ 250.075978][T10337] Node 0 active_anon:2204kB inactive_anon:0kB active_file:6576kB inactive_file:0kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:2032kB dirty:84kB writeback:0kB shmem:3816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9784kB pagetables:1184kB sec_pagetables:1124kB all_unreclaimable? yes [ 250.083613][T10337] Node 1 active_anon:15604kB inactive_anon:0kB active_file:63236kB inactive_file:123252kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:91636kB dirty:1348kB writeback:0kB shmem:5740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2740kB pagetables:1696kB sec_pagetables:88kB all_unreclaimable? no [ 250.101847][T10337] Node 0 DMA free:2988kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:312kB inactive_anon:0kB active_file:348kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:100kB local_pcp:44kB free_cma:0kB [ 250.110383][T10337] lowmem_reserve[]: 0 273 0 0 0 [ 250.111639][T10337] Node 0 DMA32 free:24348kB boost:6144kB min:20048kB low:23524kB high:27000kB reserved_highatomic:4096KB active_anon:1816kB inactive_anon:0kB active_file:6228kB inactive_file:0kB unevictable:3536kB writepending:84kB present:1032196kB managed:306308kB mlocked:0kB bounce:0kB free_pcp:1100kB local_pcp:736kB free_cma:0kB [ 250.121337][T10337] lowmem_reserve[]: 0 0 0 0 0 [ 250.122565][T10337] Node 1 DMA32 free:166336kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:15604kB inactive_anon:0kB active_file:63236kB inactive_file:123252kB unevictable:3536kB writepending:1348kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:976kB free_cma:0kB [ 250.130813][T10337] lowmem_reserve[]: 0 0 0 0 0 [ 250.132217][T10337] Node 0 DMA: 84*4kB (UM) 119*8kB (UM) 79*16kB (UM) 16*32kB (UM) 2*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 3192kB [ 250.137904][T10337] Node 0 DMA32: 164*4kB (UMH) 113*8kB (UMEH) 60*16kB (MEH) 144*32kB (UMEH) 54*64kB (UMEH) 23*128kB (UME) 11*256kB (UME) 9*512kB (UME) 4*1024kB (UM) 0*2048kB 0*4096kB = 25048kB [ 250.142600][T10337] Node 1 DMA32: 181*4kB (UME) 440*8kB (UME) 557*16kB (UME) 308*32kB (UME) 392*64kB (UME) 107*128kB (UME) 42*256kB (UME) 35*512kB (UM) 8*1024kB (UM) 5*2048kB (UM) 14*4096kB (UM) = 166244kB [ 250.148671][T10337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.151147][T10337] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.153639][T10337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 250.157672][T10337] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 250.160089][T10337] 50703 total pagecache pages [ 250.161354][T10337] 48 pages in swap cache [ 250.162485][T10337] Free swap = 121728kB [ 250.163587][T10337] Total swap = 124996kB [ 250.164799][T10337] 524155 pages RAM [ 250.166277][T10337] 0 pages HighMem/MovableOnly [ 250.167511][T10337] 206675 pages reserved [ 250.168552][T10337] 0 pages cma reserved [ 250.755257][T10362] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 250.757853][T10362] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 250.761787][T10362] vhci_hcd vhci_hcd.0: Device attached [ 250.816718][T10366] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 250.945468][ T832] vhci_hcd: vhci_device speed not set [ 251.006288][ T832] usb 43-1: new full-speed USB device number 3 using vhci_hcd [ 251.150246][T10369] netlink: 'syz.1.1095': attribute type 10 has an invalid length. [ 251.449187][T10363] vhci_hcd: connection reset by peer [ 251.451424][ T1136] vhci_hcd: stop threads [ 251.452528][ T1136] vhci_hcd: release socket [ 251.454155][ T1136] vhci_hcd: disconnect device [ 251.645684][T10373] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1097'. [ 251.734302][T10373] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 251.734302][T10373] program syz.0.1097 not setting count and/or reply_len properly [ 251.825179][ T39] audit: type=1800 audit(1733870036.110:172): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1099" name="bus" dev="9p" ino=40372956 res=0 errno=0 [ 251.831581][ T39] audit: type=1800 audit(1733870036.120:173): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1099" name="bus" dev="9p" ino=40372956 res=0 errno=0 [ 251.839879][T10379] netfs: Couldn't get user pages (rc=-14) [ 251.992026][T10386] input: syz0 as /devices/virtual/input/input49 [ 252.267120][T10391] ptrace attach of "/syz-executor exec"[5939] was attempted by "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 252.529163][T10403] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 252.553966][ C1] vkms_vblank_simulate: vblank timer overrun [ 252.715750][T10402] netlink: 'syz.1.1105': attribute type 2 has an invalid length. [ 252.719404][T10402] netlink: 'syz.1.1105': attribute type 1 has an invalid length. [ 252.723474][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 252.867395][T10408] netlink: 'syz.3.1106': attribute type 10 has an invalid length. [ 253.226353][T10420] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 253.228731][T10420] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 253.245942][T10420] vhci_hcd vhci_hcd.0: Device attached [ 253.286526][T10423] vhci_hcd: connection closed [ 253.287776][ T1136] vhci_hcd: stop threads [ 253.290176][ T1136] vhci_hcd: release socket [ 253.291479][ T1136] vhci_hcd: disconnect device [ 253.440211][T10433] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1115'. [ 253.459205][T10433] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 253.459205][T10433] program syz.0.1115 not setting count and/or reply_len properly [ 253.470902][T10435] input: syz0 as /devices/virtual/input/input51 [ 253.499089][ T7930] udevd[7930]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 253.502651][ T7930] udevd[7930]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 254.108670][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 254.714183][T10461] netlink: 'syz.0.1122': attribute type 10 has an invalid length. [ 255.016665][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.062206][ T39] audit: type=1326 audit(1733870039.350:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10463 