last executing test programs: 5.190138877s ago: executing program 0 (id=2129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x3}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000003c0)="2f48978bee51fc6bdeb9b9120692afcf2647db14dae39fa4b05153d2", 0x1c}, {&(0x7f00000005c0)="febb35cfab7c65288e67f82820b0def8263982122c6ed7c023711639763c86ecf3adaecc7960b5cfccdc2c12ec37f4082d01bc7c9f436af47de0f0900e094ed7f3", 0x41}, {&(0x7f00000006c0)="fc15fbe5f91439fa5e44ad4afbb36eb6644d34790c407e8e9c4e8f21c42a707391b232463b82245a90b9fe8fb6a90891591e024cf7688d59e30c22fdccdcaf73e8eb1bf30ec18a406eff0198d0442b8b68c31534ed5c9e7c7aa429dcc25d25670a7b894477743ed1760356610a5efedd813f95b64e27add2a802ff546299110ad1f114e5e5e2f3e2e3019c1fbdbd5024f40f1ccf031cdc168b4a84d85ec1ca0693a66dbdb2b83f456b1a44f456e69eac7b2de31b80185567d7b7c2d5526add", 0xbf}, {&(0x7f0000000940)="24d99d6283fe96f1daa245a2eb6f6269cdf0ec1fdf4c1edd6ea18e1150f18d759ea7db55c89be83a7c388af77f0984ffb38f119b159a00def12d4a2435b0f30e3b73cc1c11f96d458450e0d51af2abf1dc4a147709cb0332691230da32840b00389104918c8c697bbf76aa75073b36ca62489576c16f5d3a83ba0ac6077353a33f95429aea177d448b36ecea24bf3968a69ec92d2861bb0f5bbac2b1a52cdb55b6fb83cd95da5d0c296c59dfd1e1e3dd4ffc55f86d34ca2afc1d9d74f23c7319579b369bd054f018d9ed6994105f29ed54b20a32df3b2ee6f77c085300c7fdd703e311c5381732b82f", 0xe9}, {&(0x7f0000000a40)="97eaaec8d2795e537b2a830bebd414bc0738cfd147ef15637b617199b5b8525d8f0c3d072099b964f4b9be0d7f27e8da1d98976fc554a29af5309b116b173e5fadb95295af2531377213de", 0x4b}], 0x5, &(0x7f0000000c00)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r1, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0x74, 0x40080}}], 0x1, 0x40884) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4.270199886s ago: executing program 0 (id=2133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=""/6, 0x200000, 0x800, 0x0, 0x2}, 0x1c) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x1a, r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r5, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) readv(r5, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r5, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1000}]}, 0x2c}}, 0x20000000) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000080)=0x1, 0x12) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0x541b, &(0x7f0000000200)={0xffffffffffffffff}) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r12, r14, 0x25, 0x2, @void}, 0x10) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="1ce50400", @ANYRES16=r1, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x4010) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.219454574s ago: executing program 1 (id=2134): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x8, 0xfb, 0x7b1, @vifc_lcl_ifindex=r2, @empty}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0xffc3, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="940000001100010026bd7000fcdbdf2500000000", @ANYRES32=r2], 0x94}, 0x1, 0x0, 0x0, 0x4091}, 0x20000000) 4.0559911s ago: executing program 1 (id=2135): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x16900) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x80000000, 0xfffffff3, 0x2036315a, 0x9, 0x4, 0x101, 0x6, 0x59, 0x0, 0x4, 0x1, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0xd8}}, 0x20008004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000cc0)={@multicast1, @multicast2, 0x0}, &(0x7f0000000d00)=0xc) sendmmsg$inet6(r4, &(0x7f0000003f80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x6, @private1, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000240)="6bb4bfa3e1a210004551e9f72081bc62bbf6248b5c2c73d6efe176bd2bc055768ec2c8df3c47bec6975ce8bb245984d5063b3bc997e81493c8a6ee7f673a60f4754615174ad6b98e23cd796e49721c4ef0f28a29f6658722a0f463ed14ecdb5deeb7061f6adfa0dd12a9e000326f11fd19bbca2f4063fc6e38d89ae857d73139e3d449999de652fb7dc04896de38a6bca1c99d2bfbddaba8af5ecef9dfa868421f3c6e3b2f3e3ee6f227", 0xaa}, {0x0}, {&(0x7f0000000580)="dbaaadacf69e6a8b762701b69abe92be69cab28c340c67e3b3a028c3cee37952f83cf0615a741a706359f59f43ec19715f570569d295d1e44066f63de6674d7745e9b7304cef2bfefc4a0bf240bfd76dd316798f505cea2338a4a01dca44b917d99727e5957c114f01e2a339cf3e0e6e470f8d9f085926c00e8843453a59d18a23a1989f0e07f91e593b02803e51dff5dcaac5ee23db4fd846a48dd3941a902679c69b87966175163b037c94dbdd3b8f35d7284e75fa1838ac36e4be937c96868aa68cc9b5970e137868867ca0fc5901d26b6bf51428b4ade22c9ec5636f", 0xde}], 0x3, &(0x7f0000001140)=[@pktinfo={{0x20, 0x29, 0x32, {@remote}}}, @hoplimit={{0x10, 0x29, 0x34, 0xfff}}, @dstopts_2292={{0x24, 0x29, 0x4, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffff}]}}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x3b, 0x6, 0x2, 0x81, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @remote, @rand_addr=' \x01\x00']}}}, @hoplimit={{0x10, 0x29, 0x34, 0x4}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @pktinfo={{0x20, 0x29, 0x32, {@private0, r8}}}], 0xd8}}, {{&(0x7f00000003c0)={0xa, 0x0, 0x7, @remote, 0x9}, 0x1c, &(0x7f00000004c0), 0x0, &(0x7f0000000d80)=[@pktinfo={{0x20, 0x29, 0x32, {@remote, r7}}}, @hopopts={{0x24, 0x29, 0x36, {0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2a}, @ra={0x5, 0x2, 0x9}]}}}, @tclass={{0x10, 0x29, 0x43, 0x2}}, @dstopts_2292={{0x24, 0x29, 0x4, {0x3c, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xd}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@local, r8}}}, @dstopts_2292={{0x14, 0x29, 0x4, {0x32}}}, @dstopts_2292={{0x74, 0x29, 0x4, {0x1, 0xb, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @generic={0x80, 0x24, "caa4cd2296079dad6c5e9ae5c6297e521da2c41f3f3ffb770d5385466eda428e32f26bef"}]}}}], 0x120}}, {{&(0x7f0000000f40)={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4eada94b}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000000f80)}, {&(0x7f0000001f80)}], 0x2}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)="e87edac439198cffaa241991b55da62102ecbb700b2e44e52397085eb486b9c0313e08f4942fe726f857e93a3879f7da0d4a97f770ef", 0x36}, {&(0x7f0000002300)="93a41f75d96b0ed7771db6bb04a1cd30c5cb0c5bb1f43a0b6136e51baa02374031f59563742e9100add9e6c131b7202c690ba3a6", 0x34}], 0x2, &(0x7f0000001000)=[@dstopts_2292={{0x44, 0x29, 0x4, {0x0, 0x5, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @dev}, @ra={0x5, 0x2, 0x2}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}, @rthdr={{0x24, 0x29, 0x39, {0x6c, 0x2, 0x1, 0xfb, 0x0, [@local]}}}, @hopopts_2292={{0x74, 0x29, 0x36, {0x2b, 0xc, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x726929ed}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x1, 0x3a, "e94e397ecff4f6d6ef81608358ef8d09e8c8b970d5a9444fdcd153d92cddeee247491cb657a381e0d3211c70d3cd93d8e9aa6e5ad0859c60663a"}, @enc_lim={0x4, 0x1, 0xf}]}}}], 0xfc}}, {{&(0x7f00000025c0)={0xa, 0x4e20, 0x62a4, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8000}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000002600)="6bd52f8235f6776c7a5efa0acd549020c5d007c54e8482b61517f8338d8ec7077eef8d769d29ae251e0256478bf293b625317e559aecfd324eaf26e2655a67424699fec09a449d50d326de0718ca66d2292fb7989a4a814c66275fdb265447dd8b67eac6b4a36a613593bbe5daa96e2469c0f9cb53233068f53bff4ed0bd281a1b112282a0fa6811b69a0344e45c9937d1ba049aff4eed9e02ce131e6d802c1089b9cb194386a8dd84c080274bd6e4d7c5d5da3ec2bde4b9f8268617aef5d642eaad9efe3d2adad23ca690387458b398cb22cc5ce3c3073364bea57e1e440df50930ef", 0xe3}, {&(0x7f0000002700)="b8e9e904c9417bc25df5dc1890f37106fbc72acbd8791037f553dc394d2cb57d306b686b1e7047960d804d7779d521075f3ce60a2a7da8a3a6d307f9ecc20a2e2143863287d1cff8c8cf861fba4a3e4759e6d71da4edf06482de69de5de63414021a5d23", 0x64}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000290000003400000088560000740000002900000039000000000c028c00000000fe8000000000000000000000000000bb20010000000000000000000001000000fe8000000000000000000000000000aa00000000000000000000000000000001ff010000000000000000000000000001fc0200000000000000000000000000010103cf57d513753c237093e6c4ce3b7809a0a1ab1af2282b977f23287604139978d647ca692ccdefcda543dcad054c4fe59b4f46c5fffda782d9"], 0x84}}, {{&(0x7f0000002880)={0xa, 0x4e21, 0x3, @mcast2, 0x101}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000028c0)="4db3a3d881a7de6add0187382e31006e2a4f173789711575bdb29bc20469ec5c8afcba443b4ca005d2f59ace82587510cac752543482b5d75b5b1160f2826356fab6f6fb0fd3ad8acc5a3150bc916a576458c1fa33146b6f8bad7f1bacd68d30df6a9ea5d7351326a863193e657ca8b7271166dd374c896a2f899a9326f0bd46567bcf060daf8ffde70b461271e14503472086eaf4394c14301932a44e0ce56c1ba007560ca8a961940f14531edfcc0bfa10eed83583d8ab030fc696311fac859fd093530b39f8d3943b8ec633dc9358928c5d6d037961100c4c1d2a67e386", 