last executing test programs: 6.699210642s ago: executing program 0 (id=6304): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00200006001103000000a71764fe1a7b4d000000000000000f0180e8"], 0x0, 0x3a}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xfff7fffe}, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) openat$cgroup_ro(r3, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000088010380080002000500000004000100060004004baa000004000100080002000300000000010380300001800400030005000200000000000f000203b20692b9b80a022b2d2e00000400030008000100090000000400030008000180040003000c000180080001004090000004000180980001800400030004000300040003007a0002000525004baf13d79c9792863820112fc4d72ab4aa507490e3a220b51aa9e45c1fe4b74a51e150e46987f205c15a5d63d0451b59cfb1bb9f15cbf198c991d66a4bd660e259192f13414618d27b400747af399ecac192925195b25acc85a20a08f50a21701f96213d55e5bd00000000000000000000000000000c00020073797a5f74756e000c0001800400030004000300100001800400030008000100ba0d000059000400b655e94a180859f61b491369027becc67bdab259d226e2b950c885ddf126c7392f166407e22835c564094c925dacfc9e2294694503c71975845908e6c07b9dff61fab09bb80267a7beb7ad491810decac1ec300574000000080002"], 0x1b4}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r8, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r9, &(0x7f0000000540), 0xfffffdd8) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) 6.250248918s ago: executing program 0 (id=6307): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) r0 = socket(0x29, 0x2, 0x0) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffc) getegid() ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000b00)={'ip6_vti0\x00', &(0x7f0000000a80)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x0, 0x4}}) sendmsg$nl_route(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=@mpls_delroute={0x2c, 0x19, 0x0, 0x70bd26, 0x25dfdbfe, {0x1c, 0x14, 0x14, 0x7, 0xff, 0x3, 0xff, 0x4}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xf}, @RTA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0xfc}, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000740)) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000280)={[{0x2dc, 0x0, 0x0, 0x4, 0x2, 0x0, 0x40, 0x59, 0xa, 0x9, 0x7, 0x8, 0x8000000000000000}, {0x0, 0x0, 0x7, 0x0, 0x4, 0x1, 0x0, 0x8, 0x0, 0x5, 0x8, 0x1, 0x6}, {0xd550, 0x7, 0xc, 0x3, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0xb}], 0x6}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) 5.880540742s ago: executing program 1 (id=6308): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) syz_open_dev$I2C(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r2, r5, &(0x7f0000000100), 0x100000000010001) write(r2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 5.250276045s ago: executing program 0 (id=6310): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1, 0x2, 0x2, 0x1901, 0x1, 0x1adf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000140)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs$userns(0x0, &(0x7f00000002c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) 5.03878187s ago: executing program 1 (id=6311): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r2, 0x40600) fcntl$setstatus(r2, 0x4, 0x186c00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x218, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000580)={0xe6, "93c531801eba4bd2a83333d2104ec0852f7c61981266f02bc054052b7b462855e58434366a4438ddf08c3128acd528865ca40b07662dc280e736461c25eb0de98b382b06cfc9283fb46f9b19e30ecc3d8dc3e92a5fb352d29c07767c811056ce62956e59cc09afc67442541eb4b76d866276588d4ef98660ae3966c0a96ca865b4a82e908196e4e789025bd8726eab3edf543762781726d8ba82ffa42ce9c2044b0285d94a865514b1071437800c771a5f1afce2439593120aed374836ce6ccebbfb5350e65351e69f71745eb2c46b9aff039f14d9497962b62e556771bda6b78c4ff17643ca"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f0000001100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000005d40)={{0x0, 0x0, 0x8, 0x281d, 0x5, 0x2, 0x8, 0xb65, 0x7, 0x9, 0x3, 0xf576, 0xc, 0x3, 0x179e}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000006d40)={r6, r7, "92521d00d19ffa8d89d5e300000000000027c04d7d2fe2f07ba0d3985b54ac5426feaa2e86d2a97193418d1458b0e56996fa0cea1b6eabbf4b3e5da52ccc9973214d5fbd0850a075d67951ec66447244b03911d5f72163d3e5a70d56f3b1bd0ef723fc8aff983f03b70c96f47714cd7ae10c2b68873b100155cb4302845fa9c196086aa1ff31551492978779aa7a6a7133fd6a0fbb2fe8b2563167b5c07505fc4f4ca5172e9118245080206e44b5a686fb54c555bc345f95713a04ddf59c0db6e570a8cfd1733d1c2eb6cadb2df7ffa2204585073f306c448505e0c02a06bf23d1aa72a539c4baf2fbd60a64952ca680cb3c21040a00", "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"}) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r8, 0x4}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r8, 0x0, 0x1}) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1b) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e800000011000187abd78d8aea9018b7fc31cc06ed61801184ae35a6d8a24208ea3aacc2d1ccea4efd2bdc4bf337fd43dac72295c3921d06a6a3506da0ba48b86f39e3a49185f98decc333ea3e001fc5ebe29db8722bb6f1ff718ecbe3d2bcd1a63a24038438a04a2d87cc3f8460439de59c469588195355e01399599f0f672a3bde2db3a5342bc18eb9b8994afe606d"], 0xe8}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0x80000001, 0x2f, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0xffffffff, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ec0)={'ip_vti0\x00', &(0x7f0000005c00)={'gre0\x00', 0x0, 0x20, 0x7800, 0x5, 0x8, {{0x28, 0x4, 0x2, 0x0, 0xa0, 0x65, 0x0, 0x28, 0x2d, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xd0, 0x3, 0x6, [{@broadcast, 0x8}, {@loopback, 0x7fffffff}, {@remote, 0x3f}]}, @generic={0x82, 0xa, "21633dc499889f7d"}, @timestamp_prespec={0x44, 0x4, 0xbb, 0x3, 0x1}, @timestamp_prespec={0x44, 0x4c, 0xb2, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xd}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9f}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x20}, {@broadcast, 0x6e}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x8}, {@multicast1, 0x10001}, {@multicast1, 0xfffffffc}]}, @ssrr={0x89, 0xb, 0x0, [@multicast2, @private=0xa010101]}, @rr={0x7, 0xb, 0xc1, [@dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010102]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r10, 0x25, 0x0, @val=@tcx}, 0x40) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000ac0)) 4.74044637s ago: executing program 3 (id=6312): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2db, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000200)) r3 = syz_clone(0x58060200, &(0x7f0000000080)="91105cff112598770cbc02e2056ded52e791af63", 0x14, &(0x7f0000000240), &(0x7f0000000440), &(0x7f0000000480)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) writev(r5, &(0x7f0000000600)=[{&(0x7f0000000280)="f5", 0x1}], 0x1) r6 = socket$inet6(0xa, 0x0, 0x0) r7 = dup2(r6, r6) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000740)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc, &(0x7f0000001c00)=[{&(0x7f0000002000)={0x730, 0x1d, 0x2f5d9893fcf60acf, 0x70bd25, 0x25dfdbfc, "", [@generic="5b6453b468c71ef6c3b448af428a12cfdf846d91f7a2f69f72be98b6fdb518e9376f987c585650af30d791acef37771e41d3573e11d82cc7f402c18e1422badbf37b5d945e409a779848b72f63740910f05878dd4ea96faa071ae342e24245824346115a4e2d404134", @generic="f07e465757e43fe456c4fc2a3c4dcf03ed3c428566b88c1f21bff061b082f60fc6aa83bb8757cce0678829e5cdfa3476ffd937437183e10ed36125908a0ddcec13e0ffe3938bc6653d11069591a5a6d19a5b22c6c1f200f42e", @typed={0x4, 0x118}, @generic="87928ae739e9175c940749ba8fa9f4cebfd85882e2da31b4808bf5a5d89a9957f47850edbcbd859c209e63b43a41b6aeb2932159f9b4e1005310f5387f5ee2fe5fa67e5569bd287d37a42e6e9a0e3ac71a7b3ebf1968960396551ff2c6dbea2f4edd955e5749aa57f85616f89be3307f742bf65615f5726611a853eea81f5d37016b0aeff7484ab7b989d9c5efb50c38da27bb05bcc6af4652ce6bf242838064c2dc2962a7ebe9ccb2c78debe69f8ae94df08b402fe37cec6c49c0db2dec6f23e5298bf8715489d1025acc0e798fd8d8d1b98ffc976226613f704b027845e2", @generic="3b9364e43230af9eb0abdaf8dab307e3e5721da87ef1ef55ca1a53ffcc22e78fb96ce8b9fa18409ec0febb99fae8d59cc12e7e1076623e7d278d405527985971b5645b4eeb86e9fd8b94bb1d97470814e7e893355d95ac09d832c2fa35d5f1e5bf7c9dccc495418950f4606c1bbca952606d85cf27843e17eab9afe1beff80a5430af84d87dbcacae1dd6cd198", @nested={0x131, 0x5c, 0x0, 0x1, [@generic="4abfdbde97de2915a2895ececb645cbcb6c61521eb491b4c790a18293b271bd168e6557ef772ddb9bbd5afe6b6ea4bc4489333b13b5389189a1e092a9f09069fc413677eeb0e7f9f62eabe6f67c9de1e1bc863076b9c58ee6d7b65792a7a371ab7e83adff3b4fc723fdce569a750ca9a30b986160db6e82c11ab3c8914ef820770d6221700d6e6d2af602ee4a97b75ebd943607ca5dd9e80176c7481700d7f2787e47ec8e30a12c107b654e8e5208bfbee66e6b1a5355ec8455b317e11af62c9a6c1b229ecaee68144b6fb1f88acfd0778ad2761448db3c932d2c8faf3dac69bc04c4ba3", @generic="99569d2bbb8b88d17963a3b07ed7d82825e52a010766c070ba7706288c13132bf29a7aa83650ed6f4926006e8e72b83822c98489b2dec09ddb", @typed={0xa, 0xa0, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @typed={0x4, 0xe8}]}, @nested={0x192, 0x124, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0xde}, @typed={0xa, 0x2b, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @generic="db69a6fac070078b1716b52b4c9a2e6a57a3d8486745a630d510d5a13e77dc3c1bf8b75fbd4f817207aa242d17945831230440d001d641e0c8c2ad778be11cc25a3dc28075ba0cd221042ac2a7eb7452c6510644cf0ef0fefa9c822ceb0999b3d98134bb3421401062b8aacdff6a38b31612cf8a3c09f08c3d8373d0b1ea05f2542cd70f4d30a1fafcbf28f7105440291f32445bd65f743235d6ef8e19cb3b2eb5fe", @typed={0xcb, 0xc8, 0x0, 0x0, @binary="66b82445979ea22e153d402b44a92da3101eb249e338ce85c0c5aea7eb78f6ffbc909a4b605ed32abad3f7071df3a31c3474786e4d539bebaf8ec2055a4fe16e461ed5a80e24421887e568758ee8d6d92283d78ca05162599c7c4fb2ae212617f757419f7c0d78ab7f862b7900749bb4630c89736b3c50d2e2fe1f428b3a1b68f21457d3e0f23fb0047ee446870996bfe522cb53bdc7e70f8c290dda6ee900a0d09fcacb14e5977591f3a4d06458a75167ea3ea09467c175ec8f7e1209f7ae5b1618db6066b283"}]}, @nested={0x142, 0x55, 0x0, 0x1, [@typed={0x4, 0xff}, @generic="df877c4075241798013e3098df6bbc1aed27fb68a9b7890ca501ca764a93d9a3a301c22ec27fecb24f383287e9471c79073d62255645b1936381", @generic="eac3cd9406d4ea6b5daef9b878141c9ce7a01505e314228df7dd6d8d43bacfc9d254a2a77428612511c0b9519f896d76350dfafdc5031fe0d140b4264ec998333c0e6b3e862cc87b2d1abbad7323dca08163e460a35ce5d798a326540ca490663da3428c2e5673973edbdb358f49a17673bba4f076c266cfb69974884edeb093ec1405c10e9057ff2df47fb0ec27514074300437c1ba2c4ffc6792be038bd2fca9aba64dbde30ac848f94250f6f692f6e75e9e344c28ef9fe0cf51024a9d2c1f77962839aa4ba8b7c88b33d6e6103ef75601f884", @generic="c7e5ae77035d5cce00c7ed69c7accb235fd85be81f7f4fdd6f0a6ab32f8b008b", @typed={0xa, 0x1e, 0x0, 0x0, @str='\'!\'l-\x00'}]}, @generic="98ecb8482294ae47ed2cdac04cceec45e3f3f6c08ca7a682ddd24f930712c963564e12cca8e39eafd9dcd4b44bbc943d4eb9dc8ac7672e12ae009577bf62d3f12a4e5db1f72423a8cdf9f8c4950ee9228de41bc04e5143b26f1b93c7ed6aa2c3486d4f56fabe581e6c333c27970106475ebe361d35aa41ced3282fe904db0fdb46a5b924d6e6d85243ac0870c5d4559f00a9095afcb0f2d5bcbe8d17e9fbad67a6c19f53b3476f8b98321092c02301058932fdf59786930d16adc8efd57a8b7cc2081103fa6b876b85f4a57d7b6344440c008ca6021d0f8cebc88f37ddae7aad19"]}, 0x730}, {&(0x7f0000000bc0)={0x1014, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x1004, 0x64, 0x0, 0x0, @binary="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"}]}, 0x1014}], 0x2, &(0x7f0000001ec0)=[@cred={{0x18, 0x1, 0x2, {0x0, r8, 0xee01}}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r3, r8}}}, @cred={{0x18, 0x1, 0x2, {0x0, r8, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r0, r8}}}, @rights={{0x10, 0x1, 0x1, [r9]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r9, r1, r6, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r0}}}], 0xc4, 0x20000000}, 0x40800) write$tun(r9, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff83d40101800e88a800008100000086dd604d462800101100fc02000000000000eaffffffffffffffff02000000000000000000000000000100000000001090780258e50000000000"], 0x4e) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 4.269542927s ago: executing program 2 (id=6314): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000600), 0x101441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x23, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xa2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xb, 0xfe, 0x0, @SEQ_NOTEON=@note=0x2}) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000080)={@local, r10}, 0x14) sendmmsg$inet6(r9, &(0x7f0000001740)=[{{&(0x7f0000000380)={0xa, 0x0, 0xf5, @remote}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 4.26874413s ago: executing program 1 (id=6315): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00200006001103000000a71764fe1a7b4d000000000000000f0180e8"], 0x0, 0x3a}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0xfff7fffe}, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r5}}, 0x18) openat$cgroup_ro(r3, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001980)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1b4}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000340)) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) readv(r8, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r9, &(0x7f0000000540), 0xfffffdd8) r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0) 3.810255352s ago: executing program 3 (id=6316): unshare(0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) open$dir(0x0, 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r4, 0x127a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x6, 0x0, 0x0, r1, 0x3, '\x00', r3, r4, 0x4, 0x5, 0x2, 0xb}, 0x48) rmdir(&(0x7f0000000040)='./control\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b706000000000000850000000f000000bf0900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="0a000000010000", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xe, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xb}, @exit, @generic={0x6, 0x0, 0x5, 0x7, 0x400}, @map_val={0x18, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x14, r9, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x2, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r4, r7, r5, 0xffffffffffffffff, r5], 0x0, 0x10, 0xffffff10}, 0x90) 3.4794194s ago: executing program 1 (id=6317): openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000005b80)=[{{&(0x7f00000030c0)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@hopopts={{0x14}}], 0x14}}], 0x1, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.15697865s ago: executing program 2 (id=6318): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) sendfile(r1, r2, &(0x7f0000000100), 0x100000000010001) close_range(r0, 0xffffffffffffffff, 0x0) 3.104721623s ago: executing program 2 (id=6319): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ce8000/0x2000)=nil, 0x930, 0x0, 0x12, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x46201000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000000000008001643d", @ANYRES16=r4, @ANYBLOB=',\x00']) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, 0x0, &(0x7f0000000180)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000005380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0xffffffffffffffff, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x101, 0x8001, 0x24c, 0x0, 0x0, 0x7, 0x2, 0xc000, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3327], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r9 = dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) 2.870234452s ago: executing program 3 (id=6320): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x72, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000600), 0x101441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x23, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20014080}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xa2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000080)={@local, r9}, 0x14) sendmmsg$inet6(r8, &(0x7f0000001740)=[{{&(0x7f0000000380)={0xa, 0x0, 0xf5, @remote}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 2.770175865s ago: executing program 0 (id=6321): openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x80800) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000005b80)=[{{&(0x7f00000030c0)={0xa, 0x4e23, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=[@hopopts={{0x14}}], 0x14}}], 0x1, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r2, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.928816667s ago: executing program 3 (id=6322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read(r3, &(0x7f0000000000), 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, 0x45c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000011c0)={&(0x7f0000000940)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x2, {{0x7, 0x4}, {0x0}, 0x0, 0x27}}], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r9 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000200)=0x6) syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r9, 0x381b, 0x0, 0x0, 0x0, 0x0) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.604223864s ago: executing program 3 (id=6323): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r2, 0x40600) fcntl$setstatus(r2, 0x4, 0x186c00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x0, 0x218, 0x0, 0x0) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, &(0x7f0000000580)={0xe6, "93c531801eba4bd2a83333d2104ec0852f7c61981266f02bc054052b7b462855e58434366a4438ddf08c3128acd528865ca40b07662dc280e736461c25eb0de98b382b06cfc9283fb46f9b19e30ecc3d8dc3e92a5fb352d29c07767c811056ce62956e59cc09afc67442541eb4b76d866276588d4ef98660ae3966c0a96ca865b4a82e908196e4e789025bd8726eab3edf543762781726d8ba82ffa42ce9c2044b0285d94a865514b1071437800c771a5f1afce2439593120aed374836ce6ccebbfb5350e65351e69f71745eb2c46b9aff039f14d9497962b62e556771bda6b78c4ff17643ca"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81e8943c, &(0x7f0000001100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000005d40)={{0x0, 0x0, 0x8, 0x281d, 0x5, 0x2, 0x8, 0xb65, 0x7, 0x9, 0x3, 0xf576, 0xc, 0x3, 0x179e}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000006d40)={r6, r7, "92521d00d19ffa8d89d5e300000000000027c04d7d2fe2f07ba0d3985b54ac5426feaa2e86d2a97193418d1458b0e56996fa0cea1b6eabbf4b3e5da52ccc9973214d5fbd0850a075d67951ec66447244b03911d5f72163d3e5a70d56f3b1bd0ef723fc8aff983f03b70c96f47714cd7ae10c2b68873b100155cb4302845fa9c196086aa1ff31551492978779aa7a6a7133fd6a0fbb2fe8b2563167b5c07505fc4f4ca5172e9118245080206e44b5a686fb54c555bc345f95713a04ddf59c0db6e570a8cfd1733d1c2eb6cadb2df7ffa2204585073f306c448505e0c02a06bf23d1aa72a539c4baf2fbd60a64952ca680cb3c21040a00", "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"}) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r8, 0x4}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r8, 0x0, 0x1}) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x1b) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e800000011000187abd78d8aea9018b7fc31cc06ed61801184ae35a6d8a24208ea3aacc2d1ccea4efd2bdc4bf337fd43dac72295c3921d06a6a3506da0ba48b86f39e3a49185f98decc333ea3e001fc5ebe29db8722bb6f1ff718ecbe3d2bcd1a63a24038438a04a2d87cc3f8460439de59c469588195355e01399599f0f672a3bde2db3a5342bc18eb9b8994afe606d"], 