comm="syz.2.1123" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf748e579 code=0x0 [ 255.308046][T10470] fuse: Unknown parameter 'fd0x0000000000000004' [ 255.357778][T10472] overlayfs: missing 'lowerdir' [ 255.409802][ T9156] Bluetooth: hci4: Frame reassembly failed (-84) [ 255.458350][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1130'. [ 255.469788][T10486] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 255.469788][T10486] program syz.1.1130 not setting count and/or reply_len properly [ 256.125769][ T832] vhci_hcd: vhci_device speed not set [ 256.389996][T10501] fuse: Unknown parameter 'fd0x0000000000000004' [ 256.962634][T10512] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 257.178210][T10514] netlink: 'syz.2.1137': attribute type 10 has an invalid length. [ 257.415054][ T5946] Bluetooth: hci0: unexpected event for opcode 0x0804 [ 257.415754][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 257.417675][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 257.531898][T10522] input: syz0 as /devices/virtual/input/input52 [ 257.559571][T10519] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 257.561335][T10519] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 257.563506][T10519] vhci_hcd vhci_hcd.0: Device attached [ 257.765817][ T9] vhci_hcd: vhci_device speed not set [ 257.919190][T10534] fuse: Unknown parameter 'fd0x0000000000000004' [ 257.986376][ T9] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 258.230621][T10545] input: syz0 as /devices/virtual/input/input53 [ 258.233090][T10525] vhci_hcd: connection reset by peer [ 258.235756][ T9159] vhci_hcd: stop threads [ 258.236912][ T9159] vhci_hcd: release socket [ 258.238324][ T9159] vhci_hcd: disconnect device [ 258.396045][T10548] input: syz0 as /devices/virtual/input/input54 [ 258.679198][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1149'. [ 259.016589][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 259.026880][T10559] IPVS: Error joining to the multicast group [ 259.276446][T10574] input: syz0 as /devices/virtual/input/input55 [ 260.030752][T10587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 260.032505][T10587] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 260.034817][T10587] vhci_hcd vhci_hcd.0: Device attached [ 260.047709][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1162'. [ 260.080553][T10592] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 260.080553][T10592] program syz.2.1162 not setting count and/or reply_len properly [ 260.768617][T10590] vhci_hcd: connection closed [ 260.769981][ T1136] vhci_hcd: stop threads [ 260.772383][ T1136] vhci_hcd: release socket [ 260.773580][ T1136] vhci_hcd: disconnect device [ 261.326728][T10607] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 261.459380][T10611] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 261.461150][T10611] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 261.463607][T10611] vhci_hcd vhci_hcd.0: Device attached [ 261.552186][T10620] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 261.635467][ T5979] vhci_hcd: vhci_device speed not set [ 261.695456][ T5979] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 261.979031][T10624] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1168'. [ 262.175510][T10617] vhci_hcd: connection reset by peer [ 262.177150][ T1136] vhci_hcd: stop threads [ 262.178286][ T1136] vhci_hcd: release socket [ 262.195627][ T1136] vhci_hcd: disconnect device [ 262.982519][T10646] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 263.081225][T10647] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 263.082976][T10647] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 263.085522][ T9] vhci_hcd: vhci_device speed not set [ 263.086303][T10647] vhci_hcd vhci_hcd.0: Device attached [ 263.205753][T10653] netlink: 'syz.2.1172': attribute type 10 has an invalid length. [ 263.796416][T10663] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 263.798147][T10663] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 263.800270][T10663] vhci_hcd vhci_hcd.0: Device attached [ 263.819398][T10651] vhci_hcd: connection closed [ 263.826319][ T12] vhci_hcd: stop threads [ 263.828908][ T12] vhci_hcd: release socket [ 263.830098][ T12] vhci_hcd: disconnect device [ 263.977353][ T56] vhci_hcd: vhci_device speed not set [ 264.035459][ T56] usb 43-1: new full-speed USB device number 4 using vhci_hcd [ 264.116763][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 264.629831][T10678] netlink: 'syz.0.1180': attribute type 10 has an invalid length. [ 264.699215][T10664] vhci_hcd: connection reset by peer [ 264.701110][ T9146] vhci_hcd: stop threads [ 264.702391][ T9146] vhci_hcd: release socket [ 264.703730][ T9146] vhci_hcd: disconnect device [ 265.593082][T10707] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 266.348746][T10721] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 266.563009][T10733] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 266.935777][ T5979] vhci_hcd: vhci_device speed not set [ 267.200254][T10744] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 267.358179][T10746] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 267.451260][T10755] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 267.453673][T10755] overlayfs: missing 'lowerdir' [ 267.467545][T10756] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 268.199541][T10766] input: syz0 as /devices/virtual/input/input56 [ 268.332848][T10772] input: syz0 as /devices/virtual/input/input57 [ 268.747319][T10779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1209'. [ 268.778422][T10779] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 268.778422][T10779] program syz.3.1209 not setting count and/or reply_len properly [ 269.166052][ T56] vhci_hcd: vhci_device speed not set [ 269.451368][T10791] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 269.750563][T10801] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 269.752894][T10801] overlayfs: missing 'lowerdir' [ 