0xdf}, {&(0x7f00000029c0)="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", 0x1000}], 0x2, &(0x7f0000003a00)=[@dontfrag={{0x10, 0x29, 0x3e, 0x1}}, @flowinfo={{0x10, 0x29, 0xb, 0x4}}, @hoplimit_2292={{0x10}}], 0x30}}, {{&(0x7f0000003a40)={0xa, 0x4e20, 0x59, @remote, 0x9}, 0x1c, &(0x7f0000003e00)=[{&(0x7f0000003a80)="fa5a0e307acf286ba033c0dd3ea90c49812a19a3cb6cc65f175665a7a93dde2e877612b3c015539481558521f95e67fa8c652da54a8f1cbe4d3eaeb2a663454649d55608a062c343514524f658db42903fae79cd237469aee4d6fa8439936278c5c8f1c1efcf45d8856ff0a056f0f677ba578cd341a1514a4b0c6c6414bbd1ea4499a89fcbf54e67e7f766ad1218ed19de0d131bcdf190453c3d650da4cb33bcc9a4752264258bd733b8288f2b5514408128", 0xb2}, {&(0x7f0000003b40)="9529a27546319afd43b0897d4d4ea24373eed3c737e93b9b7bf4d67a1476556b23ae58d2c0e34e57fe62258da2fd27337e905326b4f4b0683a8e3c5e9183466c77fb3f106460d7f1f3af29b87287f30b381f48867948c72dc4990e54055cabc09c717c65cf85c553b3470a83dea59ceeca06d7e40f5a32be48690f3afa1aabf2327f9b9bb975ec3f7d0c8d5b68efe47b032d96", 0x93}, {&(0x7f0000003c80)="a47e9a173757c57d193241eeb882", 0xe}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)="e7fa7f90064713d5d6f1bee568bdf6567e501100693a95246e9d2c73ce245a19a7b0b22a41ff266796d2a9ab70e0e163b633bf07bf186a5503ca3ab69515d4dfc1708a4368daa6051686f8d20e175387f17ea47772b876fc5d39dd53e7f7f2478906b323838ee74bcec1917ecf5ef6dfc3579810808a1f78c81ff6ca8f83de5039cbd81fdfd3826b17e70b7f7bb5e1ea4153c93a54bdb279e686118b25c2c32795151f5bc8d06197e2f6514e584507510f3e41685f1c05f39db2a7886e8a985f3eaa6e252b7b3fdfb2c7f0818f5c797a7456df66e94e6cee6bdf5b963275e0", 0xdf}], 0x5, &(0x7f0000003e40)=[@hopopts={{0x94, 0x29, 0x36, {0x0, 0xf, '\x00', [@generic={0x4, 0x7d, "2709dfc50d70d95a5927eae70fd9c6b024e9f283e126c5b206f4c6a8336ba8d9bb6f5f4b1f9944c69114d55f34b1ad0b2453a2ba85e130da01402ea00e9fb24f507e208f660d5ffc80bbc35ef9c070c94e8df9505da79268d7df82c9d19d843793ee68f3b1dabe3e1523282357d5afa07f380d9b5beb428ed4db979781"}]}}}], 0x94}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0x1, @local, 0x6}, 0x1c, &(0x7f0000003f40)}}], 0x8, 0x4800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.838987815s ago: executing program 2 (id=2137): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) socket$netlink(0x10, 0x3, 0x10) readv(r0, &(0x7f00000004c0)=[{&(0x7f00000002c0)=""/229, 0xe5}], 0x1) syz_io_uring_setup(0x46a8, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r1, 0x400455cb, 0x0) r4 = gettid() capget(&(0x7f0000000140)={0x19980330, r4}, &(0x7f0000000180)={0x0, 0x5, 0xafe7, 0x7fffffff, 0x800, 0x5}) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$drirender128(0xffffff9c, &(0x7f00000001c0), 0x218140, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) r8 = openat$binderfs(0xffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000280)={0x2}) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500142f00fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5bea85a8867bd8b4"], 0x0) r9 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 3.559522111s ago: executing program 3 (id=2138): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000001c0)={0x9, 0x6, 0x3, 0x4800}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r1}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYRESDEC=r2], 0x48) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE(r3, 0x80084504, &(0x7f0000000080)=""/22) syz_io_uring_setup(0x20ad, 0x0, &(0x7f0000000040), &(0x7f0000000280)) 3.230239248s ago: executing program 1 (id=2140): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0xd}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global, @local=@item_4={0x3, 0x2, 0x0, "3cda094f"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 3.034218019s ago: executing program 3 (id=2141): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x3}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000003c0)="2f48978bee51fc6bdeb9b9120692afcf2647db14dae39fa4b05153d2", 0x1c}, {&(0x7f00000005c0)="febb35cfab7c65288e67f82820b0def8263982122c6ed7c023711639763c86ecf3adaecc7960b5cfccdc2c12ec37f4082d01bc7c9f436af47de0f0900e094ed7f3", 0x41}, {&(0x7f00000006c0)="fc15fbe5f91439fa5e44ad4afbb36eb6644d34790c407e8e9c4e8f21c42a707391b232463b82245a90b9fe8fb6a90891591e024cf7688d59e30c22fdccdcaf73e8eb1bf30ec18a406eff0198d0442b8b68c31534ed5c9e7c7aa429dcc25d25670a7b894477743ed1760356610a5efedd813f95b64e27add2a802ff546299110ad1f114e5e5e2f3e2e3019c1fbdbd5024f40f1ccf031cdc168b4a84d85ec1ca0693a66dbdb2b83f456b1a44f456e69eac7b2de31b80185567d7b7c2d5526add", 0xbf}, {&(0x7f0000000940)="24d99d6283fe96f1daa245a2eb6f6269cdf0ec1fdf4c1edd6ea18e1150f18d759ea7db55c89be83a7c388af77f0984ffb38f119b159a00def12d4a2435b0f30e3b73cc1c11f96d458450e0d51af2abf1dc4a147709cb0332691230da32840b00389104918c8c697bbf76aa75073b36ca62489576c16f5d3a83ba0ac6077353a33f95429aea177d448b36ecea24bf3968a69ec92d2861bb0f5bbac2b1a52cdb55b6fb83cd95da5d0c296c59dfd1e1e3dd4ffc55f86d34ca2afc1d9d74f23c7319579b369bd054f018d9ed6994105f29ed54b20a32df3b2ee6f77c085300c7fdd703e311c5381732b82f", 0xe9}, {&(0x7f0000000a40)="97eaaec8d2795e537b2a830bebd414bc0738cfd147ef15637b617199b5b8525d8f0c3d072099b964f4b9be0d7f27e8da1d98976fc554a29af5309b116b173e5fadb95295af2531377213de", 0x4b}], 0x5, &(0x7f0000000c00)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r1, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0x74, 0x40080}}], 0x1, 0x40884) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 2.959005962s ago: executing program 2 (id=2142): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000700), 0x161a02, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00ZH?']) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x2, 0x0, [{0xbf5, 0x0, 0x81}, {0xbb0, 0x0, 0xffff}]}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) r6 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) preadv2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000440)=""/237, 0xed}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003904", @ANYBLOB="f9ff"], 0x40}}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$dsp(r7, &(0x7f0000000100)=""/46, 0x2e) write$dsp(r0, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) socket$inet6(0xa, 0x80002, 0xd) read$dsp(r7, &(0x7f0000000680)=""/113, 0xd5) 2.155582731s ago: executing program 3 (id=2143): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000001c0)={0x9, 0x6, 0x3, 0x4800}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x3, 0x0, @loopback}, 0x1c) r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x40000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) chdir(&(0x7f0000000140)='./file0\x00') 1.795924852s ago: executing program 3 (id=2146): socket$nl_route(0x10, 0x3, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r0, &(0x7f0000000180)) syz_open_dev$mouse(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x690a, &(0x7f0000000340), &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x8001, 0x1, &(0x7f00000005c0), 0x94eb, 0x0, 0x0, {0x3}}) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/172, 0xac, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x3, 0x0, @empty}}, 0xfffffffc, 0x3, 0x989, 0x0, 0x10}, 0x9c) sendmmsg$inet6(r2, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff00000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'bond0\x00'}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.640556006s ago: executing program 1 (id=2147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x28, r1, 0x9, 0x0, 0x4000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x28}}, 0x4000) (fail_nth: 4) 1.587827926s ago: executing program 1 (id=2148): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x16900) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x80000000, 0xfffffff3, 0x2036315a, 0x9, 0x4, 0x101, 0x6, 0x59, 0x0, 0x4, 0x1, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x54}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r0], 0xd8}}, 0x20008004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xe7, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000cc0)={@multicast1, @multicast2, 0x0}, &(0x7f0000000d00)=0xc) sendmmsg$inet6(r4, &(0x7f0000003f80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x6, @private1, 0x5}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000240)="6bb4bfa3e1a210004551e9f72081bc62bbf6248b5c2c73d6efe176bd2bc055768ec2c8df3c47bec6975ce8bb245984d5063b3bc997e81493c8a6ee7f673a60f4754615174ad6b98e23cd796e49721c4ef0f28a29f6658722a0f463ed14ecdb5deeb7061f6adfa0dd12a9e000326f11fd19bbca2f4063fc6e38d89ae857d73139e3d449999de652fb7dc04896de38a6bca1c99d2bfbddaba8af5ecef9dfa868421f3c6e3b2f3e3ee6f227", 