0xe8}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'ip6_vti0\x00', &(0x7f0000000c80)={'ip6tnl0\x00', 0x0, 0x2f, 0x8, 0x4, 0x80000001, 0x2f, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x8000, 0xffffffff, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ec0)={'ip_vti0\x00', &(0x7f0000005c00)={'gre0\x00', 0x0, 0x20, 0x7800, 0x5, 0x8, {{0x28, 0x4, 0x2, 0x0, 0xa0, 0x65, 0x0, 0x28, 0x2d, 0x0, @loopback, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xd0, 0x3, 0x6, [{@broadcast, 0x8}, {@loopback, 0x7fffffff}, {@remote, 0x3f}]}, @generic={0x82, 0xa, "21633dc499889f7d"}, @timestamp_prespec={0x44, 0x4, 0xbb, 0x3, 0x1}, @timestamp_prespec={0x44, 0x4c, 0xb2, 0x3, 0x2, [{@dev={0xac, 0x14, 0x14, 0xd}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9f}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x20}, {@broadcast, 0x6e}, {@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@multicast1, 0x8}, {@multicast1, 0x10001}, {@multicast1, 0xfffffffc}]}, @ssrr={0x89, 0xb, 0x0, [@multicast2, @private=0xa010101]}, @rr={0x7, 0xb, 0xc1, [@dev={0xac, 0x14, 0x14, 0x28}, @private=0xa010102]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r10, 0x25, 0x0, @val=@tcx}, 0x40) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000ac0)) 1.473925693s ago: executing program 2 (id=6324): r0 = gettid() r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000400)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000040)={0x5}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000200)) r4 = syz_clone(0x58060200, &(0x7f0000000080)="91105cff112598770cbc02e2056ded52e791af63", 0x14, &(0x7f0000000240), &(0x7f0000000440), &(0x7f0000000480)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000280)="f5", 0x1}], 0x1) r7 = socket$inet6(0xa, 0x0, 0x0) r8 = dup2(r7, r7) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000740)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc, &(0x7f0000001c00)=[{&(0x7f0000002000)={0x730, 0x1d, 0x2f5d9893fcf60acf, 0x70bd25, 0x25dfdbfc, "", [@generic="5b6453b468c71ef6c3b448af428a12cfdf846d91f7a2f69f72be98b6fdb518e9376f987c585650af30d791acef37771e41d3573e11d82cc7f402c18e1422badbf37b5d945e409a779848b72f63740910f05878dd4ea96faa071ae342e24245824346115a4e2d404134", @generic="f07e465757e43fe456c4fc2a3c4dcf03ed3c428566b88c1f21bff061b082f60fc6aa83bb8757cce0678829e5cdfa3476ffd937437183e10ed36125908a0ddcec13e0ffe3938bc6653d11069591a5a6d19a5b22c6c1f200f42e", @typed={0x4, 0x118}, @generic="87928ae739e9175c940749ba8fa9f4cebfd85882e2da31b4808bf5a5d89a9957f47850edbcbd859c209e63b43a41b6aeb2932159f9b4e1005310f5387f5ee2fe5fa67e5569bd287d37a42e6e9a0e3ac71a7b3ebf1968960396551ff2c6dbea2f4edd955e5749aa57f85616f89be3307f742bf65615f5726611a853eea81f5d37016b0aeff7484ab7b989d9c5efb50c38da27bb05bcc6af4652ce6bf242838064c2dc2962a7ebe9ccb2c78debe69f8ae94df08b402fe37cec6c49c0db2dec6f23e5298bf8715489d1025acc0e798fd8d8d1b98ffc976226613f704b027845e2", @generic="3b9364e43230af9eb0abdaf8dab307e3e5721da87ef1ef55ca1a53ffcc22e78fb96ce8b9fa18409ec0febb99fae8d59cc12e7e1076623e7d278d405527985971b5645b4eeb86e9fd8b94bb1d97470814e7e893355d95ac09d832c2fa35d5f1e5bf7c9dccc495418950f4606c1bbca952606d85cf27843e17eab9afe1beff80a5430af84d87dbcacae1dd6cd198", @nested={0x131, 0x5c, 0x0, 0x1, [@generic="4abfdbde97de2915a2895ececb645cbcb6c61521eb491b4c790a18293b271bd168e6557ef772ddb9bbd5afe6b6ea4bc4489333b13b5389189a1e092a9f09069fc413677eeb0e7f9f62eabe6f67c9de1e1bc863076b9c58ee6d7b65792a7a371ab7e83adff3b4fc723fdce569a750ca9a30b986160db6e82c11ab3c8914ef820770d6221700d6e6d2af602ee4a97b75ebd943607ca5dd9e80176c7481700d7f2787e47ec8e30a12c107b654e8e5208bfbee66e6b1a5355ec8455b317e11af62c9a6c1b229ecaee68144b6fb1f88acfd0778ad2761448db3c932d2c8faf3dac69bc04c4ba3", @generic="99569d2bbb8b88d17963a3b07ed7d82825e52a010766c070ba7706288c13132bf29a7aa83650ed6f4926006e8e72b83822c98489b2dec09ddb", @typed={0xa, 0xa0, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @typed={0x4, 0xe8}]}, @nested={0x192, 0x124, 0x0, 0x1, [@typed={0x8, 0x7a, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xb7, 0x0, 0x0, @u32=0x4}, @typed={0x4, 0xde}, @typed={0xa, 0x2b, 0x0, 0x0, @str='\xff\xff\xff\xff\xff\xff'}, @generic="db69a6fac070078b1716b52b4c9a2e6a57a3d8486745a630d510d5a13e77dc3c1bf8b75fbd4f817207aa242d17945831230440d001d641e0c8c2ad778be11cc25a3dc28075ba0cd221042ac2a7eb7452c6510644cf0ef0fefa9c822ceb0999b3d98134bb3421401062b8aacdff6a38b31612cf8a3c09f08c3d8373d0b1ea05f2542cd70f4d30a1fafcbf28f7105440291f32445bd65f743235d6ef8e19cb3b2eb5fe", @typed={0xcb, 0xc8, 0x0, 0x0, @binary="66b82445979ea22e153d402b44a92da3101eb249e338ce85c0c5aea7eb78f6ffbc909a4b605ed32abad3f7071df3a31c3474786e4d539bebaf8ec2055a4fe16e461ed5a80e24421887e568758ee8d6d92283d78ca05162599c7c4fb2ae212617f757419f7c0d78ab7f862b7900749bb4630c89736b3c50d2e2fe1f428b3a1b68f21457d3e0f23fb0047ee446870996bfe522cb53bdc7e70f8c290dda6ee900a0d09fcacb14e5977591f3a4d06458a75167ea3ea09467c175ec8f7e1209f7ae5b1618db6066b283"}]}, @nested={0x142, 0x55, 0x0, 0x1, [@typed={0x4, 0xff}, @generic="df877c4075241798013e3098df6bbc1aed27fb68a9b7890ca501ca764a93d9a3a301c22ec27fecb24f383287e9471c79073d62255645b1936381", @generic="eac3cd9406d4ea6b5daef9b878141c9ce7a01505e314228df7dd6d8d43bacfc9d254a2a77428612511c0b9519f896d76350dfafdc5031fe0d140b4264ec998333c0e6b3e862cc87b2d1abbad7323dca08163e460a35ce5d798a326540ca490663da3428c2e5673973edbdb358f49a17673bba4f076c266cfb69974884edeb093ec1405c10e9057ff2df47fb0ec27514074300437c1ba2c4ffc6792be038bd2fca9aba64dbde30ac848f94250f6f692f6e75e9e344c28ef9fe0cf51024a9d2c1f77962839aa4ba8b7c88b33d6e6103ef75601f884", @generic="c7e5ae77035d5cce00c7ed69c7accb235fd85be81f7f4fdd6f0a6ab32f8b008b", @typed={0xa, 0x1e, 0x0, 0x0, @str='\'!\'l-\x00'}]}, @generic="98ecb8482294ae47ed2cdac04cceec45e3f3f6c08ca7a682ddd24f930712c963564e12cca8e39eafd9dcd4b44bbc943d4eb9dc8ac7672e12ae009577bf62d3f12a4e5db1f72423a8cdf9f8c4950ee9228de41bc04e5143b26f1b93c7ed6aa2c3486d4f56fabe581e6c333c27970106475ebe361d35aa41ced3282fe904db0fdb46a5b924d6e6d85243ac0870c5d4559f00a9095afcb0f2d5bcbe8d17e9fbad67a6c19f53b3476f8b98321092c02301058932fdf59786930d16adc8efd57a8b7cc2081103fa6b876b85f4a57d7b6344440c008ca6021d0f8cebc88f37ddae7aad19"]}, 0x730}, {&(0x7f0000000bc0)={0x1014, 0x30, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x1004, 0x64, 0x0, 0x0, @binary="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"}]}, 0x1014}], 0x2, &(0x7f0000001ec0)=[@cred={{0x18, 0x1, 0x2, {r0, r9, 0xee01}}}, @cred={{0x18}}, @cred={{0x18, 0x1, 0x2, {r4, r9}}}, @cred={{0x18, 0x1, 0x2, {0x0, r9, 0xee01}}}, @cred={{0x18, 0x1, 0x2, {r1, r9}}}, @rights={{0x10, 0x1, 0x1, [r10]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r10, r2, r7, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {r1}}}], 0xc4, 0x20000000}, 0x40800) write$tun(r10, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffff83d40101800e88a800008100000086dd604d462800101100fc02000000000000eaffffffffffffffff02000000000000000000000000000100000000001090780258e50000000000"], 0x4e) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 1.370104176s ago: executing program 1 (id=6325): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001e005db7000000000000000007"], 0x20}}, 0x0) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ce8000/0x2000)=nil, 0x930, 0x0, 0x12, r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x46201000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="0000000000008001643d", @ANYRES16=r4, @ANYBLOB=',\x00']) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r8 = fcntl$dupfd(r6, 0x0, r7) getsockname$packet(r8, 0x0, &(0x7f0000000180)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000005380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9a7e5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e79c1d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c64e2645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fa421a39943513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b70fa8eae6fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85409e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fce251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$uinput_user_dev(r0, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3327], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r9 = dup(r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x5) 1.239506323s ago: executing program 2 (id=6326): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x72, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000600), 0x101441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x23, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xa2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDCTL_SEQ_OUTOFBAND(r3, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xb, 0xfe, 0x0, @SEQ_NOTEON=@note=0x2}) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r9 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000080)={@local, r10}, 0x14) sendmmsg$inet6(r9, &(0x7f0000001740)=[{{&(0x7f0000000380)={0xa, 0x0, 0xf5, @remote}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 1.070253364s ago: executing program 0 (id=6327): r0 = io_uring_setup(0x177f, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000340)=0x2, 0xa2) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f000000e0c0), 0x10010) sendfile(r1, r2, &(0x7f0000000100), 0x100000000010001) close_range(r0, 0xffffffffffffffff, 0x0) 1.069741018s ago: executing program 0 (id=6328): unshare(0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) open$dir(0x0, 0x80040, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r4, 0x127a, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x6, 0x6, 0x0, 0x0, r1, 0x3, '\x00', r3, r4, 0x4, 0x5, 0x2, 0xb}, 0x48) rmdir(&(0x7f0000000040)='./control\x00') r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b706000000000000850000000f000000bf0900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r9, 0x4020aeb2, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="0a000000010000", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0xe, &(0x7f0000000400)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xb}, @exit, @generic={0x6, 0x0, 0x5, 0x7, 0x400}, @map_val={0x18, 0x1}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x14, r9, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x2, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[r4, r7, r5, 0xffffffffffffffff, r5], 0x0, 0x10, 0xffffff10}, 0x90) 987.917021ms ago: executing program 1 (id=6329): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1, 0x2, 0x2, 0x1901, 0x1, 0x1adf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000140)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs$userns(0x0, &(0x7f00000002c0)) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) 908.42326ms ago: executing program 3 (id=6330): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x72, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000600), 0x101441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x23, 0x3, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20014080}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xa2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYRES16=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = getpid() r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000c}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)}, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000080)={@local, r9}, 0x14) sendmmsg$inet6(r8, &(0x7f0000001740)=[{{&(0x7f0000000380)={0xa, 0x0, 0xf5, @remote}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 0s ago: executing program 2 (id=6331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x8, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read(r3, &(0x7f0000000000), 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) write$uinput_user_dev(r3, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000]}, 0x45c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$UI_DEV_SETUP(r3, 0x5501, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f00000011c0)={&(0x7f0000000940)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x2, {{0x7, 0x4}, {0x0}, 0x0, 0x27}}], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000002000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r9 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000200)=0x6) syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r9, 0x381b, 0x0, 0x0, 0x0, 0x0) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r8, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) kernel console output (not intermixed with test programs): 4342] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1303.086398][ T25] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1303.315826][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1303.321614][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1303.330199][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1303.335035][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1303.339330][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1303.351232][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.372581][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1303.393550][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.608991][ T25] usb 5-1: usb_control_msg returned -32 [ 1303.611106][ T25] usbtmc 5-1:16.0: can't read capabilities [ 1304.198366][T24383] input: syz0 as /devices/virtual/input/input198 [ 1305.770869][ T25] usb 5-1: USB disconnect, device number 44 [ 1305.851410][T24414] netlink: 'syz.0.5266': attribute type 1 has an invalid length. [ 1305.904317][T16643] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1306.121942][T16643] usb 8-1: Using ep0 maxpacket: 8 [ 1306.127241][T16643] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1306.130688][T16643] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1306.140973][T16643] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1306.152398][T16643] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1306.168518][T16643] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1306.194530][T16643] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1306.199031][T16643] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.433847][T16643] usb 8-1: usb_control_msg returned -32 [ 1306.436310][T16643] usbtmc 8-1:16.0: can't read capabilities [ 1306.462285][T16643] usb 8-1: USB disconnect, device number 56 [ 1306.945024][T24431] input: syz0 as /devices/virtual/input/input199 [ 1308.415757][T24446] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.5275'. [ 1308.443826][T24446] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.5275'. [ 1308.765636][T24451] netlink: 'syz.2.5276': attribute type 1 has an invalid length. [ 1309.285436][T24461] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1310.773807][ T831] psmouse serio51: Failed to reset mouse on : -5 [ 1312.311195][T24503] netlink: 'syz.2.5291': attribute type 4 has an invalid length. [ 1312.358873][T24503] FAULT_INJECTION: forcing a failure. [ 1312.358873][T24503] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.365861][T24503] CPU: 3 UID: 0 PID: 24503 Comm: syz.2.5291 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1312.370422][T24503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1312.375143][T24503] Call Trace: [ 1312.376639][T24503] [ 1312.377961][T24503] dump_stack_lvl+0x16c/0x1f0 [ 1312.380139][T24503] should_fail_ex+0x497/0x5b0 [ 1312.382381][T24503] should_failslab+0xc2/0x120 [ 1312.384229][T24503] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1312.386666][T24503] ? __nf_conntrack_alloc+0xd1/0x5e0 [ 1312.389111][T24503] __nf_conntrack_alloc+0xd1/0x5e0 [ 1312.391331][T24503] init_conntrack.constprop.0+0xd3e/0x1080 [ 1312.393992][T24503] ? __pfx_init_conntrack.constprop.0+0x10/0x10 [ 1312.396807][T24503] ? __pfx_hash_conntrack_raw+0x10/0x10 [ 1312.399324][T24503] ? __local_bh_enable_ip+0xa4/0x120 [ 1312.401655][T24503] ? lockdep_hardirqs_on+0x7c/0x110 [ 1312.403951][T24503] nf_conntrack_in+0xa50/0x1860 [ 1312.405915][T24503] ? __pfx_nf_conntrack_in+0x10/0x10 [ 1312.408246][T24503] ? __pfx_ipt_do_table+0x10/0x10 [ 1312.410424][T24503] ? get_random_u32+0x3fd/0x7e0 [ 1312.412582][T24503] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 1312.415113][T24503] ipv4_conntrack_local+0x160/0x260 [ 1312.417431][T24503] nf_hook_slow+0xbb/0x200 [ 1312.419427][T24503] nf_hook+0x386/0x6d0 [ 1312.421243][T24503] ? __pfx_dst_output+0x10/0x10 [ 1312.423429][T24503] ? __pfx_nf_hook+0x10/0x10 [ 1312.425494][T24503] ? mark_lock+0xb5/0xc60 [ 1312.427354][T24503] ? __pfx_dst_output+0x10/0x10 [ 1312.429232][T24503] ? do_csum+0x280/0x2e0 [ 1312.430884][T24503] __ip_local_out+0x33b/0x640 [ 1312.432743][T24503] ? __pfx_dst_output+0x10/0x10 [ 1312.434633][T24503] ip_send_skb+0x4a/0x560 [ 1312.436533][T24503] udp_send_skb+0xaa1/0x14e0 [ 1312.439159][T24503] udp_sendmsg+0x1403/0x2b20 [ 1312.441360][T24503] ? is_bpf_text_address+0x94/0x1a0 [ 1312.443422][T24503] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1312.445629][T24503] ? __pfx_udp_sendmsg+0x10/0x10 [ 1312.447859][T24503] ? hlock_class+0x4e/0x130 [ 1312.449655][T24503] ? __pfx___lock_acquire+0x10/0x10 [ 1312.451801][T24503] ? find_held_lock+0x2d/0x110 [ 1312.453866][T24503] ? hlock_class+0x4e/0x130 [ 1312.455874][T24503] ? mark_lock+0xb5/0xc60 [ 1312.457619][T24503] ? udpv6_sendmsg+0x181d/0x3040 [ 1312.459712][T24503] udpv6_sendmsg+0x181d/0x3040 [ 1312.461904][T24503] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1312.464479][T24503] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1312.466725][T24503] ? hlock_class+0x4e/0x130 [ 1312.468825][T24503] ? __pfx___might_resched+0x10/0x10 [ 1312.471324][T24503] ? __pfx_aa_sk_perm+0x10/0x10 [ 1312.474011][T24503] ? __import_iovec+0x1fd/0x6e0 [ 1312.477068][T24503] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 1312.479711][T24503] ? inet6_sendmsg+0x105/0x140 [ 1312.481810][T24503] inet6_sendmsg+0x105/0x140 [ 1312.483752][T24503] ____sys_sendmsg+0x64f/0xb50 [ 1312.485728][T24503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1312.488062][T24503] ? get_compat_msghdr+0x11b/0x170 [ 1312.490820][T24503] ? __pfx___lock_acquire+0x10/0x10 [ 1312.493125][T24503] ___sys_sendmsg+0x135/0x1e0 [ 1312.495287][T24503] ? __pfx____sys_sendmsg+0x10/0x10 [ 1312.497394][T24503] ? __pfx_lock_release+0x10/0x10 [ 1312.499515][T24503] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1312.501656][T24503] ? __fget_light+0x173/0x210 [ 1312.503719][T24503] __sys_sendmmsg+0x2a5/0x450 [ 1312.505704][T24503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1312.508303][T24503] ? vfs_write+0x14d/0x1140 [ 1312.510402][T24503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1312.513230][T24503] ? fput+0x32/0x390 [ 1312.514842][T24503] ? ksys_write+0x1ab/0x260 [ 1312.516744][T24503] ? __pfx_ksys_write+0x10/0x10 [ 1312.519067][T24503] __ia32_compat_sys_sendmmsg+0x9d/0x100 [ 1312.521803][T24503] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 1312.524891][T24503] __do_fast_syscall_32+0x73/0x120 [ 1312.527844][T24503] do_fast_syscall_32+0x32/0x80 [ 1312.530012][T24503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1312.532892][T24503] RIP: 