269.835261][T10800] netlink: 'syz.2.1213': attribute type 10 has an invalid length. [ 269.935209][T10812] input: syz0 as /devices/virtual/input/input58 [ 270.324936][T10825] input: syz1 as /devices/virtual/input/input59 [ 270.377398][ T7916] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz1 [ 271.320706][T10845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1224'. [ 271.363609][T10845] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 271.363609][T10845] program syz.2.1224 not setting count and/or reply_len properly [ 271.618137][T10852] input: syz0 as /devices/virtual/input/input60 [ 271.690247][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1225'. [ 272.210297][T10869] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 272.484455][T10872] netlink: 'syz.2.1229': attribute type 10 has an invalid length. [ 272.733387][T10874] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 272.852081][T10876] bridge0: port 4(vlan3) entered blocking state [ 272.853743][T10876] bridge0: port 4(vlan3) entered disabled state [ 272.855520][T10876] vlan3: entered allmulticast mode [ 272.857366][T10876] vlan3: entered promiscuous mode [ 272.978000][T10879] syzkaller0: entered promiscuous mode [ 272.980039][T10879] syzkaller0: entered allmulticast mode [ 273.055040][T10892] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 273.480859][T10902] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 273.769031][T10906] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1236'. [ 273.961759][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1237'. [ 274.028507][T10915] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 274.028507][T10915] program syz.2.1237 not setting count and/or reply_len properly [ 274.898880][T10926] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 275.095433][ C2] sl0: NETDEV WATCHDOG: CPU: 2: transmit queue 0 timed out 20080 ms [ 275.098190][ C2] sl0: transmit timed out, bad line quality? [ 275.106276][T10934] netlink: 'syz.1.1241': attribute type 10 has an invalid length. [ 275.690977][T10944] netlink: 'syz.0.1244': attribute type 10 has an invalid length. [ 275.812551][T10946] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 276.097105][T10952] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 276.786011][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 276.836050][T10969] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 277.222644][T10972] netlink: 'syz.3.1248': attribute type 10 has an invalid length. [ 277.382258][T10975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1249'. [ 277.398600][T10975] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 277.398600][T10975] program syz.2.1249 not setting count and/or reply_len properly [ 278.819764][T11029] binder: BINDER_SET_CONTEXT_MGR already set [ 278.821489][T11029] binder: 11027:11029 ioctl 4018620d 20000100 returned -16 [ 278.825503][T11033] binder_alloc: binder_alloc_mmap_handler: 11027 20ffd000-21000000 already mapped failed -16 [ 278.830031][T11029] binder_alloc: 11027: binder_alloc_buf, no vma [ 279.090595][T11037] FAULT_INJECTION: forcing a failure. [ 279.090595][T11037] name failslab, interval 1, probability 0, space 0, times 0 [ 279.094746][T11037] CPU: 2 UID: 0 PID: 11037 Comm: syz.3.1262 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 279.098011][T11037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 279.101328][T11037] Call Trace: [ 279.102393][T11037] [ 279.103345][T11037] dump_stack_lvl+0x16c/0x1f0 [ 279.104795][T11037] should_fail_ex+0x497/0x5b0 [ 279.106268][T11037] ? fs_reclaim_acquire+0xae/0x150 [ 279.107861][T11037] should_failslab+0xc2/0x120 [ 279.109343][T11037] __kmalloc_cache_noprof+0x68/0x420 [ 279.110986][T11037] ? do_raw_spin_lock+0x12d/0x2c0 [ 279.112549][T11037] ? create_io_worker+0x49/0x5f0 [ 279.114108][T11037] create_io_worker+0xcc/0x5f0 [ 279.115624][T11037] io_wq_enqueue+0x664/0xb30 [ 279.117091][T11037] ? __pfx_io_wq_enqueue+0x10/0x10 [ 279.118724][T11037] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 279.120567][T11037] ? io_prep_async_work+0x654/0x770 [ 279.122210][T11037] io_queue_iowq+0x232/0x4a0 [ 279.123666][T11037] io_queue_async+0x1e7/0x420 [ 279.125149][T11037] io_submit_sqes+0x177a/0x25f0 [ 279.126705][T11037] __do_sys_io_uring_enter+0xd43/0x1620 [ 279.128448][T11037] ? __fget_files+0x206/0x3a0 [ 279.129953][T11037] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 279.131888][T11037] ? fput+0x67/0x440 [ 279.133153][T11037] ? ksys_write+0x1ba/0x250 [ 279.134605][T11037] ? __pfx_ksys_write+0x10/0x10 [ 279.136153][T11037] __do_fast_syscall_32+0x73/0x120 [ 279.137781][T11037] do_fast_syscall_32+0x32/0x80 [ 279.139318][T11037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 279.141318][T11037] RIP: 0023:0xf7f26579 [ 279.142612][T11037] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 279.148659][T11037] RSP: 002b:00000000f507557c EFLAGS: 00000292 ORIG_RAX: 00000000000001aa [ 279.151269][T11037] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000000003516 [ 279.153749][T11037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.156224][T11037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 279.158701][T11037] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 279.161188][T11037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 279.163690][T11037] [ 279.775005][T11045] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 279.881398][T11047] syz.0.1264 (11047): drop_caches: 2 [ 280.061645][T11051] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 280.494789][T11060] input: syz0 as /devices/virtual/input/input61 [ 281.420882][T11073] input: syz0 as /devices/virtual/input/input62 [ 281.858309][T11078] netlink: 'syz.2.1272': attribute type 2 has an invalid length. [ 281.864565][T11078] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 281.870805][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1272'. [ 282.471051][T11083] input: syz0 as /devices/virtual/input/input63 [ 282.545017][T11084] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 