0xaa}, {0x0}, {&(0x7f0000000580)="dbaaadacf69e6a8b762701b69abe92be69cab28c340c67e3b3a028c3cee37952f83cf0615a741a706359f59f43ec19715f570569d295d1e44066f63de6674d7745e9b7304cef2bfefc4a0bf240bfd76dd316798f505cea2338a4a01dca44b917d99727e5957c114f01e2a339cf3e0e6e470f8d9f085926c00e8843453a59d18a23a1989f0e07f91e593b02803e51dff5dcaac5ee23db4fd846a48dd3941a902679c69b87966175163b037c94dbdd3b8f35d7284e75fa1838ac36e4be937c96868aa68cc9b5970e137868867ca0fc5901d26b6bf51428b4ade22c9ec5636f", 0xde}], 0x3, &(0x7f0000001140)=[@pktinfo={{0x20, 0x29, 0x32, {@remote}}}, @hoplimit={{0x10, 0x29, 0x34, 0xfff}}, @dstopts_2292={{0x24, 0x29, 0x4, {0x0, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xffff}]}}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x3b, 0x6, 0x2, 0x81, 0x0, [@dev={0xfe, 0x80, '\x00', 0x2c}, @remote, @rand_addr=' \x01\x00']}}}, @hoplimit={{0x10, 0x29, 0x34, 0x4}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x6}}, @pktinfo={{0x20, 0x29, 0x32, {@private0, r8}}}], 0xd8}}, {{&(0x7f00000003c0)={0xa, 0x0, 0x7, @remote, 0x9}, 0x1c, &(0x7f00000004c0), 0x0, &(0x7f0000000d80)=[@pktinfo={{0x20, 0x29, 0x32, {@remote, r7}}}, @hopopts={{0x24, 0x29, 0x36, {0x2f, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x2a}, @ra={0x5, 0x2, 0x9}]}}}, @tclass={{0x10, 0x29, 0x43, 0x2}}, @dstopts_2292={{0x24, 0x29, 0x4, {0x3c, 0x1, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xd}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@local, r8}}}, @dstopts_2292={{0x14, 0x29, 0x4, {0x32}}}, @dstopts_2292={{0x74, 0x29, 0x4, {0x1, 0xb, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private0}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @generic={0x80, 0x24, "caa4cd2296079dad6c5e9ae5c6297e521da2c41f3f3ffb770d5385466eda428e32f26bef"}]}}}], 0x120}}, {{&(0x7f0000000f40)={0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4eada94b}, 0x1c, &(0x7f0000002080)=[{&(0x7f0000000f80)}, {&(0x7f0000001f80)}], 0x2}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f00000022c0)="e87edac439198cffaa241991b55da62102ecbb700b2e44e52397085eb486b9c0313e08f4942fe726f857e93a3879f7da0d4a97f770ef", 0x36}, {&(0x7f0000002300)="93a41f75d96b0ed7771db6bb04a1cd30c5cb0c5bb1f43a0b6136e51baa02374031f59563742e9100add9e6c131b7202c690ba3a6", 0x34}], 0x2, &(0x7f0000001000)=[@dstopts_2292={{0x44, 0x29, 0x4, {0x0, 0x5, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @hao={0xc9, 0x10, @dev}, @ra={0x5, 0x2, 0x2}]}}}, @pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}, @rthdr={{0x24, 0x29, 0x39, {0x6c, 0x2, 0x1, 0xfb, 0x0, [@local]}}}, @hopopts_2292={{0x74, 0x29, 0x36, {0x2b, 0xc, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x726929ed}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x1, 0x3a, "e94e397ecff4f6d6ef81608358ef8d09e8c8b970d5a9444fdcd153d92cddeee247491cb657a381e0d3211c70d3cd93d8e9aa6e5ad0859c60663a"}, @enc_lim={0x4, 0x1, 0xf}]}}}], 0xfc}}, {{&(0x7f00000025c0)={0xa, 0x4e20, 0x62a4, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8000}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000002600)="6bd52f8235f6776c7a5efa0acd549020c5d007c54e8482b61517f8338d8ec7077eef8d769d29ae251e0256478bf293b625317e559aecfd324eaf26e2655a67424699fec09a449d50d326de0718ca66d2292fb7989a4a814c66275fdb265447dd8b67eac6b4a36a613593bbe5daa96e2469c0f9cb53233068f53bff4ed0bd281a1b112282a0fa6811b69a0344e45c9937d1ba049aff4eed9e02ce131e6d802c1089b9cb194386a8dd84c080274bd6e4d7c5d5da3ec2bde4b9f8268617aef5d642eaad9efe3d2adad23ca690387458b398cb22cc5ce3c3073364bea57e1e440df50930ef", 0xe3}, {&(0x7f0000002700)="b8e9e904c9417bc25df5dc1890f37106fbc72acbd8791037f553dc394d2cb57d306b686b1e7047960d804d7779d521075f3ce60a2a7da8a3a6d307f9ecc20a2e2143863287d1cff8c8cf861fba4a3e4759e6d71da4edf06482de69de5de63414021a5d23", 0x64}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="10000000290000003400000088560000740000002900000039000000000c028c00000000fe8000000000000000000000000000bb20010000000000000000000001000000fe8000000000000000000000000000aa00000000000000000000000000000001ff010000000000000000000000000001fc0200000000000000000000000000010103cf57d513753c237093e6c4ce3b7809a0a1ab1af2282b977f23287604139978d647ca692ccdefcda543dcad054c4fe59b4f46c5fffda782d9"], 0x84}}, {{&(0x7f0000002880)={0xa, 0x4e21, 0x3, @mcast2, 0x101}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000028c0)="4db3a3d881a7de6add0187382e31006e2a4f173789711575bdb29bc20469ec5c8afcba443b4ca005d2f59ace82587510cac752543482b5d75b5b1160f2826356fab6f6fb0fd3ad8acc5a3150bc916a576458c1fa33146b6f8bad7f1bacd68d30df6a9ea5d7351326a863193e657ca8b7271166dd374c896a2f899a9326f0bd46567bcf060daf8ffde70b461271e14503472086eaf4394c14301932a44e0ce56c1ba007560ca8a961940f14531edfcc0bfa10eed83583d8ab030fc696311fac859fd093530b39f8d3943b8ec633dc9358928c5d6d037961100c4c1d2a67e386", 0xdf}, {&(0x7f00000029c0)="562903fd8ba93c81bb230893d47310cb7043d6f4b8c46bb440dfb0b04625d4c3c3b1aa58d1cd5df05ff1f6e3650d7c9e87cab688c0a8d0af2ab7f0c6cb4aef76b53e96649769bc9b3e03acca1e8fc6eb314dff21274974f75e5ac74eab994132bc8e53825273007676228275235ebe0c6c91fe53b70a23032ceb545690b844035a900e5181eb9b9b3739e6c51a13d8bcef5f25ff81e90a8028ef19a33e669ce10a8d644ffa7e4171734732242de72128b876964524e7b080d668decec5090a7b85458f72589122262363940cf7492505890b204d236bbf8aeb2ce41250d207c23bbab1af930fa156ec00e35dd529b60b39ff717b808fe01488053f09fd9ab8cf736897802205b7df5317162aedb5dbd03d88b1d4cc84720c08dbde52d21ccdf7a38de7c4e41d46491d1e3c97e55a28ef20e6cb919929f04ef5b84f57fe85f08aa6f75e7105ec002a1048ef26d0cc8b0281803cb2d911a6f0165a3af62cc4e2076cde7ad1f924652129b90501253c0e42b633fac778008b586e99ed4c54711261e4ed39dcbe950bab3c5a1c55c4bb085c3be30123c63e9d375d3ba2d222a41093012babc60453dfa44faa478fb4092def353e101a2756d952d266ca967a279d1723c74944d0f042e1d093fa48252a61cc75b859fbe1e43ea142cf39213cd7b4c4aa60413374ccced9c950a98cc978e46e9f72073a19c2993be912f0a1a32ba5861246af0079689a2626f9e6840c45bb3fb967a2e495531eea84a223fc970955e22749315b366193866026baaa5ecc2dbccfd810c070e72c0de04e3ee91d852bbc422b1fc4652e647e152895e2b091114ef7aa70c08212381e55782b76e15d83e22b847dc85c169362141eee0f6a3d90524a43d3329664d9a500d96a4b27faffd1f4608ccc95d6f1ea4a647c5359d10f9a2b9a76f9858f4536622c21e8a0b432be9bd248988d83d9db3b0a05c062e99041e0014cd210784a3eff17f9f228f53bea7d88c1628d27cc507554dbeef4393409a8221b014ff4f46ecd25e98b01692dbb5c8409dae67d7f75db289553351594a423d060c21d7f4cf7c8e2f4e7f2655aeefb04c101b85a330d831c371d88c4535dfca98cd3e82ae8718f05c8ab8d17c0408449d9fa75b77a414d18ae1b45bd0fdeed479755c6f6ec7fb344380b7d658e68778087a3d0123e190dc4ac1413d39064bbb4a7a0534642ed835432937d696085b68f2a93c539f18c366ba2192bbc2dc06bdd594a4dce239b3df270c02b373433e03208b850ddaef7c43d704fa64fea1fb8bff225f58524e6a399bc7bd84a5cb6918a0c7ce586ba557e5253f1b42cb6b33ed88422aa3473f0367500328544f0fc205ad345f7759a73f704181e2f3738f11e784f3963197f3ae963a02f5f069a18f7e2ffd9965a9f30c9ea7aae4609c6699f5da8d01984b4ddb07dfbb7f845a996cfce976515fd249ba11072a8f020558f2c0b1ee85792ad05744db2b24525dc772546ed5cc42a0bb904894dedd5efe335f9dd44bbdfb459bc118639ebf3fa81ba3f2f7b0c2195cfb5cf5cd1028461d32edb7ebba166694d272cfd654f40b85aa2ab6ab42008ee6d69e769d93fd838a819ec5974bfe6e423752e59673a23809f550a9c388face05583c1f79dce8d59f4040bf1f279a07cea8e4603268ed4d10c2c4bd88357535a03390f397c6d0dea995460024b8e8e1ea50fcdaac8344f370ee237bca0e0383d96880e25856a6f15963b40f48d69a9d01b9a4d625040192e092c52aa44e40f5504c99e66b6fa016fa1c6b26edb8468db91025dead21a6379c7613be7f63553f360f0e8b63e5da0888789971ba0a7de603b23b29b029b9e2c0bd218ee6eac1023e2235a4f3ba7eb792f859a40473c50b898d9dfee144e5703aa3fba03b82b385e2934e4a6da6e01889ea58b9ff1988b6e8c9898c444c468de50ce339d8073fc9977d144631bee149416574b373e9d4af160fc6eaf15675698792c63c654ea776126708edd75adf7325e8d9ca2f2ff85986008c8fa031a341bc26b859395c28bde96f753f21739626536c7e0f378d79e9648868e42ccf9d66d6f50e38b9511c880aadb7b70c4f4f07df879c09007edaf5cd8d37b7ee5b1a2a448776e48addd4657c7e0d7beb1f690034ec1eb44d03a69343ba7625ae28e455d263251bfeac10a23301054b0dc8746192c0539bf09a069c7e39766e8e8c4a19185a8e46b61971c78d43328cbb931d2d61e294a6727d2c58f5ecc87fb7f9bae86922767991ade97f0e962c45a9d5b571d6c4a9c62d3d1b0ed3cdab2df5ed3b4aa1e6e7322050795af0a2ea80a6d34e4bd6e7dda5186d806aa9feb1ef6166114f10b3b9d399402c756ab6586bc9ceb563ace720aa781339ed11d37f7c7c968a879ed9dbc17ae1495544e30649afd877c074a9dea4034fb2cd906c2f5b94257f2bc07e132951481c50b002fef6881a4317e875ba9584b7cf5ebf6d935e2aae77490d20316f