0023:0xf748e579 [ 1312.535124][T24503] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1312.543317][T24503] RSP: 002b:00000000f57a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000159 [ 1312.547056][T24503] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000240 [ 1312.550558][T24503] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1312.553438][T24503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1312.556366][T24503] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1312.560073][T24503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1312.563099][T24503] [ 1312.596725][T24509] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1312.948314][T24517] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1313.247208][T24524] 9pnet_fd: Insufficient options for proto=fd [ 1313.724680][T24537] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1313.944863][T24545] netlink: 'syz.2.5301': attribute type 3 has an invalid length. [ 1313.947933][T24545] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5301'. [ 1314.473685][ T831] misc userio: Buffer overflowed, userio client isn't keeping up [ 1315.242572][T24561] netlink: 'syz.0.5305': attribute type 10 has an invalid length. [ 1315.267854][T24561] hsr0: entered promiscuous mode [ 1315.282525][T24561] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1315.292152][T24561] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1315.304587][T24561] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1315.310100][T24561] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1315.740334][ T831] input: PS/2 Generic Mouse as /devices/serio51/input/input200 [ 1315.963552][ T831] psmouse serio51: Failed to enable mouse on [ 1316.183262][T24573] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1316.684276][T24588] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1316.846232][T24589] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1317.683522][ T5395] psmouse serio52: Failed to reset mouse on : -5 [ 1317.782437][T24613] FAULT_INJECTION: forcing a failure. [ 1317.782437][T24613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.788204][T24613] CPU: 3 UID: 0 PID: 24613 Comm: syz.2.5320 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1317.797452][T24613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1317.801691][T24613] Call Trace: [ 1317.803080][T24613] [ 1317.804358][T24613] dump_stack_lvl+0x16c/0x1f0 [ 1317.806359][T24613] should_fail_ex+0x497/0x5b0 [ 1317.808363][T24613] _copy_from_user+0x30/0xf0 [ 1317.810343][T24613] kstrtouint_from_user+0xd7/0x1c0 [ 1317.812437][T24613] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1317.814623][T24613] ? __pfx_lock_acquire+0x10/0x10 [ 1317.816855][T24613] proc_fail_nth_write+0x84/0x270 [ 1317.819072][T24613] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1317.821608][T24613] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1317.824201][T24613] vfs_write+0x29a/0x1140 [ 1317.826206][T24613] ? __fdget_pos+0xeb/0x180 [ 1317.828154][T24613] ? __pfx_vfs_write+0x10/0x10 [ 1317.830107][T24613] ? __pfx___mutex_lock+0x10/0x10 [ 1317.834278][T24613] ? __fget_files+0x256/0x400 [ 1317.836400][T24613] ksys_write+0x12f/0x260 [ 1317.838266][T24613] ? __pfx_ksys_write+0x10/0x10 [ 1317.840392][T24613] __do_fast_syscall_32+0x73/0x120 [ 1317.842614][T24613] do_fast_syscall_32+0x32/0x80 [ 1317.844734][T24613] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1317.847459][T24613] RIP: 0023:0xf748e579 [ 1317.849226][T24613] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1317.856890][T24613] RSP: 002b:00000000f57a65b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 1317.860426][T24613] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f57a6630 [ 1317.863822][T24613] RDX: 0000000000000001 RSI: 00000000f747bff4 RDI: 0000000000000000 [ 1317.867222][T24613] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1317.870155][T24613] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1317.873160][T24613] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1317.876566][T24613] [ 1318.623563][T24584] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1319.152054][T24636] netlink: 'syz.3.5327': attribute type 1 has an invalid length. [ 1319.490226][T24645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5330'. [ 1319.493384][T24645] FAULT_INJECTION: forcing a failure. [ 1319.493384][T24645] name failslab, interval 1, probability 0, space 0, times 0 [ 1319.502936][T24645] CPU: 3 UID: 0 PID: 24645 Comm: syz.3.5330 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1319.507754][T24645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1319.511941][T24645] Call Trace: [ 1319.513270][T24645] [ 1319.514352][T24645] dump_stack_lvl+0x16c/0x1f0 [ 1319.516357][T24645] should_fail_ex+0x497/0x5b0 [ 1319.518391][T24645] ? fs_reclaim_acquire+0xae/0x160 [ 1319.520611][T24645] should_failslab+0xc2/0x120 [ 1319.522770][T24645] __kmalloc_node_noprof+0xd1/0x440 [ 1319.524832][T24645] ? __kvmalloc_node_noprof+0x9d/0x1a0 [ 1319.526789][T24645] __kvmalloc_node_noprof+0x9d/0x1a0 [ 1319.529284][T24645] xfrm_user_rcv_msg_compat+0x371/0x12e0 [ 1319.531702][T24645] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 1319.533875][T24645] ? __sys_sendmsg+0x117/0x1f0 [ 1319.535526][T24645] ? do_fast_syscall_32+0x32/0x80 [ 1319.537151][T24645] ? bpf_lsm_capable+0x9/0x10 [ 1319.538709][T24645] ? __pfx_xfrm_user_rcv_msg_compat+0x10/0x10 [ 1319.541016][T24645] xfrm_user_rcv_msg+0x30f/0xb30 [ 1319.542937][T24645] ? skb_release_data+0x761/0x980 [ 1319.544947][T24645] ? kfree_skbmem+0x10e/0x200 [ 1319.546806][T24645] ? find_held_lock+0x2d/0x110 [ 1319.548682][T24645] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1319.550839][T24645] ? hlock_class+0x4e/0x130 [ 1319.552535][T24645] ? __lock_acquire+0x1620/0x3cb0 [ 1319.554739][T24645] ? __mutex_trylock_common+0xea/0x250 [ 1319.557129][T24645] netlink_rcv_skb+0x165/0x410 [ 1319.559239][T24645] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1319.561812][T24645] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1319.563928][T24645] ? __mutex_lock+0x1a6/0x9c0 [ 1319.565985][T24645] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1319.568249][T24645] xfrm_netlink_rcv+0x71/0x90 [ 1319.570358][T24645] netlink_unicast+0x544/0x830 [ 1319.572082][T24645] ? __pfx_netlink_unicast+0x10/0x10 [ 1319.574268][T24645] ? __phys_addr_symbol+0x30/0x80 [ 1319.576308][T24645] ? __check_object_size+0x497/0x720 [ 1319.578282][T24645] netlink_sendmsg+0x8b8/0xd70 [ 1319.580153][T24645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1319.582179][T24645] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1319.584420][T24645] ____sys_sendmsg+0x9b4/0xb50 [ 1319.586617][T24645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1319.588906][T24645] ? get_compat_msghdr+0x11b/0x170 [ 1319.591139][T24645] ? __pfx___lock_acquire+0x10/0x10 [ 1319.593212][T24645] ___sys_sendmsg+0x135/0x1e0 [ 1319.595031][T24645] ? __pfx____sys_sendmsg+0x10/0x10 [ 1319.597359][T24645] ? ksys_write+0x21c/0x260 [ 1319.599263][T24645] ? __fget_light+0x173/0x210 [ 1319.601347][T24645] __sys_sendmsg+0x117/0x1f0 [ 1319.603293][T24645] ? __pfx___sys_sendmsg+0x10/0x10 [ 1319.605361][T24645] __do_fast_syscall_32+0x73/0x120 [ 1319.607207][T24645] do_fast_syscall_32+0x32/0x80 [ 1319.609181][T24645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1319.611736][T24645] RIP: 0023:0xf743e579 [ 1319.613579][T24645] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1319.622157][T24645] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1319.625627][T24645] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 1319.629018][T24645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1319.632395][T24645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1319.635825][T24645] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1319.641562][T24645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1319.645001][T24645] [ 1320.862904][T24665] FAULT_INJECTION: forcing a failure. [ 1320.862904][T24665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1320.884644][T24665] CPU: 2 UID: 0 PID: 24665 Comm: syz.2.5336 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1320.889421][T24665] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1320.894223][T24665] Call Trace: [ 1320.895726][T24665] [ 1320.897061][T24665] dump_stack_lvl+0x16c/0x1f0 [ 1320.899179][T24665] should_fail_ex+0x497/0x5b0 [ 1320.901281][T24665] _copy_from_user+0x30/0xf0 [ 1320.903212][T24665] get_compat_msghdr+0xa8/0x170 [ 1320.905078][T24665] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1320.907327][T24665] ? __pfx___lock_acquire+0x10/0x10 [ 1320.909621][T24665] ___sys_sendmsg+0x1b0/0x1e0 [ 1320.911748][T24665] ? __pfx____sys_sendmsg+0x10/0x10 [ 1320.914047][T24665] ? ksys_write+0x21c/0x260 [ 1320.916004][T24665] ? __fget_light+0x173/0x210 [ 1320.917965][T24665] __sys_sendmsg+0x117/0x1f0 [ 1320.919794][T24665] ? __pfx___sys_sendmsg+0x10/0x10 [ 1320.921973][T24665] __do_fast_syscall_32+0x73/0x120 [ 1320.924176][T24665] do_fast_syscall_32+0x32/0x80 [ 1320.926351][T24665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1320.929106][T24665] RIP: 0023:0xf748e579 [ 1320.930817][T24665] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1320.938933][T24665] RSP: 002b:00000000f57a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1320.942258][T24665] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000020000480 [ 1320.945672][T24665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1320.949121][T24665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1320.952930][T24665] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1320.957425][T24665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1320.960867][T24665] [ 1321.009359][T24668] netlink: 'syz.3.5337': attribute type 1 has an invalid length. [ 1321.079397][T24674] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 1321.393644][ T5395] misc userio: Buffer overflowed, userio client isn't keeping up [ 1322.037929][T24690] binder: 24689:24690 ioctl 8912 20000540 returned -22 [ 1322.045710][T24690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5346'. [ 1322.624752][T24698] FAULT_INJECTION: forcing a failure. [ 1322.624752][T24698] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.630072][T24698] CPU: 2 UID: 0 PID: 24698 Comm: syz.0.5348 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1322.634512][T24698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1322.639051][T24698] Call Trace: [ 1322.640489][T24698] [ 1322.641762][T24698] dump_stack_lvl+0x16c/0x1f0 [ 1322.644032][T24698] should_fail_ex+0x497/0x5b0 [ 1322.646276][T24698] ? fs_reclaim_acquire+0xae/0x160 [ 1322.648463][T24698] should_failslab+0xc2/0x120 [ 1322.650526][T24698] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1322.653100][T24698] ? __alloc_skb+0x2b3/0x380 [ 1322.655026][T24698] __alloc_skb+0x2b3/0x380 [ 1322.656866][T24698] ? __pfx___alloc_skb+0x10/0x10 [ 1322.658958][T24698] netlink_ack+0x164/0xb20 [ 1322.660419][T24698] netlink_rcv_skb+0x327/0x410 [ 1322.662375][T24698] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1322.664686][T24698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1322.666987][T24698] ? bpf_lsm_capable+0x9/0x10 [ 1322.668967][T24698] ? security_capable+0x98/0xd0 [ 1322.671026][T24698] ? ns_capable+0xd7/0x110 [ 1322.672679][T24698] nfnetlink_rcv+0x1b4/0x430 [ 1322.674640][T24698] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1322.676869][T24698] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1322.679146][T24698] netlink_unicast+0x544/0x830 [ 1322.681064][T24698] ? __pfx_netlink_unicast+0x10/0x10 [ 1322.683194][T24698] ? __phys_addr_symbol+0x30/0x80 [ 1322.685455][T24698] ? __check_object_size+0x497/0x720 [ 1322.687622][T24698] netlink_sendmsg+0x8b8/0xd70 [ 1322.689626][T24698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1322.691989][T24698] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1322.694392][T24698] ____sys_sendmsg+0x9b4/0xb50 [ 1322.695487][ T5395] input: PS/2 Generic Mouse as /devices/serio52/input/input202 [ 1322.696977][T24698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1322.702407][T24698] ? get_compat_msghdr+0x11b/0x170 [ 1322.704637][T24698] ? __pfx___lock_acquire+0x10/0x10 [ 1322.706896][T24698] ___sys_sendmsg+0x135/0x1e0 [ 1322.708912][T24698] ? __pfx____sys_sendmsg+0x10/0x10 [ 1322.711152][T24698] ? ksys_write+0x21c/0x260 [ 1322.713100][T24698] ? __fget_light+0x173/0x210 [ 1322.715126][T24698] __sys_sendmsg+0x117/0x1f0 [ 1322.717134][T24698] ? __pfx___sys_sendmsg+0x10/0x10 [ 1322.719393][T24698] __do_fast_syscall_32+0x73/0x120 [ 1322.721502][T24698] do_fast_syscall_32+0x32/0x80 [ 1322.723320][T24698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1322.725523][T24698] RIP: 0023:0xf7fc7579 [ 1322.727137][T24698] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1322.734379][T24698] RSP: 002b:00000000f577657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1322.737445][T24698] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 1322.740694][T24698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1322.744039][T24698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1322.747385][T24698] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1322.750646][T24698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1322.753899][T24698] [ 1322.868037][T24704] netlink: 'syz.3.5351': attribute type 1 has an invalid length. [ 1322.903549][ T5395] psmouse serio52: Failed to enable mouse on [ 1323.184431][T24710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5350'. [ 1323.197146][T24710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5350'. [ 1324.191230][T24722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5356'. [ 1324.244586][ T5395] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1324.443691][ T5395] usb 6-1: Using ep0 maxpacket: 8 [ 1324.457704][ T5395] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1324.460916][ T5395] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1324.465433][ T5395] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1324.469368][ T5395] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1324.474088][ T5395] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.479623][ T5395] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1324.484048][ T5395] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.696529][ T5395] usb 6-1: usb_control_msg returned -32 [ 1324.698669][ T5395] usbtmc 6-1:16.0: can't read capabilities [ 1324.922630][T24731] netlink: 'syz.2.5360': attribute type 1 has an invalid length. [ 1325.319779][T24738] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1325.597956][T24744] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1326.931030][T20009] usb 6-1: USB disconnect, device number 45 [ 1327.148745][T24767] input: syz0 as /devices/virtual/input/input203 [ 1327.813691][ T4773] Bluetooth: hci5: command 0x0406 tx timeout [ 1328.536190][T24775] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1328.593915][T24779] netlink: 'syz.0.5372': attribute type 3 has an invalid length. [ 1328.597635][T24779] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5372'. [ 1328.607123][T24777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5372'. [ 1328.714580][T24779] fuse: Unknown parameter '' [ 1329.287952][T24789] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1329.394983][T24793] netlink: 'syz.0.5374': attribute type 3 has an invalid length. [ 1329.397721][T24793] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5374'. [ 1329.421506][T24788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5374'. [ 1329.591331][T24793] fuse: Unknown parameter '' [ 1330.243576][T20009] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1330.392115][T24807] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5377'. [ 1330.423544][T20009] usb 7-1: Using ep0 maxpacket: 8 [ 1330.428691][T20009] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1330.432288][T20009] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1330.437784][T20009] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1330.442743][T20009] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1330.447938][T20009] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1330.453862][T20009] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1330.463509][T20009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.677991][T20009] usb 7-1: usb_control_msg returned -32 [ 1330.682053][T20009] usbtmc 7-1:16.0: can't read capabilities [ 1331.383676][T24825] netlink: 'syz.3.5382': attribute type 3 has an invalid length. [ 1331.387009][T24825] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5382'. [ 1331.393366][T24824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5382'. [ 1331.476654][T24825] fuse: Unknown parameter '' [ 1332.339597][T24836] netlink: 'syz.3.5385': attribute type 1 has an invalid length. [ 1332.477437][T24839] netlink: 'syz.3.5386': attribute type 3 has an invalid length. [ 1332.480639][T24839] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1332.490756][T24838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5386'. [ 1332.601085][T24839] fuse: Unknown parameter '' [ 1332.788781][T24843] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1332.974220][T15728] usb 7-1: USB disconnect, device number 53 [ 1333.230892][T24854] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1333.665526][T24871] netlink: 'syz.1.5391': attribute type 3 has an invalid length. [ 1333.676769][T24871] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5391'. [ 1333.734989][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5391'. [ 1333.829685][T24871] fuse: Unknown parameter '' [ 1334.071499][T24878] netlink: 'syz.3.5394': attribute type 1 has an invalid length. [ 1334.665799][ T25] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1334.700696][T24899] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5398'. [ 1334.863538][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 1334.867788][ T25] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1334.871190][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1334.883671][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1334.893530][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1334.897655][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1334.913278][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1334.917573][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.147726][ T25] usb 6-1: usb_control_msg returned -32 [ 1335.150240][ T25] usbtmc 6-1:16.0: can't read capabilities [ 1335.912531][T24906] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1337.322934][ T5398] usb 6-1: USB disconnect, device number 46 [ 1337.375805][T24919] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1337.529343][T24925] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1337.579661][T24930] netlink: 'syz.2.5406': attribute type 3 has an invalid length. [ 1337.587489][T24930] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5406'. [ 1337.703139][T24930] fuse: Unknown parameter '' [ 1337.813677][T24904] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1338.031723][T24937] FAULT_INJECTION: forcing a failure. [ 1338.031723][T24937] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.043492][T24937] CPU: 0 UID: 0 PID: 24937 Comm: syz.2.5408 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1338.048100][T24937] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1338.052830][T24937] Call Trace: [ 1338.054364][T24937] [ 1338.055701][T24937] dump_stack_lvl+0x16c/0x1f0 [ 1338.057805][T24937] should_fail_ex+0x497/0x5b0 [ 1338.060091][T24937] ? fs_reclaim_acquire+0xae/0x160 [ 1338.062773][T24937] should_failslab+0xc2/0x120 [ 1338.065304][T24937] __kmalloc_noprof+0xcb/0x410 [ 1338.067488][T24937] ? __pfx_lock_acquire+0x10/0x10 [ 1338.069724][T24937] tomoyo_realpath_from_path+0xbf/0x710 [ 1338.072233][T24937] ? tomoyo_profile+0x47/0x60 [ 1338.074297][T24937] tomoyo_path_number_perm+0x245/0x5b0 [ 1338.076916][T24937] ? tomoyo_path_number_perm+0x232/0x5b0 [ 1338.079665][T24937] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1338.082713][T24937] ? __pfx_lock_release+0x10/0x10 [ 1338.084949][T24937] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1338.095474][T24937] ? __fget_files+0x256/0x400 [ 1338.097733][T24937] security_file_ioctl_compat+0x75/0xc0 [ 1338.099913][T24937] __do_compat_sys_ioctl+0x5d/0x330 [ 1338.102020][T24937] __do_fast_syscall_32+0x73/0x120 [ 1338.104244][T24937] do_fast_syscall_32+0x32/0x80 [ 1338.106545][T24937] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1338.109310][T24937] RIP: 0023:0xf748e579 [ 1338.111398][T24937] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1338.119709][T24937] RSP: 002b:00000000f57a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1338.123919][T24937] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c00456bf [ 1338.127849][T24937] RDX: 0000000020001040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1338.131437][T24937] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1338.134826][T24937] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1338.138363][T24937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1338.141989][T24937] [ 1338.154226][T24937] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1338.625025][T24950] netlink: 'syz.1.5412': attribute type 3 has an invalid length. [ 1338.644127][T24950] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5412'. [ 1338.658837][T24951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5412'. [ 1338.845727][T24950] fuse: Unknown parameter '' [ 1339.350534][T24965] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1339.443245][T24972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5414'. [ 1340.743200][T24989] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1341.177649][T24995] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1341.684047][T25001] netlink: 'syz.0.5422': attribute type 3 has an invalid length. [ 1341.687230][T25001] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1341.692907][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5422'. [ 1341.783195][T25001] fuse: Unknown parameter '' [ 1343.035343][T25024] overlayfs: failed to resolve './file0': -2 [ 1343.110144][T25031] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1343.183105][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5431'. [ 1343.247337][T25040] netlink: 'syz.1.5432': attribute type 3 has an invalid length. [ 1343.251280][T25040] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5432'. [ 1343.260551][T25037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5432'. [ 1343.342268][T25040] fuse: Unknown parameter '' [ 1344.756115][T25069] netlink: 'syz.2.5440': attribute type 3 has an invalid length. [ 1344.759540][T25069] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5440'. [ 1344.898148][T25069] fuse: Unknown parameter '' [ 1345.366137][T25082] overlayfs: failed to resolve './file0': -2 [ 1345.379646][T25084] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1345.514334][T25090] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1346.348745][T25106] input: syz0 as /devices/virtual/input/input218 [ 1347.343726][T25080] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1347.450291][T25117] netlink: 'syz.0.5453': attribute type 3 has an invalid length. [ 1347.455769][T25117] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5453'. [ 1347.559450][T25117] fuse: Unknown parameter '' [ 1347.973767][ T25] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1348.070822][T25135] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1348.143593][ T5398] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1348.166117][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 1348.171179][ T25] usb 8-1: config 0 has no interfaces? [ 1348.173596][ T25] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1348.177349][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.188898][ T25] usb 8-1: config 0 descriptor?? [ 1348.334500][ T5398] usb 6-1: Using ep0 maxpacket: 8 [ 1348.345692][ T5398] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1348.349311][ T5398] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1348.365767][ T5398] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1348.381629][ T5398] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1348.410045][ T5398] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1348.429903][ T5398] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1348.441933][ T5398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.661342][ T5398] usb 6-1: usb_control_msg returned -32 [ 1348.663334][ T5398] usbtmc 6-1:16.0: can't read capabilities [ 1348.753268][T25140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5460'. [ 1349.008458][T25145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1349.021070][T25145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1349.460668][T25148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5462'. [ 1349.721812][T25155] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1350.685357][ T831] usb 8-1: USB disconnect, device number 57 [ 1350.850024][T20009] usb 6-1: USB disconnect, device number 47 [ 1350.888863][T25167] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1351.593313][T25175] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1352.447052][T25190] netlink: 'syz.1.5472': attribute type 3 has an invalid length. [ 1352.450508][T25190] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1352.480342][T25187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5472'. [ 1352.571769][T25190] fuse: Unknown parameter '' [ 1352.773926][T25165] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1352.850882][T25199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5476'. [ 1353.063597][ T30] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1353.243527][ T30] usb 5-1: device descriptor read/64, error -71 [ 1353.437267][ T5398] IPVS: starting estimator thread 0... [ 1353.523582][ T30] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1353.543659][T25211] IPVS: using max 20 ests per chain, 48000 per kthread [ 1353.683807][ T30] usb 5-1: device descriptor read/64, error -71 [ 1353.715965][T25216] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1353.843623][ T30] usb usb5-port1: attempt power cycle [ 1353.904398][T25226] input: syz0 as /devices/virtual/input/input221 [ 1354.263622][ T30] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1354.294050][ T30] usb 5-1: device descriptor read/8, error -71 [ 1354.584335][ T30] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1354.624391][ T30] usb 5-1: device descriptor read/8, error -71 [ 1354.642504][T25234] netlink: 'syz.2.5485': attribute type 3 has an invalid length. [ 1354.653568][T25234] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5485'. [ 1354.659752][T25231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5485'. [ 1354.750309][ T30] usb usb5-port1: unable to enumerate USB device [ 1354.755481][T25234] fuse: Unknown parameter '' [ 1355.109576][T25245] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1355.223501][T25249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5489'. [ 1355.281520][T25254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5491'. [ 1355.395006][T25258] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1356.143519][ T5392] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1356.333562][ T5392] usb 5-1: Using ep0 maxpacket: 8 [ 1356.344314][ T5392] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1356.380265][ T5392] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1356.403724][ T5392] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1356.407762][ T5392] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1356.418339][ T5392] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1356.422918][ T5392] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1356.428567][ T5392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.564908][T25290] input: syz0 as /devices/virtual/input/input223 [ 1356.651795][ T5392] usb 5-1: usb_control_msg returned -32 [ 1356.657168][ T5392] usbtmc 5-1:16.0: can't read capabilities [ 1356.660816][T25292] bridge0: port 2(vlan2) entered blocking state [ 1356.670693][T25292] bridge0: port 2(vlan2) entered disabled state [ 1356.673979][T25292] vlan2: entered allmulticast mode [ 1356.679559][T25292] vlan2: left allmulticast mode [ 1356.799358][T25295] FAULT_INJECTION: forcing a failure. [ 1356.799358][T25295] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.804752][T25295] CPU: 1 UID: 0 PID: 25295 Comm: syz.3.5502 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1356.808283][T25295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1356.812022][T25295] Call Trace: [ 1356.813425][T25295] [ 1356.814640][T25295] dump_stack_lvl+0x16c/0x1f0 [ 1356.816579][T25295] should_fail_ex+0x497/0x5b0 [ 1356.818518][T25295] ? fs_reclaim_acquire+0xae/0x160 [ 1356.820566][T25295] should_failslab+0xc2/0x120 [ 1356.822187][T25295] __kmalloc_cache_node_noprof+0x6e/0x360 [ 1356.824197][T25295] ? page_pool_create_percpu+0x76/0x7f0 [ 1356.826377][T25295] page_pool_create_percpu+0x76/0x7f0 [ 1356.828384][T25295] ? __kvmalloc_node_noprof+0x7c/0x1a0 [ 1356.830192][T25295] bpf_test_run_xdp_live+0x193/0x500 [ 1356.831978][T25295] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1356.834116][T25295] ? __pfx___lock_acquire+0x10/0x10 [ 1356.836581][T25295] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1356.839103][T25295] ? __might_fault+0xe3/0x190 [ 1356.841111][T25295] ? _copy_from_user+0x5d/0xf0 [ 1356.843199][T25295] ? bpf_test_init.isra.0+0x111/0x150 [ 1356.845460][T25295] bpf_prog_test_run_xdp+0x82d/0x1530 [ 1356.847671][T25295] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1356.850130][T25295] ? fput+0x32/0x390 [ 1356.851873][T25295] ? __bpf_prog_get+0xa0/0x2f0 [ 1356.853952][T25295] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1356.856397][T25295] __sys_bpf+0x141f/0x5600 [ 1356.858303][T25295] ? __pfx___sys_bpf+0x10/0x10 [ 1356.860341][T25295] ? ksys_write+0x12f/0x260 [ 1356.862292][T25295] ? find_held_lock+0x2d/0x110 [ 1356.864355][T25295] ? ksys_write+0x21c/0x260 [ 1356.866302][T25295] ? __pfx_lock_release+0x10/0x10 [ 1356.868457][T25295] ? vfs_write+0x14d/0x1140 [ 1356.870428][T25295] ? __mutex_unlock_slowpath+0x164/0x650 [ 1356.872859][T25295] ? fput+0x32/0x390 [ 1356.874571][T25295] ? ksys_write+0x1ab/0x260 [ 1356.876550][T25295] ? __pfx_ksys_write+0x10/0x10 [ 1356.878640][T25295] __ia32_sys_bpf+0x76/0xe0 [ 1356.880570][T25295] __do_fast_syscall_32+0x73/0x120 [ 1356.882737][T25295] do_fast_syscall_32+0x32/0x80 [ 1356.884845][T25295] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1356.887551][T25295] RIP: 0023:0xf743e579 [ 1356.889290][T25295] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1356.897499][T25295] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1356.901070][T25295] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 1356.904211][T25295] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 1356.907326][T25295] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1356.910449][T25295] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1356.913654][T25295] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1356.917051][T25295] [ 1357.013557][T25243] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1357.235601][T25302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5504'. [ 1357.635010][T25309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5506'. [ 1358.154127][T25327] input: syz0 as /devices/virtual/input/input224 [ 1358.294516][T25329] FAULT_INJECTION: forcing a failure. [ 1358.294516][T25329] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.308853][T25329] CPU: 0 UID: 0 PID: 25329 Comm: syz.2.5512 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1358.313252][T25329] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1358.317058][T25329] Call Trace: [ 1358.318198][T25329] [ 1358.319210][T25329] dump_stack_lvl+0x16c/0x1f0 [ 1358.320797][T25329] should_fail_ex+0x497/0x5b0 [ 1358.322378][T25329] ? fs_reclaim_acquire+0xae/0x160 [ 1358.324194][T25329] should_failslab+0xc2/0x120 [ 1358.325891][T25329] kmem_cache_alloc_node_noprof+0x71/0x310 [ 1358.328362][T25329] ? __alloc_skb+0x2b3/0x380 [ 1358.330297][T25329] __alloc_skb+0x2b3/0x380 [ 1358.332024][T25329] ? __pfx___alloc_skb+0x10/0x10 [ 1358.333825][T25329] ? __mutex_trylock_common+0xea/0x250 [ 1358.336292][T25329] netlink_dump+0x6af/0xcc0 [ 1358.338154][T25329] ? trace_contention_end+0xea/0x140 [ 1358.340315][T25329] ? __pfx_netlink_dump+0x10/0x10 [ 1358.342442][T25329] ? __mutex_lock+0x1a6/0x9c0 [ 1358.344398][T25329] ? find_held_lock+0x2d/0x110 [ 1358.346439][T25329] __netlink_dump_start+0x6e8/0x9c0 [ 1358.348612][T25329] ? __pfx_neightbl_dump_info+0x10/0x10 [ 1358.350918][T25329] rtnetlink_rcv_msg+0xb44/0xea0 [ 1358.352987][T25329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1358.355141][T25329] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1358.356903][T25329] ? __pfx_neightbl_dump_info+0x10/0x10 [ 1358.358900][T25329] netlink_rcv_skb+0x165/0x410 [ 1358.360520][T25329] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1358.362350][T25329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1358.364390][T25329] ? netlink_deliver_tap+0x1ae/0xcf0 [ 1358.366590][T25329] netlink_unicast+0x544/0x830 [ 1358.368584][T25329] ? __pfx_netlink_unicast+0x10/0x10 [ 1358.370371][T25329] ? __phys_addr_symbol+0x30/0x80 [ 1358.372474][T25329] ? __check_object_size+0x497/0x720 [ 1358.374426][T25329] netlink_sendmsg+0x8b8/0xd70 [ 1358.376054][T25329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1358.377726][T25329] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1358.379512][T25329] ____sys_sendmsg+0x9b4/0xb50 [ 1358.381120][T25329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1358.383057][T25329] ? get_compat_msghdr+0x11b/0x170 [ 1358.385034][T25329] ? __pfx___lock_acquire+0x10/0x10 [ 1358.386755][T25329] ___sys_sendmsg+0x135/0x1e0 [ 1358.388256][T25329] ? __pfx____sys_sendmsg+0x10/0x10 [ 1358.390680][T25329] ? ksys_write+0x21c/0x260 [ 1358.392287][T25329] ? __fget_light+0x173/0x210 [ 1358.393880][T25329] __sys_sendmsg+0x117/0x1f0 [ 1358.395879][T25329] ? __pfx___sys_sendmsg+0x10/0x10 [ 1358.398064][T25329] __do_fast_syscall_32+0x73/0x120 [ 1358.400248][T25329] do_fast_syscall_32+0x32/0x80 [ 1358.402266][T25329] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1358.404379][T25329] RIP: 0023:0xf748e579 [ 1358.406122][T25329] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1358.413814][T25329] RSP: 002b:00000000f57a657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 1358.416915][T25329] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 1358.419951][T25329] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1358.423180][T25329] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1358.426054][T25329] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1358.429338][T25329] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1358.432136][T25329] [ 1358.550286][T25335] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1358.607941][T25338] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1358.868354][ T5398] usb 5-1: USB disconnect, device number 49 [ 1359.305328][ T39] audit: type=1107 audit(1722300362.076:4179): pid=25353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1359.307203][T25354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.327914][T25353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1359.862485][T25362] FAULT_INJECTION: forcing a failure. [ 1359.862485][T25362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1359.869339][T25362] CPU: 3 UID: 0 PID: 25362 Comm: syz.3.5522 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1359.874083][T25362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1359.878869][T25362] Call Trace: [ 1359.880378][T25362] [ 1359.881709][T25362] dump_stack_lvl+0x16c/0x1f0 [ 1359.883845][T25362] should_fail_ex+0x497/0x5b0 [ 1359.885964][T25362] _copy_to_user+0x30/0xc0 [ 1359.887992][T25362] simple_read_from_buffer+0xd0/0x160 [ 1359.890413][T25362] proc_fail_nth_read+0x1b0/0x290 [ 1359.892663][T25362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1359.895281][T25362] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1359.897785][T25362] vfs_read+0x1d4/0xbd0 [ 1359.899632][T25362] ? __fdget_pos+0xeb/0x180 [ 1359.901683][T25362] ? __pfx_vfs_read+0x10/0x10 [ 1359.903780][T25362] ? __pfx___mutex_lock+0x10/0x10 [ 1359.906072][T25362] ? __fget_files+0x256/0x400 [ 1359.908226][T25362] ksys_read+0x12f/0x260 [ 1359.910161][T25362] ? __pfx_ksys_read+0x10/0x10 [ 1359.912334][T25362] __do_fast_syscall_32+0x73/0x120 [ 1359.914473][T25362] do_fast_syscall_32+0x32/0x80 [ 1359.916293][T25362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1359.918552][T25362] RIP: 0023:0xf743e579 [ 1359.920069][T25362] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1359.927062][T25362] RSP: 002b:00000000f57565b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1359.930567][T25362] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5756630 [ 1359.933863][T25362] RDX: 000000000000000f RSI: 00000000f742bff4 RDI: 0000000000000000 [ 1359.937333][T25362] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1359.940380][T25362] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1359.943806][T25362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1359.947313][T25362] [ 1360.323632][ T5398] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1360.348577][T25375] netlink: 'syz.1.5527': attribute type 7 has an invalid length. [ 1360.351992][T25375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5527'. [ 1360.504572][ T5398] usb 8-1: Using ep0 maxpacket: 8 [ 1360.510335][ T5398] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1360.523720][ T5398] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1360.532754][ T5398] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1360.533833][T25334] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1360.546242][ T5398] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1360.556330][ T5398] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1360.569879][ T5398] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1360.579088][ T5398] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.801709][ T5398] usb 8-1: usb_control_msg returned -32 [ 1360.809635][ T5398] usbtmc 8-1:16.0: can't read capabilities [ 1361.577060][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.837184][T25411] FAULT_INJECTION: forcing a failure. [ 1362.837184][T25411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1362.847127][T25411] CPU: 3 UID: 0 PID: 25411 Comm: syz.0.5537 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1362.851351][T25411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1362.855355][T25411] Call Trace: [ 1362.856494][T25411] [ 1362.857624][T25411] dump_stack_lvl+0x16c/0x1f0 [ 1362.859435][T25411] should_fail_ex+0x497/0x5b0 [ 1362.861322][T25411] ? fs_reclaim_acquire+0xae/0x160 [ 1362.863443][T25411] should_fail_alloc_page+0xe7/0x130 [ 1362.865539][T25411] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1362.868209][T25411] ? snd_ctl_new+0x5a/0x1a0 [ 1362.870173][T25411] __alloc_pages_noprof+0x194/0x2460 [ 1362.872470][T25411] ? hlock_class+0x4e/0x130 [ 1362.874378][T25411] ? __lock_acquire+0x1620/0x3cb0 [ 1362.876500][T25411] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1362.878918][T25411] ? __pfx___lock_acquire+0x10/0x10 [ 1362.880809][T25411] ? stack_trace_save+0x95/0xd0 [ 1362.882476][T25411] ? __pfx_lock_acquire+0x10/0x10 [ 1362.884399][T25411] ? snd_ctl_new+0x5a/0x1a0 [ 1362.886026][T25411] ___kmalloc_large_node+0x7f/0x1a0 [ 1362.887765][T25411] __kmalloc_large_node_noprof+0x1c/0x70 [ 1362.889884][T25411] __kmalloc_noprof.cold+0xc/0x61 [ 1362.891651][T25411] ? down_write+0x14e/0x200 [ 1362.893468][T25411] snd_ctl_new+0x5a/0x1a0 [ 1362.895267][T25411] snd_ctl_elem_add+0x4a4/0x1330 [ 1362.897295][T25411] ? __pfx_snd_ctl_elem_add+0x10/0x10 [ 1362.899592][T25411] ? __might_fault+0xe3/0x190 [ 1362.901182][T25411] snd_ctl_elem_add_compat+0x299/0x3f0 [ 1362.903004][T25411] snd_ctl_ioctl_compat+0x141/0x900 [ 1362.904795][T25411] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 1362.907025][T25411] ? __fget_files+0x256/0x400 [ 1362.908888][T25411] ? bpf_lsm_file_ioctl_compat+0x9/0x10 [ 1362.911105][T25411] ? __pfx_snd_ctl_ioctl_compat+0x10/0x10 [ 1362.913484][T25411] __do_compat_sys_ioctl+0x2c3/0x330 [ 1362.915807][T25411] __do_fast_syscall_32+0x73/0x120 [ 1362.917759][T25411] do_fast_syscall_32+0x32/0x80 [ 1362.919794][T25411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1362.922405][T25411] RIP: 0023:0xf7fc7579 [ 1362.924096][T25411] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1362.930990][T25411] RSP: 002b:00000000f577657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 1362.934024][T25411] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c1105517 [ 1362.936965][T25411] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 1362.939791][T25411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1362.942760][T25411] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1362.945912][T25411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1362.948968][T25411] [ 1363.029077][T15728] usb 8-1: USB disconnect, device number 58 [ 1363.653776][ T4773] Bluetooth: hci2: command 0x0406 tx timeout [ 1364.198798][T25423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5541'. [ 1366.447662][T25463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5553'. [ 1367.211213][T25475] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1367.253204][T25476] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1368.078976][T25490] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1369.108095][T25471] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1370.469422][T25513] FAULT_INJECTION: forcing a failure. [ 1370.469422][T25513] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.478497][T25513] CPU: 2 UID: 0 PID: 25513 Comm: syz.1.5565 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1370.483186][T25513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1370.487898][T25513] Call Trace: [ 1370.489374][T25513] [ 1370.490704][T25513] dump_stack_lvl+0x16c/0x1f0 [ 1370.492750][T25513] should_fail_ex+0x497/0x5b0 [ 1370.494751][T25513] should_failslab+0xc2/0x120 [ 1370.496774][T25513] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1370.499100][T25513] ? slab_build_skb+0x46/0x3c0 [ 1370.501198][T25513] slab_build_skb+0x46/0x3c0 [ 1370.503197][T25513] ? sock_init_data_uid+0x7f6/0xa00 [ 1370.505408][T25513] bpf_prog_test_run_skb+0x360/0x2140 [ 1370.507830][T25513] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1370.510440][T25513] ? fput+0x32/0x390 [ 1370.512184][T25513] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1370.514642][T25513] __sys_bpf+0x141f/0x5600 [ 1370.516671][T25513] ? __pfx___sys_bpf+0x10/0x10 [ 1370.518755][T25513] ? ksys_write+0x12f/0x260 [ 1370.520766][T25513] ? find_held_lock+0x2d/0x110 [ 1370.522855][T25513] ? ksys_write+0x21c/0x260 [ 1370.524808][T25513] ? __pfx_lock_release+0x10/0x10 [ 1370.527077][T25513] ? vfs_write+0x14d/0x1140 [ 1370.529067][T25513] ? __mutex_unlock_slowpath+0x164/0x650 [ 1370.531645][T25513] ? fput+0x32/0x390 [ 1370.533400][T25513] ? ksys_write+0x1ab/0x260 [ 1370.535420][T25513] ? __pfx_ksys_write+0x10/0x10 [ 1370.537604][T25513] __ia32_sys_bpf+0x76/0xe0 [ 1370.539631][T25513] __do_fast_syscall_32+0x73/0x120 [ 1370.541896][T25513] do_fast_syscall_32+0x32/0x80 [ 1370.544053][T25513] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1370.546765][T25513] RIP: 0023:0xf7f14579 [ 1370.548546][T25513] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1370.556519][T25513] RSP: 002b:00000000f56c657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1370.559897][T25513] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000240 [ 1370.563375][T25513] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000 [ 1370.566806][T25513] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1370.570245][T25513] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1370.573658][T25513] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1370.577010][T25513] [ 1370.875914][T25518] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1370.942951][T25485] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1371.088960][T25525] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1371.871175][T25537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5571'. [ 1372.822381][T25556] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1373.272730][T25562] FAULT_INJECTION: forcing a failure. [ 1373.272730][T25562] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.280077][T25562] CPU: 3 UID: 0 PID: 25562 Comm: syz.3.5576 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1373.284721][T25562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1373.289338][T25562] Call Trace: [ 1373.290844][T25562] [ 1373.292161][T25562] dump_stack_lvl+0x16c/0x1f0 [ 1373.294375][T25562] should_fail_ex+0x497/0x5b0 [ 1373.296506][T25562] should_failslab+0xc2/0x120 [ 1373.298476][T25562] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1373.300745][T25562] ? slab_build_skb+0x46/0x3c0 [ 1373.302911][T25562] slab_build_skb+0x46/0x3c0 [ 1373.304863][T25562] ? sock_init_data_uid+0x7f6/0xa00 [ 1373.307162][T25562] bpf_prog_test_run_skb+0x360/0x2140 [ 1373.309475][T25562] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1373.312028][T25562] ? fput+0x32/0x390 [ 1373.313711][T25562] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1373.315836][T25562] __sys_bpf+0x141f/0x5600 [ 1373.317753][T25562] ? __pfx___sys_bpf+0x10/0x10 [ 1373.319840][T25562] ? ksys_write+0x12f/0x260 [ 1373.321615][T25562] ? find_held_lock+0x2d/0x110 [ 1373.323473][T25562] ? ksys_write+0x21c/0x260 [ 1373.325353][T25562] ? __pfx_lock_release+0x10/0x10 [ 1373.327312][T25562] ? vfs_write+0x14d/0x1140 [ 1373.329244][T25562] ? __mutex_unlock_slowpath+0x164/0x650 [ 1373.331607][T25562] ? fput+0x32/0x390 [ 1373.333096][T25562] ? ksys_write+0x1ab/0x260 [ 1373.334848][T25562] ? __pfx_ksys_write+0x10/0x10 [ 1373.336738][T25562] __ia32_sys_bpf+0x76/0xe0 [ 1373.338622][T25562] __do_fast_syscall_32+0x73/0x120 [ 1373.340884][T25562] do_fast_syscall_32+0x32/0x80 [ 1373.343072][T25562] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1373.345659][T25562] RIP: 0023:0xf743e579 [ 1373.347448][T25562] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1373.355743][T25562] RSP: 002b:00000000f575657c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 1373.359391][T25562] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000600 [ 1373.362816][T25562] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1373.366214][T25562] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1373.369666][T25562] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1373.373060][T25562] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1373.376008][T25562] [ 1373.900384][T25572] netlink: 'syz.0.5579': attribute type 3 has an invalid length. [ 1373.903863][T25572] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5579'. [ 1373.909754][T25571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5579'. [ 1373.997620][T25572] fuse: Unknown parameter '' [ 1374.569423][T25583] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1375.304696][T25588] netlink: 'syz.0.5582': attribute type 3 has an invalid length. [ 1375.313571][T25588] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5582'. [ 1375.321367][T25590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5583'. [ 1375.408729][T25596] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 1375.498496][T25600] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1375.693627][ T5392] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1375.883800][ T5392] usb 7-1: Using ep0 maxpacket: 8 [ 1375.887503][ T5392] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1375.890969][ T5392] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1375.903509][ T5392] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1375.913754][ T5392] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1375.924248][ T5392] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1375.933827][ T5392] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1375.937323][ T5392] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.150201][T25617] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1376.152359][ T5392] usb 7-1: usb_control_msg returned -32 [ 1376.156829][ T5392] usbtmc 7-1:16.0: can't read capabilities [ 1376.206320][T25619] netlink: 'syz.1.5589': attribute type 3 has an invalid length. [ 1376.209757][T25619] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5589'. [ 1376.225866][T25616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5589'. [ 1376.336911][T25619] fuse: Unknown parameter '' [ 1376.895394][T25634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5592'. [ 1377.077565][T25637] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1377.265488][T25642] netlink: 'syz.0.5594': attribute type 3 has an invalid length. [ 1377.268952][T25642] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5594'. [ 1377.361289][T25644] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 1377.693151][T25652] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1377.734119][T25653] input: syz0 as /devices/virtual/input/input231 [ 1377.998096][T25660] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1378.408861][ T30] usb 7-1: USB disconnect, device number 54 [ 1378.781975][T25672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5601'. [ 1378.881127][T25678] netlink: 'syz.0.5604': attribute type 3 has an invalid length. [ 1378.884527][T25678] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5604'. [ 1378.962665][T25681] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 1379.381033][T25694] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1379.503595][ T5395] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1379.693631][ T5395] usb 5-1: Using ep0 maxpacket: 8 [ 1379.702098][ T5395] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1379.706368][ T5395] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1379.710873][ T5395] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1379.715507][ T5395] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1379.719851][ T5395] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.726115][ T5395] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1379.731223][ T5395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1379.893722][T25658] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1379.964042][ T5395] usb 5-1: usb_control_msg returned -32 [ 1379.967842][ T5395] usbtmc 5-1:16.0: can't read capabilities [ 1380.261152][T25699] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5610'. [ 1381.973706][T25692] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1382.010772][T25717] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1382.217470][T15728] usb 5-1: USB disconnect, device number 50 [ 1382.288804][T25722] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1382.598508][T25735] program syz.1.5620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1382.610161][T25735] FAULT_INJECTION: forcing a failure. [ 1382.610161][T25735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.618522][T25735] CPU: 0 UID: 0 PID: 25735 Comm: syz.1.5620 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1382.622715][T25735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1382.626954][T25735] Call Trace: [ 1382.628258][T25735] [ 1382.629417][T25735] dump_stack_lvl+0x16c/0x1f0 [ 1382.631256][T25735] should_fail_ex+0x497/0x5b0 [ 1382.632966][T25735] _copy_to_user+0x30/0xc0 [ 1382.634566][T25735] simple_read_from_buffer+0xd0/0x160 [ 1382.636518][T25735] proc_fail_nth_read+0x1b0/0x290 [ 1382.638475][T25735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1382.640628][T25735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1382.642800][T25735] vfs_read+0x1d4/0xbd0 [ 1382.644440][T25735] ? __fdget_pos+0xeb/0x180 [ 1382.646223][T25735] ? __pfx_keyctl_instantiate_key_iov+0x10/0x10 [ 1382.648630][T25735] ? __pfx_vfs_read+0x10/0x10 [ 1382.650486][T25735] ? __pfx___mutex_lock+0x10/0x10 [ 1382.652459][T25735] ? __fget_files+0x256/0x400 [ 1382.654326][T25735] ksys_read+0x12f/0x260 [ 1382.656023][T25735] ? __pfx_ksys_read+0x10/0x10 [ 1382.657898][T25735] __do_fast_syscall_32+0x73/0x120 [ 1382.659907][T25735] do_fast_syscall_32+0x32/0x80 [ 1382.661829][T25735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1382.664314][T25735] RIP: 0023:0xf7f14579 [ 1382.665934][T25735] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1382.673323][T25735] RSP: 002b:00000000f56c65b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1382.676593][T25735] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f56c6630 [ 1382.679570][T25735] RDX: 000000000000000f RSI: 00000000f739bff4 RDI: 0000000000000000 [ 1382.682539][T25735] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1382.685421][T25735] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 1382.688362][T25735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1382.691058][T25735] [ 1383.260839][T25746] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1384.254943][ T30] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1384.443559][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 1384.449554][ T30] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1384.453219][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1384.459330][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1384.465346][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1384.470288][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1384.476616][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1384.480766][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.636482][T25763] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1384.697834][ T30] usb 6-1: usb_control_msg returned -32 [ 1384.700380][ T30] usbtmc 6-1:16.0: can't read capabilities [ 1385.040705][T25767] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1385.088639][ T4773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1385.096095][ T4773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1385.100317][ T4773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1385.120031][ T4773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1385.123642][ T4773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1385.126539][ T4773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1385.279365][ T176] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.384863][ T176] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.466755][ T176] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.506228][T25770] chnl_net:caif_netlink_parms(): no params data found [ 1385.624039][ T176] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1385.673362][T25770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.676060][T25770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.678520][T25770] bridge_slave_0: entered allmulticast mode [ 1385.682152][T25770] bridge_slave_0: entered promiscuous mode [ 1385.687835][T25770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.691121][T25770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.695455][T25770] bridge_slave_1: entered allmulticast mode [ 1385.698808][T25770] bridge_slave_1: entered promiscuous mode [ 1385.750716][T25770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.757859][T25770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.829009][T25770] team0: Port device team_slave_0 added [ 1385.872486][T25770] team0: Port device team_slave_1 added [ 1385.959099][ T176] bridge_slave_0: left allmulticast mode [ 1385.961070][ T176] bridge_slave_0: left promiscuous mode [ 1385.963230][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.000950][ T176] veth1_to_bond: left allmulticast mode [ 1386.003488][ T176] veth1_to_bond: left promiscuous mode [ 1386.005997][ T176] bridge26: port 2(veth1_to_bond) entered disabled state [ 1386.011784][ T176] bridge_slave_1: left allmulticast mode [ 1386.015171][ T176] bridge_slave_1: left promiscuous mode [ 1386.017600][ T176] bridge26: port 1(bridge_slave_1) entered disabled state [ 1386.543505][T25761] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1386.944672][T15728] usb 6-1: USB disconnect, device number 48 [ 1387.184451][ T5362] Bluetooth: hci1: command tx timeout [ 1388.526817][T25804] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1388.805046][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1388.820154][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1388.831418][ T176] bond0 (unregistering): Released all slaves [ 1388.848548][ T176] bond1 (unregistering): Released all slaves [ 1388.957917][T25770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.960995][T25770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.972228][T25770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.979400][T25770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.982479][T25770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.994356][T25770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.050184][ T176] tipc: Left network mode [ 1389.253596][ T5362] Bluetooth: hci1: command tx timeout [ 1389.343020][T25770] hsr_slave_0: entered promiscuous mode [ 1389.417209][T25770] hsr_slave_1: entered promiscuous mode [ 1389.422163][T25770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1389.425219][T25770] Cannot create hsr debugfs directory [ 1389.941793][ T176] hsr_slave_0: left promiscuous mode [ 1389.966698][ T176] hsr_slave_1: left promiscuous mode [ 1389.996464][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.002769][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1390.009636][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1390.021734][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1390.205344][ T176] veth1_macvtap: left promiscuous mode [ 1390.208042][ T176] veth0_macvtap: left promiscuous mode [ 1390.210691][ T176] veth1_vlan: left promiscuous mode [ 1390.213055][ T176] veth0_vlan: left promiscuous mode [ 1391.333787][ T5362] Bluetooth: hci1: command tx timeout [ 1391.345684][T25835] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1391.597808][T25836] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1392.168818][ T176] team0 (unregistering): Port device team_slave_1 removed [ 1392.321666][ T176] team0 (unregistering): Port device team_slave_0 removed [ 1393.256348][T25831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1393.423838][ T5362] Bluetooth: hci1: command tx timeout [ 1393.716906][T25849] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1393.844125][T25854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'. [ 1393.995086][T25770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1394.006681][T25770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1394.038678][T25770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1394.058420][T25770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1394.166980][T25770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.197654][T25770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.209527][T25730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.212546][T25730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1394.228352][T15726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.231491][T15726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1394.628467][T25770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.734769][T25770] veth0_vlan: entered promiscuous mode [ 1394.756419][T25770] veth1_vlan: entered promiscuous mode [ 1394.807077][T25770] veth0_macvtap: entered promiscuous mode [ 1394.826423][T25770] veth1_macvtap: entered promiscuous mode [ 1394.869336][T25770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.876271][T25770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.880521][T25770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.887430][T25770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.893724][T25770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.898348][T25770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.902538][T25770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.907472][T25770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.922073][T25770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.939206][T25770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.944243][T25770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.949012][T25770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.953122][T25770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.957615][T25770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.961807][T25770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.966679][T25770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.970579][T25770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.976948][T25770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.986444][T25770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.991087][T25770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.995950][T25770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.999780][T25770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.026455][T25879] netlink: 'syz.2.5651': attribute type 3 has an invalid length. [ 1395.031735][T25879] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5651'. [ 1395.041671][T25879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5651'. [ 1395.099293][T13681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.102451][T13681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.123371][T25879] fuse: Unknown parameter '' [ 1395.156511][T13681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.159594][T13681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.478664][T25886] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1395.681934][ T176] IPVS: stop unused estimator thread 0... [ 1396.587136][T25896] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1396.818101][T25901] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1397.343666][T25882] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1397.530925][T25914] input: syz0 as /devices/virtual/input/input238 [ 1398.079593][T25922] input: syz0 as /devices/virtual/input/input239 [ 1398.210998][T25923] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1398.507127][T25927] input: syz0 as /devices/virtual/input/input240 [ 1399.012375][T25936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1399.173095][T25941] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1399.413801][T25891] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1400.126048][T25960] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1400.587146][T25968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5673'. [ 1400.605444][T25966] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1401.730016][T25979] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1402.054261][T25955] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1403.333909][T26006] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1404.025006][T26014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5685'. [ 1406.351652][T26043] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1406.873077][T26053] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1407.143303][T26058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5698'. [ 1407.958329][T26071] input: syz0 as /devices/virtual/input/input243 [ 1408.006141][T26073] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5703'. [ 1409.119566][T26087] netlink: 'syz.2.5706': attribute type 3 has an invalid length. [ 1409.122885][T26087] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1409.188809][T26086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1409.190043][T26090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5708'. [ 1409.198876][T26089] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1409.280046][T26087] fuse: Unknown parameter '' [ 1409.873633][T26104] netlink: 'syz.1.5710': attribute type 3 has an invalid length. [ 1409.877105][T26104] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1409.889221][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5710'. [ 1410.161119][T26104] fuse: Unknown parameter '' [ 1410.875962][T26123] input: syz0 as /devices/virtual/input/input246 [ 1411.469076][T26132] netlink: 'syz.3.5717': attribute type 3 has an invalid length. [ 1411.472440][T26132] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5717'. [ 1411.518392][T26131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5717'. [ 1411.630089][T26132] fuse: Unknown parameter '' [ 1411.844342][T26135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5718'. [ 1412.101106][T26147] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5719'. [ 1413.027589][T26166] input: syz0 as /devices/virtual/input/input248 [ 1413.935179][T26171] input: syz0 as /devices/virtual/input/input249 [ 1414.584947][T26183] netlink: 'syz.1.5728': attribute type 3 has an invalid length. [ 1414.587780][T26183] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5728'. [ 1414.604823][T26183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5728'. [ 1414.715044][T26183] fuse: Unknown parameter '' [ 1414.838767][T26187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5730'. [ 1415.458431][T26206] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1416.469973][T26226] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1417.110260][T26235] netlink: 'syz.0.5741': attribute type 3 has an invalid length. [ 1417.113400][T26235] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5741'. [ 1417.126367][T26233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5741'. [ 1417.201216][T26238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5740'. [ 1417.244517][T26235] fuse: Unknown parameter '' [ 1417.873022][T26254] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1417.879792][T26253] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1419.695796][T26279] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1420.136253][T26289] netlink: 'syz.3.5752': attribute type 3 has an invalid length. [ 1420.139682][T26289] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5752'. [ 1420.157535][T26287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5752'. [ 1420.430388][T26289] fuse: Unknown parameter '' [ 1420.970294][T26307] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1422.368860][T26325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5761'. [ 1422.591174][T26329] netlink: 'syz.2.5762': attribute type 3 has an invalid length. [ 1422.595019][T26329] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5762'. [ 1422.719854][T26333] fuse: Unknown parameter '' [ 1422.797030][T26338] netlink: 'syz.3.5764': attribute type 3 has an invalid length. [ 1422.800519][T26338] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1422.807046][T26335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5764'. [ 1422.875685][T26338] fuse: Unknown parameter '' [ 1423.017501][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.981207][T26365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1425.025010][T26383] netlink: 'syz.0.5775': attribute type 3 has an invalid length. [ 1425.028498][T26383] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1425.035278][T26382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5775'. [ 1425.121633][T26383] fuse: Unknown parameter '' [ 1425.592309][T26399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5779'. [ 1427.789985][T26424] netlink: 'syz.3.5785': attribute type 3 has an invalid length. [ 1427.794821][T26424] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5785'. [ 1427.805052][T26422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5785'. [ 1427.899627][T26424] fuse: Unknown parameter '' [ 1428.664426][T26439] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1428.705200][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5789'. [ 1428.731727][T26445] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1429.656555][T26457] input: syz0 as /devices/virtual/input/input259 [ 1430.623580][T26433] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1430.805792][T26471] netlink: 'syz.3.5797': attribute type 3 has an invalid length. [ 1430.819053][T26471] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1430.852976][T26470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5797'. [ 1431.063901][T26471] fuse: Unknown parameter '' [ 1431.395593][T26478] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1431.464221][T26484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5799'. [ 1431.773708][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5801'. [ 1432.086204][T26495] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1433.587608][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5811'. [ 1433.827147][T26531] input: syz0 as /devices/virtual/input/input261 [ 1434.465512][ T831] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1434.632777][T26541] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1434.654549][ T831] usb 5-1: Using ep0 maxpacket: 8 [ 1434.662546][ T831] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1434.676538][ T831] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1434.683518][ T831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1434.693671][ T831] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1434.697730][ T831] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1434.733767][ T831] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1434.737815][ T831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.974244][ T831] usb 5-1: usb_control_msg returned -32 [ 1434.983665][ T831] usbtmc 5-1:16.0: can't read capabilities [ 1435.245991][T26550] input: syz0 as /devices/virtual/input/input262 [ 1436.319886][T26567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5822'. [ 1436.992965][T26574] netlink: 'syz.2.5823': attribute type 3 has an invalid length. [ 1436.996743][T26574] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5823'. [ 1437.008300][T26571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5823'. [ 1437.155531][T26574] fuse: Unknown parameter '' [ 1437.182876][T15726] usb 5-1: USB disconnect, device number 51 [ 1439.126494][T26599] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5832'. [ 1439.254653][T26609] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1439.433729][T16643] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1439.623519][T16643] usb 7-1: Using ep0 maxpacket: 8 [ 1439.626771][T16643] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1439.630179][T16643] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1439.636345][T16643] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1439.639932][T16643] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1439.655847][T16643] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1439.661306][T16643] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1439.670432][T16643] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.790841][T15726] IPVS: starting estimator thread 0... [ 1439.884743][T16643] usb 7-1: usb_control_msg returned -32 [ 1439.887434][T16643] usbtmc 7-1:16.0: can't read capabilities [ 1439.893657][T26622] IPVS: using max 18 ests per chain, 43200 per kthread [ 1441.194104][T26644] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1441.879158][T26649] netlink: 'syz.1.5843': attribute type 3 has an invalid length. [ 1441.882640][T26649] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5843'. [ 1441.994135][T26655] fuse: Unknown parameter '' [ 1442.005916][T26651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5844'. [ 1442.158529][T15726] usb 7-1: USB disconnect, device number 55 [ 1442.329792][T26664] netlink: 'syz.1.5845': attribute type 3 has an invalid length. [ 1442.333128][T26664] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5845'. [ 1442.342869][T26662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5845'. [ 1442.467322][T26664] fuse: Unknown parameter '' [ 1443.566674][T26688] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1443.811547][T26695] netlink: 'syz.1.5853': attribute type 3 has an invalid length. [ 1443.814682][T26695] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5853'. [ 1443.911376][T26697] fuse: Unknown parameter '' [ 1444.641640][T26711] input: syz0 as /devices/virtual/input/input267 [ 1445.498312][T26716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5857'. [ 1446.287016][T26739] netlink: 'syz.1.5863': attribute type 3 has an invalid length. [ 1446.290411][T26739] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5863'. [ 1446.357428][T26741] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1446.365990][T26742] fuse: Unknown parameter '' [ 1446.719180][T26754] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1446.944381][T26764] netlink: 'syz.1.5869': attribute type 3 has an invalid length. [ 1446.957479][T26764] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1446.975519][T26767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1447.231762][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5870'. [ 1447.264927][T26764] fuse: Unknown parameter '' [ 1447.998286][T26787] input: syz0 as /devices/virtual/input/input270 [ 1448.867103][T26801] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1449.420350][T26809] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1449.601956][T26812] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1451.344142][T26807] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1451.509249][T26847] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1453.843206][T26883] input: syz0 as /devices/virtual/input/input273 [ 1454.127366][T26887] input: syz0 as /devices/virtual/input/input274 [ 1454.782916][T26897] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1454.902220][T26904] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1455.007162][T26909] netlink: 'syz.0.5910': attribute type 3 has an invalid length. [ 1455.010580][T26909] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5910'. [ 1455.095528][T26911] fuse: Unknown parameter '' [ 1455.743224][T26925] input: syz0 as /devices/virtual/input/input276 [ 1456.853643][T26895] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1457.521392][T26944] input: syz0 as /devices/virtual/input/input277 [ 1458.005921][T26949] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1458.295648][T26954] netlink: 'syz.1.5920': attribute type 3 has an invalid length. [ 1458.303759][T26954] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5920'. [ 1458.383014][T26956] fuse: Unknown parameter '' [ 1459.598487][T26975] input: syz0 as /devices/virtual/input/input279 [ 1460.725195][T26985] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1460.841954][T26990] netlink: 'syz.0.5928': attribute type 3 has an invalid length. [ 1460.846236][T26990] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1460.852259][T26988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5928'. [ 1460.932528][T26990] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 1461.279399][T26996] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1461.602230][T27004] netlink: 'syz.2.5931': attribute type 3 has an invalid length. [ 1461.605964][T27004] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1461.718879][T27009] fuse: Unknown parameter '' [ 1461.732659][T27008] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1462.302509][T27022] input: syz0 as /devices/virtual/input/input282 [ 1462.623549][T26981] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1463.431530][T27034] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1464.407184][T27055] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1464.990967][T27061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5942'. [ 1465.954561][T27077] netlink: 'syz.1.5946': attribute type 3 has an invalid length. [ 1465.957397][T27077] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1465.965936][T27076] input: syz0 as /devices/virtual/input/input284 [ 1465.977896][T27074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1466.076848][T27077] fuse: Unknown parameter '' [ 1466.120354][T27082] netlink: 'syz.2.5948': attribute type 3 has an invalid length. [ 1466.123946][T27082] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5948'. [ 1466.216922][T27085] fuse: Unknown parameter '' [ 1466.458142][T27090] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1466.635895][T27097] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1467.358249][T27110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5953'. [ 1467.444745][T27113] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1468.022972][T27126] netlink: 'syz.2.5957': attribute type 3 has an invalid length. [ 1468.026496][T27126] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5957'. [ 1468.033268][T27124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5957'. [ 1468.064049][T27127] netlink: 'syz.0.5958': attribute type 3 has an invalid length. [ 1468.070649][T27127] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5958'. [ 1468.116948][T27126] fuse: Unknown parameter '' [ 1468.168009][T27130] fuse: Unknown parameter '' [ 1468.669748][T27139] input: syz0 as /devices/virtual/input/input291 [ 1469.128420][T27146] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1469.649023][T27156] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1470.125754][T27161] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1470.446751][T27165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5965'. [ 1470.678042][T27172] netlink: 'syz.2.5967': attribute type 3 has an invalid length. [ 1470.681272][T27172] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5967'. [ 1470.689419][T27170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5967'. [ 1470.784964][T27172] fuse: Unknown parameter '' [ 1471.212290][T27181] netlink: 'syz.3.5969': attribute type 3 has an invalid length. [ 1471.216300][T27181] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5969'. [ 1471.369071][T27183] fuse: Unknown parameter '' [ 1472.078183][T27196] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1472.352271][T27205] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1472.652047][T27213] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1472.658206][T27214] netlink: 'syz.0.5976': attribute type 3 has an invalid length. [ 1472.661092][T27214] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5976'. [ 1472.700666][T27214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5976'. [ 1472.867558][T27214] fuse: Unknown parameter '' [ 1473.302018][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5977'. [ 1473.721743][T27236] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1473.856109][T27241] netlink: 'syz.2.5982': attribute type 3 has an invalid length. [ 1473.859626][T27241] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5982'. [ 1473.953694][T27243] fuse: Unknown parameter '' [ 1474.252980][T27258] netlink: 'syz.1.5986': attribute type 3 has an invalid length. [ 1474.263685][T27258] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5986'. [ 1474.275333][T27256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5986'. [ 1474.414093][T27264] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1474.430938][T27258] fuse: Unknown parameter '' [ 1474.884843][T27271] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1475.099906][T27278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5991'. [ 1475.149694][T27285] netlink: 'syz.2.5993': attribute type 3 has an invalid length. [ 1475.153033][T27285] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5993'. [ 1475.233176][T27287] fuse: Unknown parameter '' [ 1476.373526][T27260] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1476.573480][T27313] netlink: 'syz.2.6002': attribute type 3 has an invalid length. [ 1476.578900][T27313] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6002'. [ 1476.603793][T27314] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1476.685540][T27321] fuse: Unknown parameter '' [ 1476.751512][T27324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6004'. [ 1478.444533][T24894] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1478.564408][ T39] audit: type=1326 audit(1722300481.346:4180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27361 comm="syz.2.6014" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 1478.623554][T24894] usb 6-1: Using ep0 maxpacket: 8 [ 1478.635074][T24894] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1478.638282][T24894] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1478.642139][T24894] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1478.653519][T24894] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1478.657619][T24894] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1478.663050][T24894] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1478.683499][T24894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.807526][T27365] fuse: Unknown parameter '' [ 1478.954763][T24894] usb 6-1: usb_control_msg returned -32 [ 1478.963527][T24894] usbtmc 6-1:16.0: can't read capabilities [ 1479.471439][T27376] netlink: 'syz.3.6015': attribute type 3 has an invalid length. [ 1479.478028][T27376] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6015'. [ 1479.493125][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6015'. [ 1479.542602][T27378] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1479.636108][T27376] fuse: Unknown parameter '' [ 1479.939921][T27385] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1480.089118][T27391] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1481.150461][ T25] usb 6-1: USB disconnect, device number 49 [ 1481.504433][T27373] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1481.549590][T27415] netlink: 'syz.2.6025': attribute type 3 has an invalid length. [ 1481.552229][T27415] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6025'. [ 1481.658438][T27419] fuse: Unknown parameter '' [ 1482.160806][ T39] audit: type=1326 audit(1722300484.926:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27426 comm="syz.0.6027" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x0 [ 1482.394969][T27428] fuse: Unknown parameter '' [ 1482.711784][T27438] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6028'. [ 1483.141255][T27442] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1483.509721][T27455] input: syz0 as /devices/virtual/input/input306 [ 1484.469098][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.906703][T27473] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1485.211076][T27475] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1485.309901][ T39] audit: type=1326 audit(1722300488.086:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27478 comm="syz.3.6037" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x0 [ 1485.498024][T27486] fuse: Unknown parameter '' [ 1486.560605][T27501] input: syz0 as /devices/virtual/input/input308 [ 1486.853684][T27471] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1487.406700][T27508] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1487.900482][T27525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6047'. [ 1488.505529][T27531] fuse: Unknown parameter '' [ 1488.951303][T27538] netlink: 'syz.1.6050': attribute type 3 has an invalid length. [ 1488.954767][T27538] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6050'. [ 1489.101677][T27540] fuse: Unknown parameter '' [ 1489.672693][T27552] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1490.149433][T27554] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1490.517282][T27566] input: syz0 as /devices/virtual/input/input311 [ 1490.571820][T27565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6057'. [ 1490.863008][T27575] netlink: 'syz.0.6060': attribute type 3 has an invalid length. [ 1490.867310][T27575] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6060'. [ 1490.979202][T27577] fuse: Unknown parameter '' [ 1491.319717][T27586] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1491.587405][T27548] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1492.452920][T27610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6066'. [ 1492.534081][T27609] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1492.787889][T15728] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1492.973626][T15728] usb 7-1: Using ep0 maxpacket: 8 [ 1492.982489][T15728] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1492.987952][T15728] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1492.992323][T15728] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1492.996793][T15728] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1493.001224][T15728] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1493.008940][T15728] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1493.012807][T15728] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.451531][T15728] usb 7-1: usb_control_msg returned -32 [ 1493.454852][T15728] usbtmc 7-1:16.0: can't read capabilities [ 1493.707567][T27622] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1494.305901][T27628] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1494.860730][T27638] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1495.459127][ T5393] usb 7-1: USB disconnect, device number 56 [ 1495.541040][T27649] input: syz0 as /devices/virtual/input/input313 [ 1495.641960][T27655] netlink: 'syz.3.6079': attribute type 3 has an invalid length. [ 1495.661369][T27655] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6079'. [ 1495.663718][T27656] input: syz0 as /devices/virtual/input/input314 [ 1495.672738][T27654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6079'. [ 1495.779042][T27655] fuse: Unknown parameter '' [ 1496.228121][T27665] fuse: Unknown parameter '' [ 1496.786775][T27636] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1496.810680][T27672] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1497.086476][T27683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6083'. [ 1497.532401][T27689] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1498.320490][T27698] netlink: 'syz.0.6088': attribute type 3 has an invalid length. [ 1498.323562][ T5393] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1498.328069][T27698] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6088'. [ 1498.334516][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6088'. [ 1498.441035][T27698] fuse: Unknown parameter '' [ 1498.513662][ T5393] usb 7-1: Using ep0 maxpacket: 8 [ 1498.522785][ T5393] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1498.538027][ T5393] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1498.553573][ T5393] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1498.560671][ T5393] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1498.574099][ T5393] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1498.581816][ T5393] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1498.588053][ T5393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.258713][T27709] input: syz0 as /devices/virtual/input/input318 [ 1499.364034][ T5393] usb 7-1: usb_control_msg returned -32 [ 1499.367137][ T5393] usbtmc 7-1:16.0: can't read capabilities [ 1499.700994][T27718] fuse: Unknown parameter '' [ 1499.953483][T27721] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1500.270969][T27729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6093'. [ 1500.322791][T27737] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1500.400433][T27739] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1501.015377][ T5395] usb 7-1: USB disconnect, device number 57 [ 1501.181570][T27751] netlink: 'syz.2.6098': attribute type 3 has an invalid length. [ 1501.189082][T27751] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6098'. [ 1501.201746][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6098'. [ 1501.339169][T27751] fuse: Unknown parameter '' [ 1501.906197][T27760] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1502.088060][T27767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6100'. [ 1502.223602][T27731] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1502.829032][T27772] fuse: Unknown parameter '' [ 1503.441519][T27783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6104'. [ 1504.206179][T27792] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1504.226101][T27794] input: syz0 as /devices/virtual/input/input322 [ 1505.031810][T27804] netlink: 'syz.2.6108': attribute type 3 has an invalid length. [ 1505.035009][T27804] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6108'. [ 1505.042973][T27802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6108'. [ 1505.135708][T27804] fuse: Unknown parameter '' [ 1505.786344][T27817] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1505.993409][T27825] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1506.208590][T27835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6116'. [ 1506.750687][T27842] netlink: 'syz.3.6118': attribute type 3 has an invalid length. [ 1506.754301][T27842] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6118'. [ 1506.760395][T27841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6118'. [ 1506.851389][T27842] fuse: Unknown parameter '' [ 1507.663920][T27811] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1509.319511][T27867] input: syz0 as /devices/virtual/input/input325 [ 1509.403781][T27869] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1509.545400][T27877] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1509.824347][T27882] netlink: 'syz.1.6127': attribute type 3 has an invalid length. [ 1509.827674][T27882] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6127'. [ 1509.834856][T27879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6127'. [ 1509.956704][T27882] fuse: Unknown parameter '' [ 1510.137607][T27888] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1510.425043][T27897] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1511.493722][T27871] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1511.696114][T27909] fuse: Unknown parameter '' [ 1511.955068][T27914] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1512.144001][T27886] Bluetooth: hci1: command 0x0406 tx timeout [ 1512.783644][T27928] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1513.089599][T27936] netlink: 'syz.2.6139': attribute type 3 has an invalid length. [ 1513.092992][T27936] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1513.103246][T27933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6139'. [ 1513.198692][T27936] fuse: Unknown parameter '' [ 1513.280080][T27893] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1513.475469][T27954] fuse: Unknown parameter '' [ 1513.667190][T27955] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1513.853672][T27960] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1514.354514][ T5395] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1514.553739][ T5395] usb 5-1: Using ep0 maxpacket: 8 [ 1514.566917][ T5395] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1514.570450][ T5395] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1514.584818][ T5395] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1514.597695][ T5395] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1514.603245][ T5395] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1514.614860][ T5395] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1514.619079][ T5395] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.865947][ T5395] usb 5-1: usb_control_msg returned -32 [ 1514.868159][ T5395] usbtmc 5-1:16.0: can't read capabilities [ 1516.040664][T27997] netlink: 'syz.1.6153': attribute type 3 has an invalid length. [ 1516.044918][T27997] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6153'. [ 1516.053292][T27996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6153'. [ 1516.152962][T27997] fuse: Unknown parameter '' [ 1516.588803][T28004] fuse: Unknown parameter '' [ 1516.968632][ T5395] usb 5-1: USB disconnect, device number 52 [ 1517.037803][T28010] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1517.093718][T27989] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1518.541812][T28042] netlink: 'syz.2.6162': attribute type 3 has an invalid length. [ 1518.545426][T28042] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1518.551715][T28040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1518.646804][T28042] fuse: Unknown parameter '' [ 1519.077419][T28053] fuse: Unknown parameter '' [ 1519.823751][ T831] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1520.014443][ T831] usb 6-1: Using ep0 maxpacket: 8 [ 1520.018648][ T831] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1520.021580][ T831] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1520.032845][ T831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1520.043659][ T831] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1520.063685][ T831] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1520.068548][ T831] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1520.072613][ T831] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.355157][ T831] usb 6-1: usb_control_msg returned -32 [ 1520.360148][ T831] usbtmc 6-1:16.0: can't read capabilities [ 1520.825069][T28073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1521.488476][T28077] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1521.786087][T28085] netlink: 'syz.3.6172': attribute type 3 has an invalid length. [ 1521.789345][T28085] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6172'. [ 1521.796522][T28084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6172'. [ 1521.893061][T28085] fuse: Unknown parameter '' [ 1522.293804][T28063] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1522.509565][T20009] usb 6-1: USB disconnect, device number 50 [ 1522.633917][T28097] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1522.932918][T28110] netlink: 'syz.1.6176': attribute type 3 has an invalid length. [ 1522.943594][T28110] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6176'. [ 1522.951314][T28106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6176'. [ 1523.053032][T28110] fuse: Unknown parameter 'ÿÿ' [ 1523.078272][T28108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6177'. [ 1523.120995][T28116] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1523.125795][T28113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6178'. [ 1523.467552][T28130] netlink: 'syz.1.6181': attribute type 3 has an invalid length. [ 1523.471194][T28130] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6181'. [ 1523.572160][T28130] fuse: Unknown parameter '' [ 1524.023646][T20009] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1524.143009][T28141] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1524.223657][T20009] usb 7-1: Using ep0 maxpacket: 8 [ 