282.547280][T11084] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 282.558640][T11084] vhci_hcd vhci_hcd.0: Device attached [ 282.747925][ T832] vhci_hcd: vhci_device speed not set [ 282.825326][ T832] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 283.239167][T11088] vhci_hcd: connection reset by peer [ 283.261715][ T9156] vhci_hcd: stop threads [ 283.263042][ T9156] vhci_hcd: release socket [ 283.264372][ T9156] vhci_hcd: disconnect device [ 284.103560][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1278'. [ 284.720777][T11117] input: syz0 as /devices/virtual/input/input64 [ 285.137295][T11123] input: syz0 as /devices/virtual/input/input65 [ 285.721795][T11134] overlayfs: failed to resolve './file0': -2 [ 286.165478][ T3227] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 286.274319][T11139] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 286.277533][T11139] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 286.281914][T11139] vhci_hcd vhci_hcd.0: Device attached [ 286.342173][ T3227] usb 7-1: config 0 has no interfaces? [ 286.343882][ T3227] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 286.346236][ T3227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.350411][ T3227] usb 7-1: config 0 descriptor?? [ 286.455460][ T56] vhci_hcd: vhci_device speed not set [ 286.515564][ T56] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 286.609174][T11145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.613601][T11145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.710830][ T5982] usb 7-1: USB disconnect, device number 8 [ 286.894696][T11140] vhci_hcd: connection reset by peer [ 286.896430][ T9146] vhci_hcd: stop threads [ 286.897719][ T9146] vhci_hcd: release socket [ 286.898891][ T9146] vhci_hcd: disconnect device [ 287.029844][T11149] input: syz0 as /devices/virtual/input/input66 [ 287.547988][T11160] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 287.549831][T11160] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 287.551925][T11160] vhci_hcd vhci_hcd.0: Device attached [ 287.735549][ T5982] vhci_hcd: vhci_device speed not set [ 287.795610][ T5982] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 287.975535][ T832] vhci_hcd: vhci_device speed not set [ 288.189190][T11161] vhci_hcd: connection reset by peer [ 288.191413][ T9146] vhci_hcd: stop threads [ 288.194577][ T9146] vhci_hcd: release socket [ 288.197862][ T9146] vhci_hcd: disconnect device [ 288.453552][T11170] input: syz0 as /devices/virtual/input/input67 [ 288.526305][T11172] overlayfs: failed to resolve './file0': -2 [ 288.858070][T11180] netlink: 'syz.0.1297': attribute type 10 has an invalid length. [ 289.167655][T11179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 289.606508][T11186] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 289.767792][T11194] input: syz0 as /devices/virtual/input/input68 [ 289.794888][T11195] sg_write: data in/out 1828745297/60 bytes for SCSI command 0x0-- guessing data in; [ 289.794888][T11195] program syz.3.1303 not setting count and/or reply_len properly [ 290.438330][T11202] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 290.682524][T11206] netlink: 'syz.1.1304': attribute type 10 has an invalid length. [ 290.971360][T11210] overlayfs: failed to resolve './file0': -2 [ 291.476490][T11216] input: syz0 as /devices/virtual/input/input69 [ 291.486444][T11218] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 291.645484][ T56] vhci_hcd: vhci_device speed not set [ 291.734810][T11222] netlink: 'syz.2.1310': attribute type 10 has an invalid length. [ 291.997928][T11224] netlink: 'syz.0.1311': attribute type 10 has an invalid length. [ 292.925570][ T5982] vhci_hcd: vhci_device speed not set [ 293.107206][T11246] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 293.110365][T11246] overlayfs: missing 'lowerdir' [ 293.170285][T11251] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 293.450190][T11257] netlink: 'syz.1.1317': attribute type 10 has an invalid length. [ 294.420437][T11277] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 294.423668][T11277] overlayfs: missing 'lowerdir' [ 294.544097][T11286] overlayfs: failed to resolve './file0': -2 [ 294.605933][ T5982] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 294.756638][ T5982] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.760792][ T5982] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.763426][ T5982] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.768811][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.772440][T11273] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.778201][ T5982] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 294.877783][T11300] netlink: 'syz.3.1329': attribute type 10 has an invalid length. [ 294.989679][ T5979] usb 7-1: USB disconnect, device number 9 [ 295.075476][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 295.209006][T11273] program syz.2.1322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 295.235574][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 295.238088][ T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 295.240586][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 295.243054][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 295.245681][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.248152][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.251546][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 295.253894][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.474092][ T8] usb 6-1: usb_control_msg returned -71 [ 295.475795][ T8] usbtmc 6-1:16.0: can't read capabilities [ 295.481026][ T8] usb 6-1: USB disconnect, device number 13 [ 295.605344][T11320] 9pnet_fd: Insufficient options for proto=fd [ 295.869884][T11336] overlayfs: failed to resolve './file0': -2 [ 295.959085][T11341] overlayfs: failed to resolve './file0': -2 [ 296.036636][T11347] input: syz0 as /devices/virtual/input/input70 [ 296.914621][T11365] kvm: user requested TSC rate below hardware