820b3ce04df9acb184d720a96a9546860c24e5a30e60de3fe4c86c89c2f9a9a6e9c24956c6e4be1dec7ef78deb287349c4e78e0af32feba1de42bbf55fb64c2daa042de004ff1bceb5358d938cdc69d71d40a6838132195780bd360db0270d38f4c3727c958fc333df6800b4f4d4495421d82ba28f2464c967400d41f7ea832939827c510dd2490f13dff5b3c34b68a14c9e367d1d3bcc9aaa60b61f08f866b48fd96fbe9cdfa3b5a9e02db4376a57be475e5bb60308b549a0bf3ee01798975c2d3ba92c70602ddd236caf1471e783daeb03a8221ede6f4a85e6666ccd67d3a6ab43095a4aa4a2510a756ec0813531971325f7326086fde05cfd83dababea21fd42c3de1b5c84b7aa90a21ad31d6ea509f8a54b2f0ca895ce33818ecc022fe7fd234d2df02839fffa38aeebfe64108d12453bbaddf2fd8dadd89d5de72e9612caad16f88b8bad6e7e11d5a8b7cfbbf5c9c7509eb7d3cb70a19cf6fd21af3b0f4a4f1a612f18eae0476e9cd6ae9dedb5a3c9b56c6371bb5716cc3bde32819e047f0428a6eb3846f6291ebb190024b8673c3302efa8a7430d78b5de91e1e41821ebace65b3c04fb8883dc78e17f19daed921bc2255ab555f5baf64c896d6bdd3f96c30cd5a5c2f4e5f1f562115b4b16eb499483a8cea1b8e23ca5eb750fb5929a42b546e98d5095f161dd4323d449b1cfc042badb348fc9413c72bb48f844b08cae74fab51f8b8e2b7af025120b1db592a330e094fb52544c8013381b0771da85531d8dfa995f70439356af89d96aec6f1cf9502633b21df241522a6bf2e096a6a1940b46bb0ce2650f520a1ce543d7ee5e47a302ee64c090196685657abae6b4157c96547e529ee3be14a78ca675189cd198a94b473dfbe82ccd37380649375c52c75e22daaf529a1e05451990b9b63b52f8e4d7d8e9f363db55dd101565e792087e11023f9a632f60d18e165ea7818af5f6141e6e5e9a7393563d54e4f0ed6939ca438c7e56e992eb3b029cd6b200205c197d35c8eb0f8b59f1c98190037ea98470599486f332aa1f3b0127a9c540a663261d17bd491a40976d3e33b35ab4f9cc573ea4a92ecb23e03e4dffbe9ec09501932f5be6aadf28366ede278c949378655ec3a89afd3027824b047f3a7faf88368da0afe7805319a1f9bd7c6056a457244d8ef4d17ed82e9a983f337e46fa07d90107314e2aeae734e78fb5c8d065d5302125be5e721b6b20bb815983e960efacbbc8c56127e86d173fa3738fd55d16bf1ec59a73813cf621dbb8359c17d64aa28d823c15d83c0072bc632d4826cc80e968f06f6385577275b0fd95e0d15ab05a581dc9d60a0b05cb56ceb0c69ab6ccd910574436593ee1e2302decf2d1a59133ef37a6fe3aadff5f271a341e75b67f2585bf686e0fe238a9150bcaa6486bbadd8660023bc901aa60fdcce30bc2e72b534981591cb8d29d1d104ebe4d8e4847158f7c985afe24861a2cc7ba6a9cdd56580e69d41eda8fd01e99803a73a380dc0ce906924a53df6ccd6ec11435cc1af13d7c772eff7d72b5f6e51d91c51126659adf28c3849ac015a055e037782fd2a87bd3b727bddc5665d85afa9bd37e63090611b52011b3be9c7e59d789cb5d6fb40d3ab66224d26a7bc4c6c97cde7c45790f0f45f94c91737e494b46ab1633bd78deadd33e48f83d4b527cd949701f142ac88c6aded4231571d8fb167850c686702df0ad9c1b75eec91a73e37526de368765835b9f8132426aae196833352a2ef7589212125550d5cc05a440aaeed4b10877095d97516173be8d872621308eda7438ef899f9c9ff9617cef142b8a8d4cdd216768f0b7b62c65f45a6532ae3af78212581cfbef439010c11cc99e6c6abc3a6fd54432c02e66e9c2e71b103ef14c054d657d8c857cfdffa8ce956bda75727d175b93347719bd09223519d0ec7a0bf2bcd983d1f24fbea054ee559fd538c4d43cab2f9dd19c058dd4b682863066f6c967c9b9501e41da41e783d911097ae5a541aee99ee278eb0c75814329d383d46ac79d04167825c00e17887fc4f1103b9679e6df226933df7133e132a119d5f5454bed4bc951f08e362c5a549962b0b5332bf5b60fc303e20509bee7734b84f4f6a62b1dcf20be286346674f054b0b74d085dbce27ea9251488969d188d1ba559a706879c01ca9d3e86e8b1c06f38a3e34cd56b860a9a7a5c5b84a9fdac6405926ed79ac9f4af5970e962246570454cb2b7249ff1a359d43ef37db50e71322eae1bf2e3eb241a3670fffceb2c258a9ab2a8bad67b95686275dfc75b1a12dc1a1c6c799b4afed49b7da1a71f3665e35c220823971ddcf16d5d8cd1ca8c03bb28e1de3a6804e78616d232754f1f52ab04302b26e5b03a3feaea7afa9970fdd236b2321b9dce91b542ee2f19213083af9e86e4aef6088b1383a6164f8bff7f4c4b9b66a300d9cffbf99b7cc2d7d05207cdefb56010e5c7c108c0d9003e31ff7d164c36de157dbe12e7ea6ccd23ac5ef91fe0406eb246a61943c71af8c1365390884537e5819171f27dea3c562b241a8e6e51d27da474ee3321aace385046dcd7afa6b257af2d3d59870c0389cc0c6b9fcc8bea949192dd18d604628ff557b81324c24bd845b556b0a6a499478863ebbc52a62eb1cc58f14b561f59725f0e250321de419154d04584fe8a34c11a03c2e7a9ec32e308a6c6619afac347fa4a2a056b7d4789e346121602697f496ba152bf8ecfdf328d8407cde4a300b43642fe676b590682ffae180a1fd56764414718450a0837eb5ee5403d85e51170b63008345eca547cdc153d76fd98e4fb9979430b899f56299cedf39044d6e6e4eb4ad6b164546c40f512d9d565174906a15ec99dc76a67157803a54cd3af3270ffb0e48c4fbc5a10a029c8f21a254fa2f510576749efe3a5d7b824bff991185f704cc179e2b300b72a3983e72694707381f671e83ad2661db89b6d6b89d797e1f100b4aaef36ee9c6193aebf9f0a6ad7705a087f603d1ff8bab45e7bc52f3b3650157f9115f9bcb65dce239e89dd080b42ce46d8f67eb3bd175f7abfe15a1eeecec667d87a08b3ddacfd562fd2846ce7bd6a8f66c812a1d78b86afe65505e73457dce3715daac2b31da1ae3e3ee49ffbd05bdd992a1413ecfe95168a7fffacb28e541332616681d3265db9ebbb278c20b71c13545656edfb9ab9069ad47a6aaf879d347bed57c9ce2e74640a62775c36044de5eaf19f8b42013f42b4bfe011d2879f30f05ff98604e409b8f82af2c863b183608313246b50293b3d5ca83064cb92745c92f2b", 0x1000}], 0x2, &(0x7f0000003a00)=[@dontfrag={{0x10, 0x29, 0x3e, 0x1}}, @flowinfo={{0x10, 0x29, 0xb, 0x4}}, @hoplimit_2292={{0x10}}], 0x30}}, {{&(0x7f0000003a40)={0xa, 0x4e20, 0x59, @remote, 0x9}, 0x1c, &(0x7f0000003e00)=[{&(0x7f0000003a80)="fa5a0e307acf286ba033c0dd3ea90c49812a19a3cb6cc65f175665a7a93dde2e877612b3c015539481558521f95e67fa8c652da54a8f1cbe4d3eaeb2a663454649d55608a062c343514524f658db42903fae79cd237469aee4d6fa8439936278c5c8f1c1efcf45d8856ff0a056f0f677ba578cd341a1514a4b0c6c6414bbd1ea4499a89fcbf54e67e7f766ad1218ed19de0d131bcdf190453c3d650da4cb33bcc9a4752264258bd733b8288f2b5514408128", 0xb2}, {&(0x7f0000003b40)="9529a27546319afd43b0897d4d4ea24373eed3c737e93b9b7bf4d67a1476556b23ae58d2c0e34e57fe62258da2fd27337e905326b4f4b0683a8e3c5e9183466c77fb3f106460d7f1f3af29b87287f30b381f48867948c72dc4990e54055cabc09c717c65cf85c553b3470a83dea59ceeca06d7e40f5a32be48690f3afa1aabf2327f9b9bb975ec3f7d0c8d5b68efe47b032d96", 0x93}, {&(0x7f0000003c80)="a47e9a173757c57d193241eeb882", 0xe}, {&(0x7f0000003cc0)}, {&(0x7f0000003d00)="e7fa7f90064713d5d6f1bee568bdf6567e501100693a95246e9d2c73ce245a19a7b0b22a41ff266796d2a9ab70e0e163b633bf07bf186a5503ca3ab69515d4dfc1708a4368daa6051686f8d20e175387f17ea47772b876fc5d39dd53e7f7f2478906b323838ee74bcec1917ecf5ef6dfc3579810808a1f78c81ff6ca8f83de5039cbd81fdfd3826b17e70b7f7bb5e1ea4153c93a54bdb279e686118b25c2c32795151f5bc8d06197e2f6514e584507510f3e41685f1c05f39db2a7886e8a985f3eaa6e252b7b3fdfb2c7f0818f5c797a7456df66e94e6cee6bdf5b963275e0", 0xdf}], 0x5, &(0x7f0000003e40)=[@hopopts={{0x94, 0x29, 0x36, {0x0, 0xf, '\x00', [@generic={0x4, 0x7d, "2709dfc50d70d95a5927eae70fd9c6b024e9f283e126c5b206f4c6a8336ba8d9bb6f5f4b1f9944c69114d55f34b1ad0b2453a2ba85e130da01402ea00e9fb24f507e208f660d5ffc80bbc35ef9c070c94e8df9505da79268d7df82c9d19d843793ee68f3b1dabe3e1523282357d5afa07f380d9b5beb428ed4db979781"}]}}}], 0x94}}, {{&(0x7f0000003f00)={0xa, 0x4e23, 0x1, @local, 0x6}, 0x1c, &(0x7f0000003f40)}}], 0x8, 0x4800) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1.199425468s ago: executing program 0 (id=2149): socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0xfffe, 0x2, @rand_addr=' \x01\x00'}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x121, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'ip6gretap0\x00', {}, 0x1ff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="0f005e0b0f230af0099600002e0f837d0036f008112e0fad7fc83e0f3566b9800000c00f326635000400000f3066b93d09000066b8f87d000066ba000000000f300f01c8", 0x44}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES64=r1]) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000100)={0x5, @sdr={0x48524742, 0xad6}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x83, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000206050000000000000000001e00000005000400000000000900020173797a30000000000c00078008001340000000af0500050002000000050001000600000012000300686173683a6e65742c706f7274000000"], 0x58}, 0x1, 0x0, 0x0, 0x340480c0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32=r5, @ANYRES16=r5], 0x58}}, 0x84) 958.128402ms ago: executing program 2 (id=2150): syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff], [0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xf, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10}]}, 0x54}}, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="98c300001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000004c001280110001006272696467655f736c617665000000003400058005001900030000000500090000000000050001"], 0x98}}, 0x0) 880.113113ms ago: executing program 3 (id=2151): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x3}]}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000003c0)="2f48978bee51fc6bdeb9b9120692afcf2647db14dae39fa4b05153d2", 