1524.231325][T20009] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1524.246430][T20009] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1524.262880][T20009] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1524.294960][T20009] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1524.305961][T20009] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1524.318019][T20009] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1524.326245][T20009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.645685][T20009] usb 7-1: usb_control_msg returned -32 [ 1524.661754][T20009] usbtmc 7-1:16.0: can't read capabilities [ 1525.385264][T28157] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1526.613588][T28146] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1526.725255][T28174] __nla_validate_parse: 1 callbacks suppressed [ 1526.725266][T28174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6191'. [ 1526.743506][T20009] usb 7-1: USB disconnect, device number 58 [ 1527.242843][T28180] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1527.806654][T28196] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6196'. [ 1527.837021][T28197] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1528.359694][T28206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6199'. [ 1528.753711][T20009] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1528.943654][T20009] usb 5-1: Using ep0 maxpacket: 8 [ 1528.947986][T20009] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1528.951023][T20009] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1528.955377][T20009] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1528.959391][T20009] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1528.963639][T20009] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1528.968615][T20009] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1528.972279][T20009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.188012][T20009] usb 5-1: usb_control_msg returned -32 [ 1529.190842][T20009] usbtmc 5-1:16.0: can't read capabilities [ 1531.023548][T28213] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1531.468157][T24894] usb 5-1: USB disconnect, device number 53 [ 1531.554229][T20009] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1531.725601][T28243] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1531.763536][T20009] usb 8-1: Using ep0 maxpacket: 8 [ 1531.767892][T20009] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1531.774540][T20009] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1531.778851][T20009] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1531.800725][T20009] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1531.806404][T20009] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1531.812198][T20009] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1531.816906][T20009] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1532.070335][T20009] usb 8-1: usb_control_msg returned -32 [ 1532.074771][T20009] usbtmc 8-1:16.0: can't read capabilities [ 1532.315252][T28251] netlink: 'syz.1.6211': attribute type 3 has an invalid length. [ 1532.318176][T28251] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6211'. [ 1532.324695][T28250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6211'. [ 1532.424077][T28251] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 1532.846004][T28270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6213'. [ 1533.051751][T28273] input: syz0 as /devices/virtual/input/input341 [ 1534.257581][ T5393] usb 8-1: USB disconnect, device number 59 [ 1534.667748][T28295] netlink: 'syz.0.6221': attribute type 3 has an invalid length. [ 1534.671092][T28295] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6221'. [ 1534.676313][T28294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6221'. [ 1534.753655][T28295] fuse: Unknown parameter '' [ 1535.441953][T28310] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1535.975499][T28282] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1536.578193][T28331] netlink: 'syz.2.6230': attribute type 3 has an invalid length. [ 1536.581842][T28331] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1536.587216][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6230'. [ 1536.664422][T15728] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1536.686335][T28331] fuse: Unknown parameter '' [ 1536.843609][T15728] usb 5-1: Using ep0 maxpacket: 8 [ 1536.859647][T15728] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1536.863141][T15728] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1536.870835][T15728] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1536.875314][T15728] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1536.878774][T15728] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1536.883182][T15728] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1536.892868][T15728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.153735][T15728] usb 5-1: usb_control_msg returned -32 [ 1537.156147][T15728] usbtmc 5-1:16.0: can't read capabilities [ 1537.795847][T28356] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1537.826372][T28359] netlink: 'syz.1.6236': attribute type 3 has an invalid length. [ 1537.829822][T28359] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6236'. [ 1537.843056][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6236'. [ 1538.040636][T28359] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 1538.399355][T28364] input: syz0 as /devices/virtual/input/input347 [ 1539.382164][ T5393] usb 5-1: USB disconnect, device number 54 [ 1539.388835][T28378] netlink: 'syz.2.6240': attribute type 3 has an invalid length. [ 1539.393198][T28378] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1539.399310][T28378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6240'. [ 1539.531332][T28378] fuse: Unknown parameter '' [ 1540.676689][T28400] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1540.814975][T28404] input: syz0 as /devices/virtual/input/input350 [ 1541.044262][T28406] input: syz0 as /devices/virtual/input/input351 [ 1541.633237][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6248'. [ 1541.863328][T28424] netlink: 'syz.3.6251': attribute type 3 has an invalid length. [ 1541.866979][T28424] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6251'. [ 1541.872072][T28424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6251'. [ 1541.956706][T28424] fuse: Unknown parameter '' [ 1543.409954][T28440] input: syz0 as /devices/virtual/input/input354 [ 1543.693611][T28445] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1544.100961][T28457] input: syz0 as /devices/virtual/input/input355 [ 1544.224041][T28460] netlink: 'syz.3.6261': attribute type 3 has an invalid length. [ 1544.227485][T28460] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6261'. [ 1544.234046][T28459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6261'. [ 1544.334239][T28460] fuse: Unknown parameter '' [ 1544.490423][T28464] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1545.900257][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.315131][T28496] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1547.674974][T28505] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1549.062307][T28528] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1549.429798][T28535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6277'. [ 1550.024224][T28543] input: syz0 as /devices/virtual/input/input358 [ 1550.458248][T28556] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1552.514880][T28579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6289'. [ 1552.538484][T28584] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1553.291387][T28598] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1555.013661][T28591] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1555.567331][T28626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6299'. [ 1555.671640][T28631] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1556.358730][T28641] input: syz0 as /devices/virtual/input/input361 [ 1558.350389][T28672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6311'. [ 1558.639305][T28677] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1558.719122][T28680] input: syz0 as /devices/virtual/input/input363 [ 1560.255546][T28704] netlink: 'syz.2.6319': attribute type 3 has an invalid length. [ 1560.271867][T28704] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6319'. [ 1560.521496][T28711] fuse: Unknown parameter '' [ 1561.381082][T28719] input: syz0 as /devices/virtual/input/input365 [ 1561.747927][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6323'. [ 1561.844411][T28727] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 1561.964392][T28733] netlink: 'syz.1.6325': attribute type 3 has an invalid length. [ 1561.967659][T28733] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1561.973869][T28732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6325'. [ 1562.057566][T28733] fuse: Unknown parameter '' [ 1563.366215][T28744] ------------[ cut here ]------------ [ 1563.369930][T28744] WARNING: CPU: 1 PID: 28744 at mm/page_table_check.c:207 __page_table_check_ptes_set+0x2fa/0x3e0 [ 1563.374526][T28744] Modules linked in: [ 1563.376095][T28744] CPU: 1 UID: 0 PID: 28744 Comm: syz.1.6329 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1563.382421][T28744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1563.387543][T28744] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 1563.390511][T28744] Code: e9 91 fe ff ff e8 46 48 97 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 65 43 97 ff 48 85 ed 0f 84 85 00 00 00 e8 27 48 97 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 19 48 97 ff eb 69 cc cc cc e8 0f 48 97 [ 1563.399298][T28744] RSP: 0018:ffffc9000406fa28 EFLAGS: 00010293 [ 1563.402021][T28744] RAX: 0000000000000000 RBX: ffff888046d1c000 RCX: ffffffff81f3c98b [ 1563.405648][T28744] RDX: ffff88801b698000 RSI: ffffffff81f3c999 RDI: 0000000000000007 [ 1563.409189][T28744] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1563.412615][T28744] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 1563.416453][T28744] R13: ffff88801d1eaf80 R14: 0000000000000001 R15: 1ffff9200080df47 [ 1563.419918][T28744] FS: 0000000000000000(0000) GS:ffff88802c100000(0063) knlGS:00000000565da440 [ 1563.424023][T28744] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1563.426906][T28744] CR2: 0000000056bb74c0 CR3: 00000000569f8000 CR4: 0000000000352ef0 [ 1563.430443][T28744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1563.434031][T28744] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1563.437728][T28744] Call Trace: [ 1563.439228][T28744] [ 1563.440499][T28744] ? show_regs+0x8c/0xa0 [ 1563.442398][T28744] ? __warn+0xe5/0x3c0 [ 1563.444511][T28744] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 1563.447183][T28744] ? report_bug+0x3c0/0x580 [ 1563.449293][T28744] ? handle_bug+0x3d/0x70 [ 1563.451199][T28744] ? exc_invalid_op+0x17/0x50 [ 1563.453612][T28744] ? asm_exc_invalid_op+0x1a/0x20 [ 1563.455934][T28744] ? __page_table_check_ptes_set+0x2eb/0x3e0 [ 1563.458627][T28744] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 1563.461311][T28744] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 1563.464174][T28744] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 1563.467023][T28744] ? find_held_lock+0x2d/0x110 [ 1563.469183][T28744] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1563.472040][T28744] ? rcu_read_unlock+0x17/0x60 [ 1563.474256][T28744] set_ptes.constprop.0+0x193/0x1d0 [ 1563.476709][T28744] ? __pfx_set_ptes.constprop.0+0x10/0x10 [ 1563.479240][T28744] do_swap_page+0x1214/0x3dc0 [ 1563.481344][T28744] ? __pfx_do_swap_page+0x10/0x10 [ 1563.483648][T28744] ? pte_offset_map_nolock+0xfe/0x1c0 [ 1563.486204][T28744] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 1563.488888][T28744] __handle_mm_fault+0x146b/0x5360 [ 1563.491230][T28744] ? __pfx_mt_find+0x10/0x10 [ 1563.493298][T28744] ? rwsem_read_trylock+0x6d/0x250 [ 1563.495817][T28744] ? __pfx___handle_mm_fault+0x10/0x10 [ 1563.498263][T28744] ? find_vma+0xc0/0x140 [ 1563.500142][T28744] ? __pfx_find_vma+0x10/0x10 [ 1563.502230][T28744] handle_mm_fault+0x44e/0x7b0 [ 1563.504450][T28744] ? __pkru_allows_pkey+0x52/0xb0 [ 1563.506717][T28744] do_user_addr_fault+0x7a3/0x13f0 [ 1563.509009][T28744] exc_page_fault+0x5c/0xc0 [ 1563.510984][T28744] asm_exc_page_fault+0x26/0x30 [ 1563.513171][T28744] RIP: 0023:0xf720f7f1 [ 1563.513755][T28759] input: syz0 as /devices/virtual/input/input367 [ 1563.515200][T28744] Code: 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 66 a5 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 8b 44 24 0c 39 44 24 [ 1563.526377][T28744] RSP: 002b:00000000ffe2593c EFLAGS: 00010202 [ 1563.529114][T28744] RAX: 0000000000000000 RBX: 00000000f739bff4 RCX: 0000000000000002 [ 1563.532615][T28744] RDX: 0000000000000008 RSI: 00000000f6cd036e RDI: 00000000200002c0 [ 1563.536256][T28744] RBP: 00000000ffe25bc8 R08: 0000000000000000 R09: 0000000000000000 [ 1563.540078][T28744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1563.543889][T28744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1563.547417][T28744] [ 1563.548882][T28744] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1563.552043][T28744] CPU: 1 UID: 0 PID: 28744 Comm: syz.1.6329 Not tainted 6.11.0-rc1-syzkaller-00042-g6b5faec9f564 #0 [ 1563.556745][T28744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1563.561421][T28744] Call Trace: [ 1563.562920][T28744] [ 1563.564257][T28744] dump_stack_lvl+0x3d/0x1f0 [ 1563.566357][T28744] panic+0x6f5/0x7a0 [ 1563.568120][T28744] ? __pfx_panic+0x10/0x10 [ 1563.570095][T28744] ? show_trace_log_lvl+0x363/0x500 [ 1563.572423][T28744] ? check_panic_on_warn+0x1f/0xb0 [ 1563.574689][T28744] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 1563.577283][T28744] check_panic_on_warn+0xab/0xb0 [ 1563.579494][T28744] __warn+0xf1/0x3c0 [ 1563.581201][T28744] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 1563.583843][T28744] report_bug+0x3c0/0x580 [ 1563.585800][T28744] handle_bug+0x3d/0x70 [ 1563.587614][T28744] exc_invalid_op+0x17/0x50 [ 1563.589635][T28744] asm_exc_invalid_op+0x1a/0x20 [ 1563.591770][T28744] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 1563.594632][T28744] Code: e9 91 fe ff ff e8 46 48 97 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 65 43 97 ff 48 85 ed 0f 84 85 00 00 00 e8 27 48 97 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 19 48 97 ff eb 69 cc cc cc e8 0f 48 97 [ 1563.602346][T28744] RSP: 0018:ffffc9000406fa28 EFLAGS: 00010293 [ 1563.605049][T28744] RAX: 0000000000000000 RBX: ffff888046d1c000 RCX: ffffffff81f3c98b [ 1563.608451][T28744] RDX: ffff88801b698000 RSI: ffffffff81f3c999 RDI: 0000000000000007 [ 1563.611624][T28744] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 1563.615043][T28744] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 1563.618499][T28744] R13: ffff88801d1eaf80 R14: 0000000000000001 R15: 1ffff9200080df47 [ 1563.622061][T28744] ? __page_table_check_ptes_set+0x2eb/0x3e0 [ 1563.624673][T28744] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 1563.627253][T28744] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 1563.629882][T28744] ? find_held_lock+0x2d/0x110 [ 1563.631829][T28744] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1563.634456][T28744] ? rcu_read_unlock+0x17/0x60 [ 1563.636539][T28744] set_ptes.constprop.0+0x193/0x1d0 [ 1563.638779][T28744] ? __pfx_set_ptes.constprop.0+0x10/0x10 [ 1563.641600][T28744] do_swap_page+0x1214/0x3dc0 [ 1563.643401][T28744] ? __pfx_do_swap_page+0x10/0x10 [ 1563.645635][T28744] ? pte_offset_map_nolock+0xfe/0x1c0 [ 1563.647974][T28744] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 1563.650518][T28744] __handle_mm_fault+0x146b/0x5360 [ 1563.652819][T28744] ? __pfx_mt_find+0x10/0x10 [ 1563.654879][T28744] ? rwsem_read_trylock+0x6d/0x250 [ 1563.657121][T28744] ? __pfx___handle_mm_fault+0x10/0x10 [ 1563.659532][T28744] ? find_vma+0xc0/0x140 [ 1563.661408][T28744] ? __pfx_find_vma+0x10/0x10 [ 1563.663473][T28744] handle_mm_fault+0x44e/0x7b0 [ 1563.665588][T28744] ? __pkru_allows_pkey+0x52/0xb0 [ 1563.667810][T28744] do_user_addr_fault+0x7a3/0x13f0 [ 1563.670069][T28744] exc_page_fault+0x5c/0xc0 [ 1563.672113][T28744] asm_exc_page_fault+0x26/0x30 [ 1563.674257][T28744] RIP: 0023:0xf720f7f1 [ 1563.676059][T28744] Code: 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 66 a5 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 8b 44 24 0c 39 44 24 [ 1563.684445][T28744] RSP: 002b:00000000ffe2593c EFLAGS: 00010202 [ 1563.687109][T28744] RAX: 0000000000000000 RBX: 00000000f739bff4 RCX: 0000000000000002 [ 1563.690537][T28744] RDX: 0000000000000008 RSI: 00000000f6cd036e RDI: 00000000200002c0 [ 1563.693966][T28744] RBP: 00000000ffe25bc8 R08: 0000000000000000 R09: 0000000000000000 [ 1563.697451][T28744] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1563.700873][T28744] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1563.704340][T28744] [ 1563.706401][T28744] Kernel Offset: disabled [ 1563.708927][T28744] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:49:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffed100384ba6b RCX=0000000000000021 RDX=fffffbfff28b60e0 RSI=0000000000000008 RDI=ffffffff945b06c0 RBP=0000000000000021 RSP=ffffc90002e5f330 R8 =0000000000000000 R9 =0000000000000006 R10=ffffffff945b06ff R11=0000000000000002 R12=dffffc0000000000 R13=0000000000000001 R14=0000000000000003 R15=ffff88801c25c880 RIP=ffffffff81e9a510 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200002c0 CR3=00000000569f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa18d5 RDI=ffffffff951173c0 RBP=ffffffff95117380 RSP=ffffc9000406f400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000050 R14=ffffffff84fa1870 R15=0000000000000000 RIP=ffffffff84fa18ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c100000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000056bb74c0 CR3=00000000569f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000089bbf9 RBX=0000000000000002 RCX=ffffffff8b05da19 RDX=0000000000000000 RSI=ffffffff8b4cd060 RDI=ffffffff8bb048e0 RBP=ffffed1002d63000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed1005846fd9 R10=ffff88802c237ecb R11=0000000000000000 R12=0000000000000002 R13=ffff888016b18000 R14=ffffffff9010f198 R15=0000000000000000 RIP=ffffffff8b05ee0f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000006a7ec000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffffea0001792500 RCX=ffffffff81c2518c RDX=ffff888062320000 RSI=ffffffff81c2519a RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc90002a5f1f8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88805952b040 R13=0000000000050101 R14=0000000000000001 R15=ffff88807ffd6000 RIP=ffffffff81c2519a RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f743ebe0 CR3=00000000277e0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000040 Opmask01=0000000000080000 Opmask02=0000000000010000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4450b990 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69705f6b63642063 5f616662000a3065 3361302f5f203230 302b632e6b5f6565 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000