speed [ 297.446000][T11384] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 297.448418][T11384] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 297.451345][T11384] vhci_hcd vhci_hcd.0: Device attached [ 297.488043][T11387] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 297.645740][ T5978] vhci_hcd: vhci_device speed not set [ 297.705532][ T5978] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 297.966116][T11400] netlink: 'syz.3.1350': attribute type 10 has an invalid length. [ 298.280083][T11385] vhci_hcd: connection reset by peer [ 298.282432][ T9146] vhci_hcd: stop threads [ 298.283718][ T9146] vhci_hcd: release socket [ 298.285159][ T9146] vhci_hcd: disconnect device [ 298.710927][T11411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1362'. [ 298.746450][T11411] sg_write: data in/out 28753/60 bytes for SCSI command 0x0-- guessing data in; [ 298.746450][T11411] program syz.1.1362 not setting count and/or reply_len properly [ 298.754089][T11413] input: syz0 as /devices/virtual/input/input73 [ 298.971689][T11423] input: syz0 as /devices/virtual/input/input74 [ 299.737543][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'. [ 299.758170][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1364'. [ 299.806850][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1364'. [ 299.809319][T11434] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 299.811498][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'. [ 300.173432][T11445] autofs: Unknown parameter 'no9 PG!8E8- ŖEeլ( Ir\u}ibT0;my[Gc#>QkbY&#w@/VVL~12lhOh'rK1\kU{!eܚ7 [ 300.173432][T11445] Ue[%#s' [ 300.685803][T11461] input: syz0 as /devices/virtual/input/input76 [ 300.701341][T11439] overlayfs: statfs failed on './file0' [ 301.135687][ T1014] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 301.285445][ T1014] usb 6-1: Using ep0 maxpacket: 32 [ 301.288302][ T1014] usb 6-1: config 0 has no interfaces? [ 301.291624][ T1014] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 301.294663][ T1014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.297024][ T1014] usb 6-1: Product: syz [ 301.298187][ T1014] usb 6-1: Manufacturer: syz [ 301.299423][ T1014] usb 6-1: SerialNumber: syz [ 301.302909][ T1014] usb 6-1: config 0 descriptor?? [ 301.555928][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1376'. [ 301.691632][ T5979] usb 6-1: USB disconnect, device number 14 [ 301.740557][ T39] audit: type=1326 audit(1733870086.030:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.747846][ T39] audit: type=1326 audit(1733870086.040:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=320 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.755111][ T39] audit: type=1326 audit(1733870086.040:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.762583][ T39] audit: type=1326 audit(1733870086.040:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.769843][ T39] audit: type=1326 audit(1733870086.040:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=241 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.777271][ T39] audit: type=1326 audit(1733870086.040:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.784406][ T39] audit: type=1326 audit(1733870086.040:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.791845][ T39] audit: type=1326 audit(1733870086.040:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.799053][ T39] audit: type=1326 audit(1733870086.040:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.806291][ T39] audit: type=1326 audit(1733870086.040:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11490 comm="syz.3.1379" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x7ffc0000 [ 301.896598][T11493] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 302.175033][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 302.178324][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 302.182075][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.184430][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.187507][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.189981][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.192435][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.194895][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.197447][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.199928][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.202435][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.204917][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.210049][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.212582][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.214730][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.217059][ T832] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x0 [ 302.224472][ T832] hid-generic 0000:3000000:0000.0004: hidraw1: HID v0.00 Device [sy] on syz0 [ 302.855549][ T5978] vhci_hcd: vhci_device speed not set [ 303.843360][T11538] fuse: Bad value for 'user_id' [ 303.844679][T11538] fuse: Bad value for 'user_id' [ 303.960354][T11548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1393'. [ 303.982131][T11548] sg_write: data in/out 28753/60 bytes for SCSI command 0x0-- guessing data in; [ 303.982131][T11548] program syz.3.1393 not setting count and/or reply_len properly [ 304.142680][T11557] netlink: 'syz.1.1397': attribute type 4 has an invalid length. [ 305.006840][T11571] 9pnet_fd: Insufficient options for proto=fd [ 305.472421][T11582] tipc: Failed to remove unknown binding: 66,1,1/0:2429786094/2429786096 [ 305.475795][T11582] tipc: Failed to remove unknown binding: 66,1,1/0:2429786094/2429786096 [ 305.642374][T11596] input: syz0 as /devices/virtual/input/input79 [ 306.237132][T11601] input: syz0 as /devices/virtual/input/input80 [ 306.269125][T11603] ebtables: wrong size: *len 264, entries_size 144, replsz 144 [ 306.738943][T11614] can0: slcan on ttyS3. [ 307.036078][T11626] FAULT_INJECTION: forcing a failure. [ 307.036078][T11626] name failslab, interval 1, probability 0, space 0, times 0 [ 