0x1c}, {&(0x7f00000005c0)="febb35cfab7c65288e67f82820b0def8263982122c6ed7c023711639763c86ecf3adaecc7960b5cfccdc2c12ec37f4082d01bc7c9f436af47de0f0900e094ed7f3", 0x41}, {&(0x7f00000006c0)="fc15fbe5f91439fa5e44ad4afbb36eb6644d34790c407e8e9c4e8f21c42a707391b232463b82245a90b9fe8fb6a90891591e024cf7688d59e30c22fdccdcaf73e8eb1bf30ec18a406eff0198d0442b8b68c31534ed5c9e7c7aa429dcc25d25670a7b894477743ed1760356610a5efedd813f95b64e27add2a802ff546299110ad1f114e5e5e2f3e2e3019c1fbdbd5024f40f1ccf031cdc168b4a84d85ec1ca0693a66dbdb2b83f456b1a44f456e69eac7b2de31b80185567d7b7c2d5526add", 0xbf}, {&(0x7f0000000940)="24d99d6283fe96f1daa245a2eb6f6269cdf0ec1fdf4c1edd6ea18e1150f18d759ea7db55c89be83a7c388af77f0984ffb38f119b159a00def12d4a2435b0f30e3b73cc1c11f96d458450e0d51af2abf1dc4a147709cb0332691230da32840b00389104918c8c697bbf76aa75073b36ca62489576c16f5d3a83ba0ac6077353a33f95429aea177d448b36ecea24bf3968a69ec92d2861bb0f5bbac2b1a52cdb55b6fb83cd95da5d0c296c59dfd1e1e3dd4ffc55f86d34ca2afc1d9d74f23c7319579b369bd054f018d9ed6994105f29ed54b20a32df3b2ee6f77c085300c7fdd703e311c5381732b82f", 0xe9}, {&(0x7f0000000a40)="97eaaec8d2795e537b2a830bebd414bc0738cfd147ef15637b617199b5b8525d8f0c3d072099b964f4b9be0d7f27e8da1d98976fc554a29af5309b116b173e5fadb95295af2531377213de", 0x4b}], 0x5, &(0x7f0000000c00)=[@cred={{0x18, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r1, r3, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x10, 0x1, 0x1, [r2]}}, @rights={{0x10, 0x1, 0x1, [r1]}}], 0x74, 0x40080}}], 0x1, 0x40884) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a0435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 788.695ms ago: executing program 0 (id=2152): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001280)={&(0x7f0000000f00)=[0x0, 0x0], &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001180)=[0x0, 0x0, 0x0], &(0x7f00000011c0), 0x8, 0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f0000000140)={0x0, 0x7ff, 0x1, 0x0, 0x0, [], [0x1, 0x81, 0xfffff707, 0x2], [0x9dbd, 0x7, 0x5, 0x1], [0x9, 0xffffffffffffffff, 0xd97, 0x8000000000000001]}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000240)={0x0, 0x1000, &(0x7f0000001340)=""/4096}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) futex(&(0x7f0000001300)=0x80000001, 0x800000000006, 0x0, 0x0, 0x0, 0x0) 787.233788ms ago: executing program 2 (id=2153): inotify_init1(0x80000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES32=r2]) 655.16922ms ago: executing program 1 (id=2154): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = openat$vsock(0xffffff9c, &(0x7f0000000200), 0x20000, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000300)=0x1, 0x4) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xc0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280), 0x6) write(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r7 = socket$inet(0x2b, 0x80000, 0x4) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @empty}, 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x8905, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3a2000a, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRESDEC, @ANYRESDEC=r5, @ANYRESDEC=0x0, @ANYRES16=r7, @ANYRESOCT=r4, @ANYRESHEX=r3]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000002100)={0x1, 'ip6gre0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 654.790374ms ago: executing program 2 (id=2155): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0xd}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global, @local=@item_4={0x3, 0x2, 0x0, "3cda094f"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) 0s ago: executing program 3 (id=2156): creat(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) getpid() r4 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r4, 0x45882e38ee51989f) socket$xdp(0x2c, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = dup(r3) ioctl$TIOCSBRK(r6, 0x5427) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) close(r8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r7) kernel console output (not intermixed with test programs): may have been left with an inconsistent configuration, please check. [ 298.156571][ T5407] vhci_hcd: vhci_device speed not set [ 298.302552][T10594] UBIFS error (pid: 10594): cannot open "./file0", error -22 [ 298.845736][T10600] fuse: Bad value for 'user_id' [ 298.849603][T10600] fuse: Bad value for 'user_id' [ 299.371309][T10610] netlink: 'syz.3.1577': attribute type 4 has an invalid length. [ 299.866935][T10614] fuse: Bad value for 'user_id' [ 299.869502][T10614] fuse: Bad value for 'user_id' [ 301.349883][ T1280] hid-generic 0000:0000:0000.0041: item fetching failed at offset 0/2 [ 301.352306][ T1280] hid-generic 0000:0000:0000.0041: probe with driver hid-generic failed with error -22 [ 301.520338][T10644] netlink: 'syz.2.1588': attribute type 11 has an invalid length. [ 301.522961][T10644] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1588'. [ 301.766566][ T62] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 301.938505][ T62] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 301.941779][ T62] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 301.945617][ T62] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 301.948993][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 301.952935][ T62] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 301.958479][ T62] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 301.961787][ T62] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 301.964672][ T62] usb 7-1: Product: syz [ 301.966209][ T62] usb 7-1: Manufacturer: syz [ 301.971255][ T62] cdc_wdm 7-1:1.0: skipping garbage [ 301.973252][ T62] cdc_wdm 7-1:1.0: skipping garbage [ 301.976223][ T62] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 301.978613][ T62] cdc_wdm 7-1:1.0: Unknown control protocol [ 302.183090][ T35] usb 7-1: USB disconnect, device number 11 [ 302.283708][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.286380][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.288654][T10673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.333569][T10678] netlink: 'syz.0.1599': attribute type 10 has an invalid length. [ 302.335752][T10678] ipvlan1: entered promiscuous mode [ 302.337387][T10678] FAULT_INJECTION: forcing a failure. [ 302.337387][T10678] name failslab, interval 1, probability 0, space 0, times 0 [ 302.340755][T10678] CPU: 0 UID: 0 PID: 10678 Comm: syz.0.1599 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 302.343600][T10678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.346384][T10678] Call Trace: [ 302.347280][T10678] [ 302.348068][T10678] dump_stack_lvl+0x16c/0x1f0 [ 302.349553][T10678] should_fail_ex+0x497/0x5b0 [ 302.350798][T10678] ? fs_reclaim_acquire+0xae/0x160 [ 302.352158][T10678] should_failslab+0xc2/0x120 [ 302.353404][T10678] __kmalloc_node_noprof+0xd1/0x440 [ 302.354770][T10678] ? qdisc_alloc+0xbb/0xc50 [ 302.355990][T10678] qdisc_alloc+0xbb/0xc50 [ 302.357134][T10678] qdisc_create_dflt+0x73/0x440 [ 302.358417][T10678] dev_activate+0x63a/0x12b0 [ 302.359726][T10678] ? __pfx_dev_activate+0x10/0x10 [ 302.361048][T10678] ? __dev_open+0x38e/0x4e0 [ 302.362249][T10678] ? __local_bh_enable_ip+0xa4/0x120 [ 302.363645][T10678] __dev_open+0x396/0x4e0 [ 302.364794][T10678] ? ref_tracker_alloc+0x2ef/0x5b0 [ 302.366152][T10678] ? __pfx___dev_open+0x10/0x10 [ 302.367453][T10678] dev_open+0xf4/0x160 [ 302.368778][T10678] ? __pfx_dev_open+0x10/0x10 [ 302.370486][T10678] ? trace_kmalloc+0x2d/0xe0 [ 302.372117][T10678] ? __kmalloc_noprof+0x207/0x410 [ 302.373972][T10678] team_add_slave+0xa8c/0x1ff0 [ 302.375336][T10678] ? __pfx_team_add_slave+0x10/0x10 [ 302.376717][T10678] ? preempt_schedule_common+0x44/0xc0 [ 302.378163][T10678] ? preempt_schedule_thunk+0x1a/0x30 [ 302.379961][T10678] ? __pfx_team_add_slave+0x10/0x10 [ 302.381763][T10678] do_set_master+0x1bc/0x230 [ 302.383058][T10678] do_setlink+0xa82/0x3ee0 [ 302.384253][T10678] ? __pfx_lock_release+0x10/0x10 [ 302.385598][T10678] ? __pfx_do_setlink+0x10/0x10 [ 302.386904][T10678] ? vprintk+0x86/0xa0 [ 302.387994][T10678] ? _printk+0xc8/0x100 [ 302.389263][T10678] ? __pfx__printk+0x10/0x10 [ 302.390534][T10678] ? ___ratelimit+0x24c/0x570 [ 302.391795][T10678] ? is_bpf_text_address+0x94/0x1a0 [ 302.393183][T10678] ? __pfx____ratelimit+0x10/0x10 [ 302.394529][T10678] ? __kernel_text_address+0xd/0x40 [ 302.395921][T10678] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 302.397490][T10678] ? __nla_validate_parse+0x605/0x2b10 [ 302.399004][T10678] ? __pfx___nla_validate_parse+0x10/0x10 [ 