307.041611][T11626] CPU: 3 UID: 0 PID: 11626 Comm: syz.1.1411 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 307.044424][T11626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 307.047220][T11626] Call Trace: [ 307.048096][T11626] [ 307.048874][T11626] dump_stack_lvl+0x16c/0x1f0 [ 307.050120][T11626] should_fail_ex+0x497/0x5b0 [ 307.051367][T11626] ? fs_reclaim_acquire+0xae/0x150 [ 307.052703][T11626] should_failslab+0xc2/0x120 [ 307.053954][T11626] __kmalloc_cache_noprof+0x68/0x420 [ 307.055325][T11626] fuse_io_alloc+0x47/0x150 [ 307.056520][T11626] fuse_direct_io+0x31f/0x2580 [ 307.057791][T11626] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 307.059245][T11626] ? trace_lock_acquire+0x14e/0x1f0 [ 307.060611][T11626] ? __pfx_register_lock_class+0x10/0x10 [ 307.062116][T11626] ? fuse_direct_write_iter+0x42c/0x830 [ 307.063552][T11626] ? generic_write_check_limits+0x1f1/0x290 [ 307.065122][T11626] ? __pfx_fuse_direct_io+0x10/0x10 [ 307.066481][T11626] ? __pfx_generic_write_checks+0x10/0x10 [ 307.067970][T11626] fuse_direct_write_iter+0x64f/0x830 [ 307.069379][T11626] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 307.070922][T11626] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 307.072371][T11626] ? rcu_is_watching+0x12/0xc0 [ 307.073665][T11626] ? trace_lock_acquire+0x14e/0x1f0 [ 307.075017][T11626] fuse_file_write_iter+0x66e/0x8c0 [ 307.076375][T11626] vfs_write+0x5ae/0x1150 [ 307.077508][T11626] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 307.078990][T11626] ? __pfx_vfs_write+0x10/0x10 [ 307.080272][T11626] ? __fget_files+0x40/0x3a0 [ 307.081486][T11626] ksys_write+0x207/0x250 [ 307.082633][T11626] ? __pfx_ksys_write+0x10/0x10 [ 307.083906][T11626] __do_fast_syscall_32+0x73/0x120 [ 307.085245][T11626] do_fast_syscall_32+0x32/0x80 [ 307.086510][T11626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.088178][T11626] RIP: 0023:0xf7f71579 [ 307.089254][T11626] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 307.094207][T11626] RSP: 002b:00000000f50e657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 307.096352][T11626] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 307.098385][T11626] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.100434][T11626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.102477][T11626] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 307.104508][T11626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.106554][T11626] [ 307.815569][T11647] ntfs3(nbd0): try to read out of volume at offset 0x0 [ 307.858634][T11647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1416'. [ 308.355616][T11663] input: syz0 as /devices/virtual/input/input81 [ 310.162872][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1429'. [ 310.173989][T11702] netlink: 'syz.1.1430': attribute type 4 has an invalid length. [ 310.217262][T11702] netlink: 'syz.1.1430': attribute type 4 has an invalid length. [ 310.808226][T11719] input: syz0 as /devices/virtual/input/input82 [ 311.586156][T11733] FAULT_INJECTION: forcing a failure. [ 311.586156][T11733] name failslab, interval 1, probability 0, space 0, times 0 [ 311.589498][T11733] CPU: 2 UID: 0 PID: 11733 Comm: syz.3.1439 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 311.592258][T11733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 311.595039][T11733] Call Trace: [ 311.595917][T11733] [ 311.596696][T11733] dump_stack_lvl+0x16c/0x1f0 [ 311.597937][T11733] should_fail_ex+0x497/0x5b0 [ 311.599174][T11733] ? fs_reclaim_acquire+0xae/0x150 [ 311.600523][T11733] should_failslab+0xc2/0x120 [ 311.601762][T11733] __kmalloc_noprof+0xce/0x4f0 [ 311.603019][T11733] ? fuse_io_alloc+0x92/0x150 [ 311.604259][T11733] ? kasan_save_track+0x14/0x30 [ 311.605545][T11733] fuse_io_alloc+0x92/0x150 [ 311.606748][T11733] fuse_direct_io+0x31f/0x2580 [ 311.608009][T11733] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 311.609487][T11733] ? trace_lock_acquire+0x14e/0x1f0 [ 311.610914][T11733] ? __pfx_register_lock_class+0x10/0x10 [ 311.612370][T11733] ? fuse_direct_write_iter+0x42c/0x830 [ 311.613822][T11733] ? generic_write_check_limits+0x1f1/0x290 [ 311.615355][T11733] ? __pfx_fuse_direct_io+0x10/0x10 [ 311.616713][T11733] ? __pfx_generic_write_checks+0x10/0x10 [ 311.618204][T11733] fuse_direct_write_iter+0x64f/0x830 [ 311.619625][T11733] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 311.621213][T11733] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 311.622684][T11733] ? rcu_is_watching+0x12/0xc0 [ 311.623938][T11733] ? trace_lock_acquire+0x14e/0x1f0 [ 311.625336][T11733] fuse_file_write_iter+0x66e/0x8c0 [ 311.626715][T11733] vfs_write+0x5ae/0x1150 [ 311.627861][T11733] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 311.629353][T11733] ? __pfx_vfs_write+0x10/0x10 [ 311.630743][T11733] ? __fget_files+0x40/0x3a0 [ 311.632238][T11733] ksys_write+0x207/0x250 [ 311.633421][T11733] ? __pfx_ksys_write+0x10/0x10 [ 311.634699][T11733] __do_fast_syscall_32+0x73/0x120 [ 311.636035][T11733] do_fast_syscall_32+0x32/0x80 [ 311.637319][T11733] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.638992][T11733] RIP: 0023:0xf7f26579 [ 311.640097][T11733] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 311.645173][T11733] RSP: 002b:00000000f509657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 311.647232][T11733] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 311.649251][T11733] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.651293][T11733] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 311.653340][T11733] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 311.655383][T11733] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.657428][T11733] [ 312.295560][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.296600][T11702] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 313.392271][T11768] input: syz0 as /devices/virtual/input/input83 [ 313.951333][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 313.951344][ T39] audit: type=1326 