302.400503][T10678] ? stack_trace_save+0x95/0xd0 [ 302.401796][T10678] ? __pfx_stack_trace_save+0x10/0x10 [ 302.403229][T10678] ? stack_depot_save_flags+0x28/0x900 [ 302.404678][T10678] ? __nla_parse+0x40/0x60 [ 302.405873][T10678] __rtnl_newlink+0xc3a/0x1920 [ 302.407179][T10678] ? __pfx___rtnl_newlink+0x10/0x10 [ 302.408566][T10678] rtnl_newlink+0x67/0xa0 [ 302.409745][T10678] ? __pfx_rtnl_newlink+0x10/0x10 [ 302.411081][T10678] rtnetlink_rcv_msg+0x3c7/0xea0 [ 302.412393][T10678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.413826][T10678] ? __pfx___dev_queue_xmit+0x10/0x10 [ 302.415257][T10678] netlink_rcv_skb+0x165/0x410 [ 302.416540][T10678] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.417981][T10678] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.419466][T10678] ? netlink_deliver_tap+0x1ae/0xcf0 [ 302.420869][T10678] netlink_unicast+0x53c/0x7f0 [ 302.422153][T10678] ? __pfx_netlink_unicast+0x10/0x10 [ 302.423560][T10678] ? __phys_addr_symbol+0x30/0x80 [ 302.424898][T10678] ? __check_object_size+0x488/0x710 [ 302.426306][T10678] netlink_sendmsg+0x8b8/0xd70 [ 302.427608][T10678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.429093][T10678] ? lock_acquire+0x2f/0xb0 [ 302.430350][T10678] ____sys_sendmsg+0x9ae/0xb40 [ 302.431645][T10678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.433428][T10678] ? get_compat_msghdr+0x11b/0x170 [ 302.435232][T10678] ? __pfx___lock_acquire+0x10/0x10 [ 302.437124][T10678] ___sys_sendmsg+0x135/0x1e0 [ 302.438852][T10678] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.440765][T10678] ? lock_acquire+0x2f/0xb0 [ 302.442485][T10678] ? __fget_files+0x40/0x3f0 [ 302.444254][T10678] ? fdget+0x176/0x210 [ 302.445791][T10678] __sys_sendmsg+0x117/0x1f0 [ 302.447521][T10678] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.449389][T10678] ? __fget_files+0x244/0x3f0 [ 302.451124][T10678] __do_fast_syscall_32+0x73/0x120 [ 302.452997][T10678] do_fast_syscall_32+0x32/0x80 [ 302.454819][T10678] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.457185][T10678] RIP: 0023:0xf742e579 [ 302.458717][T10678] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 302.463971][T10678] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 302.466194][T10678] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 302.468327][T10678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.470449][T10678] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.472559][T10678] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 302.474646][T10678] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.476779][T10678] [ 302.479510][T10678] ipvlan1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 302.485857][T10678] team0: Device ipvlan1 failed to register rx_handler [ 302.578767][ T35] hid-generic 0000:0000:0000.0042: item fetching failed at offset 0/2 [ 302.582140][ T35] hid-generic 0000:0000:0000.0042: probe with driver hid-generic failed with error -22 [ 302.733495][T10692] netlink: 'syz.3.1604': attribute type 12 has an invalid length. [ 302.735782][T10692] netlink: 'syz.3.1604': attribute type 11 has an invalid length. [ 302.738268][T10692] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.1604'. [ 302.825371][T10698] FAULT_INJECTION: forcing a failure. [ 302.825371][T10698] name failslab, interval 1, probability 0, space 0, times 0 [ 302.829979][T10698] CPU: 0 UID: 0 PID: 10698 Comm: syz.2.1606 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 302.833895][T10698] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 302.837640][T10698] Call Trace: [ 302.838790][T10698] [ 302.839848][T10698] dump_stack_lvl+0x16c/0x1f0 [ 302.841238][T10698] should_fail_ex+0x497/0x5b0 [ 302.842473][T10698] should_failslab+0xc2/0x120 [ 302.843744][T10698] __kmalloc_noprof+0xcb/0x410 [ 302.844962][T10698] ? notifier_call_chain+0x364/0x410 [ 302.846319][T10698] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 302.848086][T10698] switchdev_deferred_enqueue+0x2b/0x2b0 [ 302.849546][T10698] switchdev_port_attr_set+0xb5/0x120 [ 302.850929][T10698] br_switchdev_set_port_flag+0x285/0x3a0 [ 302.852369][T10698] ? __pfx_br_switchdev_set_port_flag+0x10/0x10 [ 302.853993][T10698] ? kernel_text_address+0x8d/0x100 [ 302.855369][T10698] ? __kernel_text_address+0xd/0x40 [ 302.856860][T10698] ? lock_acquire.part.0+0x11b/0x380 [ 302.858239][T10698] br_setport+0xafe/0x17d0 [ 302.859430][T10698] ? __pfx_br_setport+0x10/0x10 [ 302.860709][T10698] ? do_raw_spin_lock+0x12d/0x2c0 [ 302.862026][T10698] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 302.863432][T10698] br_port_slave_changelink+0xcf/0x190 [ 302.864853][T10698] ? __pfx_br_port_slave_changelink+0x10/0x10 [ 302.866686][T10698] __rtnl_newlink+0xbf9/0x1920 [ 302.868478][T10698] ? __pfx___rtnl_newlink+0x10/0x10 [ 302.870415][T10698] rtnl_newlink+0x67/0xa0 [ 302.872027][T10698] ? __pfx_rtnl_newlink+0x10/0x10 [ 302.873845][T10698] rtnetlink_rcv_msg+0x3c7/0xea0 [ 302.875658][T10698] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.877657][T10698] ? __pfx___dev_queue_xmit+0x10/0x10 [ 302.879664][T10698] netlink_rcv_skb+0x165/0x410 [ 302.881393][T10698] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.883413][T10698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.885358][T10698] ? netlink_deliver_tap+0x1ae/0xcf0 [ 302.887303][T10698] netlink_unicast+0x53c/0x7f0 [ 302.889056][T10698] ? __pfx_netlink_unicast+0x10/0x10 [ 302.890992][T10698] ? __phys_addr_symbol+0x30/0x80 [ 302.892841][T10698] ? __check_object_size+0x488/0x710 [ 302.894769][T10698] netlink_sendmsg+0x8b8/0xd70 [ 302.896522][T10698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.898438][T10698] ? lock_acquire+0x2f/0xb0 [ 302.900137][T10698] ____sys_sendmsg+0x9ae/0xb40 [ 302.901891][T10698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.903824][T10698] ? get_compat_msghdr+0x11b/0x170 [ 302.905687][T10698] ? __pfx___lock_acquire+0x10/0x10 [ 302.907631][T10698] ___sys_sendmsg+0x135/0x1e0 [ 302.909383][T10698] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.911290][T10698] ? lock_acquire+0x2f/0xb0 [ 302.912935][T10698] ? __fget_files+0x40/0x3f0 [ 302.914628][T10698] ? fdget+0x176/0x210 [ 302.916109][T10698] __sys_sendmsg+0x117/0x1f0 [ 302.917839][T10698] ? __pfx___sys_sendmsg+0x10/0x10 [ 302.919291][T10698] ? __fget_files+0x244/0x3f0 [ 302.920473][T10698] __do_fast_syscall_32+0x73/0x120 [ 302.921758][T10698] do_fast_syscall_32+0x32/0x80 [ 302.922986][T10698] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.924582][T10698] RIP: 0023:0xf7f8f579 [ 302.925672][T10698] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 302.932419][T10698] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 302.935357][T10698] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 302.938066][T10698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 302.940158][T10698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 302.942917][T10698] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 302.945167][T10698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.947952][T10698] [ 303.049879][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1607'. [ 303.105301][T10711] netlink: 'syz.2.1607': attribute type 4 has an invalid length. [ 303.110530][T10711] netlink: 'syz.2.1607': attribute type 4 has an invalid length. [ 303.236708][ T5407] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 303.397036][ T5407] usb 8-1: Using ep0 maxpacket: 16 [ 303.402800][ T5407] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.405649][ T5407] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.409086][ T5407] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.420048][ T5407] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.422938][ T5407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.443772][ T5407] usb 8-1: config 0 descriptor?? [ 303.500612][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1611'. [ 303.880660][ T39] kauditd_printk_skb: 65 callbacks suppressed [ 303.880672][ T39] audit: type=1326 audit(1728183155.111:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.889208][ T39] audit: type=1326 audit(1728183155.121:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.897083][ T39] audit: type=1326 audit(1728183155.131:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.904079][ T39] audit: type=1326 audit(1728183155.131:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.916319][ T39] audit: type=1326 audit(1728183155.131:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.922247][ T39] audit: type=1326 audit(1728183155.131:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=341 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.929709][ T39] audit: type=1326 audit(1728183155.131:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.935476][ T39] audit: type=1326 audit(1728183155.141:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.946843][ T39] audit: type=1326 audit(1728183155.141:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 303.962070][ T39] audit: type=1326 audit(1728183155.141:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10736 comm="syz.0.1614" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 304.072926][ T5407] usbhid 8-1:0.0: can't add hid device: -71 [ 304.075035][ T5407] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 304.079328][ T5407] usb 8-1: USB disconnect, device number 25 [ 304.263546][T10742] hfs: can't find a HFS filesystem on dev nullb0 [ 304.367094][ T5407] hid-generic 0000:0000:0000.0043: item fetching failed at offset 0/2 [ 304.369798][ T5407] hid-generic 0000:0000:0000.0043: probe with driver hid-generic failed with error -22 [ 304.396173][T10754] autofs: Bad value for 'fd' [ 304.679478][T10760] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 304.681667][T10760] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 304.684700][T10760] vhci_hcd vhci_hcd.0: Device attached [ 304.771102][T10765] overlay: Bad value for 'metacopy' [ 304.876563][ T35] vhci_hcd: vhci_device speed not set [ 304.946609][ T35] usb 19-1: new full-speed USB device number 19 using vhci_hcd [ 305.556615][T10761] vhci_hcd: connection reset by peer [ 305.568879][ T12] vhci_hcd: stop threads [ 305.570081][ T12] vhci_hcd: release socket [ 305.587313][ T12] vhci_hcd: disconnect device [ 305.773109][T10776] batman_adv: batadv0: Adding interface: ip6gretap1 [ 305.775437][T10776] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.785428][T10776] batman_adv: batadv0: Interface activated: ip6gretap1 [ 306.186574][ T5594] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 306.206718][T10789] fuse: Bad value for 'user_id' [ 306.208159][T10789] fuse: Bad value for 'user_id' [ 306.356524][ T5594] usb 5-1: Using ep0 maxpacket: 16 [ 306.360675][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.363381][ T5594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.365794][ T5594] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.372497][ T5594] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 306.374842][ T5594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.378384][ T5594] usb 5-1: config 0 descriptor?? [ 306.785538][ T1280] hid-generic 0000:0000:0000.0044: item fetching failed at offset 0/2 [ 306.787951][ T1280] hid-generic 0000:0000:0000.0044: probe with driver hid-generic failed with error -22 [ 306.804048][T10796] fuse: Bad value for 'user_id' [ 306.805798][T10796] fuse: Bad value for 'user_id' [ 306.988246][ T5594] usbhid 5-1:0.0: can't add hid device: -71 [ 306.990003][ T5594] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 306.992870][ T5594] usb 5-1: USB disconnect, device number 15 [ 308.552056][T10825] fuse: Bad value for 'user_id' [ 308.553482][T10825] fuse: Bad value for 'user_id' [ 308.913273][ T5351] hid-generic 0000:0000:0000.0045: item fetching failed at offset 0/2 [ 308.915659][ T5351] hid-generic 0000:0000:0000.0045: probe with driver hid-generic failed with error -22 [ 309.061223][T10838] netlink: 'syz.1.1646': attribute type 4 has an invalid length. [ 309.938053][T10879] mkiss: ax0: crc mode is auto. [ 310.032468][T10884] tmpfs: Bad value for 'mpol' [ 310.066818][ T35] vhci_hcd: vhci_device speed not set [ 310.773928][T10894] fuse: Bad value for 'user_id' [ 310.775487][T10894] fuse: Bad value for 'user_id' [ 310.836967][ T5594] hid-generic 0000:0000:0000.0046: item fetching failed at offset 0/2 [ 310.839334][ T5594] hid-generic 0000:0000:0000.0046: probe with driver hid-generic failed with error -22 [ 311.075183][T10907] netlink: 'syz.1.1661': attribute type 4 has an invalid length. [ 311.966905][ T5351] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 312.126587][ T5351] usb 8-1: Using ep0 maxpacket: 16 [ 312.129866][ T5351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.133302][ T5351] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.135708][ T5351] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 312.140370][ T5351] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 312.143665][ T5351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.149479][ T5351] usb 8-1: config 0 descriptor?? [ 312.626151][ T1296] hid-generic 0000:0000:0000.0047: item fetching failed at offset 0/2 [ 312.630291][ T1296] hid-generic 0000:0000:0000.0047: probe with driver hid-generic failed with error -22 [ 312.766347][ T5351] usbhid 8-1:0.0: can't add hid device: -71 [ 312.768098][ T5351] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 312.770944][ T5351] usb 8-1: USB disconnect, device number 26 [ 313.053193][T10942] netlink: 'syz.2.1673': attribute type 4 has an invalid length. [ 313.077413][T10944] fuse: Bad value for 'user_id' [ 313.078912][T10944] fuse: Bad value for 'user_id' [ 313.096529][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 313.100538][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1675'. [ 313.472618][T10952] XFS (sr0): Invalid superblock magic number [ 314.064006][T10972] loop7: detected capacity change from 0 to 16384 [ 314.216852][T10974] Invalid logical block size (1) [ 314.562247][ T1280] hid-generic 0000:0000:0000.0048: item fetching failed at offset 0/2 [ 314.564987][ T1280] hid-generic 0000:0000:0000.0048: probe with driver hid-generic failed with error -22 [ 314.662353][T10993] fuse: Bad value for 'user_id' [ 314.663738][T10993] fuse: Bad value for 'user_id' [ 315.146165][T11002] FAULT_INJECTION: forcing a failure. [ 315.146165][T11002] name failslab, interval 1, probability 0, space 0, times 0 [ 315.150848][T11002] CPU: 2 UID: 0 PID: 11002 Comm: syz.3.1688 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 315.153758][T11002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 315.157611][T11002] Call Trace: [ 315.158807][T11002] [ 315.159876][T11002] dump_stack_lvl+0x16c/0x1f0 [ 315.161525][T11002] should_fail_ex+0x497/0x5b0 [ 315.163241][T11002] ? fs_reclaim_acquire+0xae/0x160 [ 315.165028][T11002] should_failslab+0xc2/0x120 [ 315.166774][T11002] __kmalloc_noprof+0xcb/0x410 [ 315.168546][T11002] ? __pfx_d_absolute_path+0x10/0x10 [ 315.170478][T11002] tomoyo_encode2+0x100/0x3e0 [ 315.172222][T11002] tomoyo_realpath_from_path+0x1a7/0x710 [ 315.174101][T11002] tomoyo_path_number_perm+0x245/0x5b0 [ 315.175585][T11002] ? tomoyo_path_number_perm+0x232/0x5b0 [ 315.177446][T11002] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.179552][T11002] ? trace_lock_acquire+0x14a/0x1d0 [ 315.181368][T11002] ? lock_acquire+0x2f/0xb0 [ 315.182989][T11002] ? __fget_files+0x40/0x3f0 [ 315.184648][T11002] ? __fget_files+0x244/0x3f0 [ 315.186370][T11002] security_file_ioctl_compat+0x9b/0x240 [ 315.188436][T11002] __do_compat_sys_ioctl+0x52/0x2b0 [ 315.190329][T11002] __do_fast_syscall_32+0x73/0x120 [ 315.192177][T11002] do_fast_syscall_32+0x32/0x80 [ 315.193892][T11002] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 315.196184][T11002] RIP: 0023:0xf7fef579 [ 315.197671][T11002] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 315.204485][T11002] RSP: 002b:00000000f573456c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 315.207481][T11002] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000c004510e [ 315.210334][T11002] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000000 [ 315.213193][T11002] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 315.215627][T11002] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 315.218047][T11002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 315.220705][T11002] [ 315.225851][T11002] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.226777][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 315.349174][T11004] hsr_slave_1 (unregistering): left promiscuous mode [ 315.876279][T10999] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.878093][T10999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.880082][T10999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.193843][T11019] fuse: Bad value for 'fd' [ 316.442314][T11024] netlink: 'syz.2.1695': attribute type 4 has an invalid length. [ 