audit(1733870098.240:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11770 comm="syz.1.1447" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x0 [ 314.070911][T11772] syzkaller0: entered promiscuous mode [ 314.072745][T11772] syzkaller0: entered allmulticast mode [ 314.666675][T11782] tipc: Started in network mode [ 314.668003][T11782] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 314.670081][T11782] tipc: Enabled bearer , priority 0 [ 314.768865][T11791] input: syz0 as /devices/virtual/input/input84 [ 314.962942][T11795] netlink: 'syz.3.1452': attribute type 10 has an invalid length. [ 315.675490][ T832] tipc: Node number set to 10463914 [ 315.869751][T11803] input: syz0 as /devices/virtual/input/input85 [ 316.115829][T11805] Bluetooth: Short BCSP packet [ 316.415284][T11807] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1458'. [ 316.418040][T11807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 316.459227][ T1412] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.020461][T11817] FAULT_INJECTION: forcing a failure. [ 317.020461][T11817] name failslab, interval 1, probability 0, space 0, times 0 [ 317.023543][T11817] CPU: 2 UID: 0 PID: 11817 Comm: syz.2.1461 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 317.026136][T11817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.028728][T11817] Call Trace: [ 317.029558][T11817] [ 317.030288][T11817] dump_stack_lvl+0x16c/0x1f0 [ 317.031436][T11817] should_fail_ex+0x497/0x5b0 [ 317.032621][T11817] ? fs_reclaim_acquire+0xae/0x150 [ 317.033884][T11817] should_failslab+0xc2/0x120 [ 317.035045][T11817] __kmalloc_noprof+0xce/0x4f0 [ 317.036228][T11817] ? kasan_save_track+0x14/0x30 [ 317.037426][T11817] ? fuse_direct_io+0x5b3/0x2580 [ 317.038620][T11817] fuse_direct_io+0x5b3/0x2580 [ 317.039819][T11817] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 317.041236][T11817] ? __pfx_fuse_direct_io+0x10/0x10 [ 317.042542][T11817] ? __pfx_generic_write_checks+0x10/0x10 [ 317.043956][T11817] fuse_direct_write_iter+0x64f/0x830 [ 317.045285][T11817] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 317.046715][T11817] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 317.048113][T11817] ? rcu_is_watching+0x12/0xc0 [ 317.049312][T11817] ? trace_lock_acquire+0x14e/0x1f0 [ 317.050618][T11817] fuse_file_write_iter+0x66e/0x8c0 [ 317.051909][T11817] vfs_write+0x5ae/0x1150 [ 317.052999][T11817] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 317.054413][T11817] ? __pfx_vfs_write+0x10/0x10 [ 317.055592][T11817] ? __fget_files+0x40/0x3a0 [ 317.056731][T11817] ksys_write+0x207/0x250 [ 317.057837][T11817] ? __pfx_ksys_write+0x10/0x10 [ 317.059086][T11817] __do_fast_syscall_32+0x73/0x120 [ 317.060389][T11817] do_fast_syscall_32+0x32/0x80 [ 317.061608][T11817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.063187][T11817] RIP: 0023:0xf748e579 [ 317.064208][T11817] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 317.069087][T11817] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 317.071208][T11817] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 317.073204][T11817] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.075196][T11817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.077299][T11817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 317.079204][T11817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.081127][T11817] [ 317.089908][T11817] ------------[ cut here ]------------ [ 317.091329][T11817] kernel BUG at lib/iov_iter.c:626! [ 317.097676][T11817] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 317.099479][T11817] CPU: 2 UID: 0 PID: 11817 Comm: syz.2.1461 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 317.102173][T11817] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 317.104870][T11817] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 317.106296][T11817] Code: 89 e6 48 c7 c7 c0 1c 90 8e e8 49 db 31 00 e9 b1 fd ff ff e8 8f 44 65 fd eb 95 e8 b8 44 65 fd e9 46 fb ff ff e8 de bd 02 fd 90 <0f> 0b 48 8b 3c 24 e8 a2 44 65 fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 317.111088][T11817] RSP: 0018:ffffc9000679f948 EFLAGS: 00010293 [ 317.112566][T11817] RAX: 0000000000000000 RBX: 0000000000000062 RCX: ffffffff84967c00 [ 317.114546][T11817] RDX: ffff888022d64880 RSI: ffffffff84968012 RDI: 0000000000000001 [ 317.116534][T11817] RBP: ffffc9000679fd88 R08: 0000000000000001 R09: 0000000000000000 [ 317.118563][T11817] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000 [ 317.120599][T11817] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888023622600 [ 317.122540][T11817] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5166b40 [ 317.124811][T11817] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 317.126516][T11817] CR2: 00005648d31de000 CR3: 0000000012568000 CR4: 0000000000352ef0 [ 317.128563][T11817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.130597][T11817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.132538][T11817] Call Trace: [ 317.133363][T11817] [ 317.134094][T11817] ? die+0x31/0x80 [ 317.135024][T11817] ? do_trap+0x232/0x430 [ 317.136033][T11817] ? iov_iter_revert+0x533/0x5a0 [ 317.137258][T11817] ? iov_iter_revert+0x533/0x5a0 [ 317.138467][T11817] ? do_error_trap+0xf4/0x230 [ 317.139655][T11817] ? iov_iter_revert+0x533/0x5a0 [ 317.140892][T11817] ? handle_invalid_op+0x34/0x40 [ 317.142089][T11817] ? iov_iter_revert+0x533/0x5a0 [ 317.143297][T11817] ? exc_invalid_op+0x2e/0x50 [ 317.144416][T11817] ? asm_exc_invalid_op+0x1a/0x20 [ 317.145822][T11817] ? iov_iter_revert+0x120/0x5a0 [ 317.147082][T11817] ? iov_iter_revert+0x532/0x5a0 [ 317.148353][T11817] ? iov_iter_revert+0x533/0x5a0 [ 317.149630][T11817] ? iov_iter_revert+0x532/0x5a0 [ 317.150898][T11817] fuse_direct_io+0xf0e/0x2580 [ 317.152088][T11817] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 317.153543][T11817] ? __pfx_fuse_direct_io+0x10/0x10 [ 317.154805][T11817] ? __pfx_generic_write_checks+0x10/0x10 [ 317.156200][T11817] fuse_direct_write_iter+0x64f/0x830 [ 317.157540][T11817] ? __pfx_fuse_direct_write_iter+0x10/0x10 [ 317.159003][T11817] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 317.160365][T11817] ? rcu_is_watching+0x12/0xc0 [ 317.161543][T11817] ? trace_lock_acquire+0x14e/0x1f0 [ 317.162804][T11817] fuse_file_write_iter+0x66e/0x8c0 [ 317.164085][T11817] vfs_write+0x5ae/0x1150 [ 317.165154][T11817] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 317.166649][T11817] ? __pfx_vfs_write+0x10/0x10 [ 317.167861][T11817] ? __fget_files+0x40/0x3a0 [ 317.169014][T11817] ksys_write+0x207/0x250 [ 317.170061][T11817] ? __pfx_ksys_write+0x10/0x10 [ 317.171270][T11817] __do_fast_syscall_32+0x73/0x120 [ 317.172830][T11817] do_fast_syscall_32+0x32/0x80 [ 317.174365][T11817] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 317.175931][T11817] RIP: 0023:0xf748e579 [ 317.176948][T11817] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 317.181618][T11817] RSP: 002b:00000000f516657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 317.183648][T11817] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 317.185631][T11817] RDX: 0000000000000062 RSI: 0000000000000000 RDI: 0000000000000000 [ 317.187554][T11817] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 317.189456][T11817] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 317.191397][T11817] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 317.193356][T11817] [ 317.194136][T11817] Modules linked in: [ 317.195440][T11817] ---[ end trace 0000000000000000 ]--- [ 317.196933][T11817] RIP: 0010:iov_iter_revert+0x533/0x5a0 [ 317.198357][T11817] Code: 89 e6 48 c7 c7 c0 1c 90 8e e8 49 db 31 00 e9 b1 fd ff ff e8 8f 44 65 fd eb 95 e8 b8 44 65 fd e9 46 fb ff ff e8 de bd 02 fd 90 <0f> 0b 48 8b 3c 24 e8 a2 44 65 fd e9 97 fb ff ff 48 8b 7c 24 08 e8 [ 317.203196][T11817] RSP: 0018:ffffc9000679f948 EFLAGS: 00010293 [ 317.204758][T11817] RAX: 0000000000000000 RBX: 0000000000000062 RCX: ffffffff84967c00 [ 317.206833][T11817] RDX: ffff888022d64880 RSI: ffffffff84968012 RDI: 0000000000000001 [ 317.208841][T11817] RBP: ffffc9000679fd88 R08: 0000000000000001 R09: 0000000000000000 [ 317.210802][T11817] R10: 0000000000000000 R11: 0000000000000002 R12: 0000000000000000 [ 317.212785][T11817] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888023622600 [ 317.214800][T11817] FS: 0000000000000000(0000) GS:ffff88802b600000(0063) knlGS:00000000f5166b40 [ 317.217161][T11817] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 317.218893][T11817] CR2: 00005648d31de000 CR3: 0000000012568000 CR4: 0000000000352ef0 [ 317.220896][T11817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.222912][T11817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.224854][T11817] Kernel panic - not syncing: Fatal exception [ 317.230725][T11817] Kernel Offset: disabled [ 317.231797][T11817] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:35:01 Registers: info registers vcpu 0 CPU#0 RAX=0000000000ce725d RBX=0000000000000000 RCX=ffffffff8b19d7a9 RDX=0000000000000000 RSI=ffffffff8b4cd180 RDI=ffffffff8bb156e0 RBP=fffffbfff1b52ef8 RSP=ffffffff8da07e20 R8 =0000000000000001 R9 =ffffed1005686fed R10=ffff88802b437f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8da977c0 R14=ffffffff901cc310 R15=0000000000000000 RIP=ffffffff8b19eb8f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000ffea1ccc CR3=0000000012936000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=1ffffffff2ccebda RBX=ffffffff96991c98 RCX=ffffffff81756f2c RDX=00000000000010d8 RSI=00000000000000a7 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc9000cfa7660 R8 =ffffffff933bf102 R9 =000000000004ebc1 R10=ffffffff9699411f R11=0000000000000001 R12=ffffffff96675ed0 R13=000000000004ebb8 R14=ffffffff93f77008 R15=dffffc0000000000 RIP=ffffffff81756e03 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000565b64c0 CR3=0000000012568000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffea00014336c0 RCX=ffffffff81e903c0 RDX=1ffffd40002866d9 RSI=ffffffff81e903ee RDI=ffffea00014336c8 RBP=ffffea00014336c0 RSP=ffffc900030d7520 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000003 R12=ffffea00014336c0 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e90413 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f96cf0fdd00 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005648d31cb000 CR3=0000000049f12000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=46232cb846232cb8 46232cb846232cb8 46232cb846232cb8 46232cb846232cb8 46232cb846232cb8 46232cb846232cb8 46232cb846232cb8 46232cb846232cb8 ZMM22=fb78d706fb78d706 fb78d706fb78d706 fb78d706fb78d706 fb78d706fb78d706 fb78d706fb78d706 fb78d706fb78d706 fb78d706fb78d706 fb78d706fb78d706 ZMM23=f7aebe9cf7aebe9c f7aebe9cf7aebe9c f7aebe9cf7aebe9c f7aebe9cf7aebe9c f7aebe9cf7aebe9c f7aebe9cf7aebe9c f7aebe9cf7aebe9c f7aebe9cf7aebe9c ZMM24=3bfc477c3bfc477c 3bfc477c3bfc477c 3bfc477c3bfc477c 3bfc477c3bfc477c 3bfc477c3bfc477c 3bfc477c3bfc477c 3bfc477c3bfc477c 3bfc477c3bfc477c ZMM25=db2825b0db2825b0 db2825b0db2825b0 db2825b0db2825b0 db2825b0db2825b0 db2825b0db2825b0 db2825b0db2825b0 db2825b0db2825b0 db2825b0db2825b0 ZMM26=a0542feda0542fed a0542feda0542fed a0542feda0542fed a0542feda0542fed a0542feda0542fed a0542feda0542fed a0542feda0542fed a0542feda0542fed ZMM27=e722ced1e722ced1 e722ced1e722ced1 e722ced1e722ced1 e722ced1e722ced1 e722ced1e722ced1 e722ced1e722ced1 e722ced1e722ced1 e722ced1e722ced1 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=d10a0000d10a0000 d10a0000d10a0000 d10a0000d10a0000 d10a0000d10a0000 d10a0000d10a0000 d10a0000d10a0000 d10a0000d10a0000 d10a0000d10a0000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=1ffff92000f1eea3 RCX=ffffffff817636c9 RDX=1ffffffff1bb7510 RSI=ffffffff8b4cd440 RDI=ffffffff8bb156e0 RBP=ffffffff901cf614 RSP=ffffc900078f7508 R8 =0000000000000000 R9 =fffffbfff2039862 R10=ffffffff901cc317 R11=0000000000000003 R12=ffffffff8ddba880 R13=0000000000000008 R14=ffff888021c6c880 R15=ffffc900078f7a98 RIP=ffffffff817637a7 RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020003000 CR3=0000000012936000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000