316.468668][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.470447][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.830403][T11012] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 316.832678][T11012] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 316.834923][T11012] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 316.959264][T11031] overlayfs: conflicting lowerdir path [ 317.305511][T11036] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 317.625046][T11044] fuse: Bad value for 'user_id' [ 317.626569][T11044] fuse: Bad value for 'user_id' [ 317.788341][ T11] syzkaller0: tun_net_xmit 76 [ 317.789796][ T11] syzkaller0: tun_net_xmit 48 [ 317.816645][ T1296] syzkaller0: tun_net_xmit 76 [ 318.230426][ T5350] Bluetooth: hci0: command 0x0c1a tx timeout [ 318.866747][ T5352] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.868512][ T5350] Bluetooth: hci3: command 0x0c1a tx timeout [ 319.165896][ T5351] hid-generic 0000:0000:0000.0049: item fetching failed at offset 0/2 [ 319.169089][ T5351] hid-generic 0000:0000:0000.0049: probe with driver hid-generic failed with error -22 [ 319.214031][T11067] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1709'. [ 319.690652][T11080] binder: 11078:11080 ioctl c0189371 20000300 returned -22 [ 319.711142][T11080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1712'. [ 320.278200][T11091] fuse: Bad value for 'user_id' [ 320.279578][T11091] fuse: Bad value for 'user_id' [ 320.404098][T11096] Illegal XDP return value 65536 on prog (id 275) dev N/A, expect packet loss! [ 320.490093][T11098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1718'. [ 320.495862][T11098] bridge_slave_1: left allmulticast mode [ 320.499741][T11098] bridge_slave_1: left promiscuous mode [ 320.501353][T11098] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.511440][T11098] bridge1: port 1(bridge_slave_1) entered blocking state [ 320.513373][T11098] bridge1: port 1(bridge_slave_1) entered disabled state [ 320.515383][T11098] bridge_slave_1: entered allmulticast mode [ 320.521585][T11098] bridge_slave_1: entered promiscuous mode [ 320.541981][T11103] EXT4-fs (sda1): shut down requested (0) [ 320.732346][ T62] hid-generic 0000:0000:0000.004A: item fetching failed at offset 0/2 [ 320.734850][ T62] hid-generic 0000:0000:0000.004A: probe with driver hid-generic failed with error -22 [ 321.652029][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1724'. [ 321.677414][ T5350] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 321.844194][T11126] FAULT_INJECTION: forcing a failure. [ 321.844194][T11126] name failslab, interval 1, probability 0, space 0, times 0 [ 321.844330][T11126] CPU: 0 UID: 0 PID: 11126 Comm: syz.1.1726 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 321.844353][T11126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 321.844360][T11126] Call Trace: [ 321.844364][T11126] [ 321.844369][T11126] dump_stack_lvl+0x16c/0x1f0 [ 321.844389][T11126] should_fail_ex+0x497/0x5b0 [ 321.844405][T11126] ? fs_reclaim_acquire+0xae/0x160 [ 321.844420][T11126] should_failslab+0xc2/0x120 [ 321.844435][T11126] __kmalloc_noprof+0xcb/0x410 [ 321.844449][T11126] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 321.844468][T11126] tomoyo_realpath_from_path+0xbf/0x710 [ 321.844487][T11126] ? tomoyo_path_number_perm+0x232/0x5b0 [ 321.844502][T11126] tomoyo_path_number_perm+0x245/0x5b0 [ 321.844515][T11126] ? tomoyo_path_number_perm+0x232/0x5b0 [ 321.844534][T11126] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 321.844559][T11126] ? trace_lock_acquire+0x14a/0x1d0 [ 321.844573][T11126] ? lock_acquire+0x2f/0xb0 [ 321.844587][T11126] ? __fget_files+0x40/0x3f0 [ 321.844600][T11126] ? __fget_files+0x244/0x3f0 [ 321.844612][T11126] security_file_ioctl_compat+0x9b/0x240 [ 321.878033][T11126] __do_compat_sys_ioctl+0x52/0x2b0 [ 321.878062][T11126] __do_fast_syscall_32+0x73/0x120 [ 321.878079][T11126] do_fast_syscall_32+0x32/0x80 [ 321.878093][T11126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 321.878109][T11126] RIP: 0023:0xf7f26579 [ 321.878119][T11126] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 321.878129][T11126] RSP: 002b:00000000f568556c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 321.878141][T11126] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c020aa08 [ 321.878148][T11126] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.878155][T11126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 321.878161][T11126] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 321.878167][T11126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 321.878180][T11126] [ 321.878397][T11126] ERROR: Out of memory at tomoyo_realpath_from_path. [ 321.879466][T11126] mmap: syz.1.1726 (11126) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 322.860171][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1731'. [ 323.133106][ T35] hid-generic 0000:0000:0000.004B: item fetching failed at offset 0/2 [ 323.135500][ T35] hid-generic 0000:0000:0000.004B: probe with driver hid-generic failed with error -22 [ 324.365802][T11174] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 324.367621][T11174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 324.371125][T11174] vhci_hcd vhci_hcd.0: Device attached [ 324.489476][T11177] overlay: Bad value for 'metacopy' [ 324.556578][ T35] vhci_hcd: vhci_device speed not set [ 324.585892][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 324.585904][ T39] audit: type=1326 audit(1728183175.811:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11155 comm="syz.0.1735" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7fc00000 [ 324.616564][ T35] usb 15-1: new full-speed USB device number 20 using vhci_hcd [ 324.926541][ T62] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 325.086597][ T62] usb 5-1: Using ep0 maxpacket: 16 [ 325.089906][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.094273][ T62] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.097761][ T62] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 325.102131][ T62] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 325.105244][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.110823][ T62] usb 5-1: config 0 descriptor?? [ 325.146952][T11193] netlink: 'syz.2.1746': attribute type 4 has an invalid length. [ 325.217203][T11175] vhci_hcd: connection reset by peer [ 325.219089][ T76] vhci_hcd: stop threads [ 325.220580][ T76] vhci_hcd: release socket [ 325.222012][ T76] vhci_hcd: disconnect device [ 325.574860][ T1280] hid-generic 0000:0000:0000.004C: item fetching failed at offset 0/2 [ 325.577609][ T1280] hid-generic 0000:0000:0000.004C: probe with driver hid-generic failed with error -22 [ 325.720948][ T62] usbhid 5-1:0.0: can't add hid device: -71 [ 325.722583][ T62] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 325.725846][ T62] usb 5-1: USB disconnect, device number 16 [ 326.279109][T11207] FAULT_INJECTION: forcing a failure. [ 326.279109][T11207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.286480][T11207] CPU: 0 UID: 0 PID: 11207 Comm: syz.2.1751 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 326.289303][T11207] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 326.292068][T11207] Call Trace: [ 326.292944][T11207] [ 326.293757][T11207] dump_stack_lvl+0x16c/0x1f0 [ 326.295039][T11207] should_fail_ex+0x497/0x5b0 [ 326.296522][T11207] _copy_from_iter+0x29b/0x13e0 [ 326.297806][T11207] ? __pfx__copy_from_iter+0x10/0x10 [ 326.299208][T11207] ? __virt_addr_valid+0x1a4/0x590 [ 326.300570][T11207] ? __virt_addr_valid+0x5e/0x590 [ 326.301887][T11207] ? __phys_addr_symbol+0x30/0x80 [ 326.303232][T11207] ? __check_object_size+0x488/0x710 [ 326.304676][T11207] netlink_sendmsg+0x813/0xd70 [ 326.305988][T11207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.307374][T11207] ? lock_acquire+0x2f/0xb0 [ 326.308573][T11207] ____sys_sendmsg+0x9ae/0xb40 [ 326.309827][T11207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.311226][T11207] ? get_compat_msghdr+0x11b/0x170 [ 326.312576][T11207] ? __pfx___lock_acquire+0x10/0x10 [ 326.313984][T11207] ___sys_sendmsg+0x135/0x1e0 [ 326.315233][T11207] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.316605][T11207] ? lock_acquire+0x2f/0xb0 [ 326.317822][T11207] ? __fget_files+0x40/0x3f0 [ 326.319079][T11207] ? fdget+0x176/0x210 [ 326.320154][T11207] __sys_sendmsg+0x117/0x1f0 [ 326.321370][T11207] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.322742][T11207] ? __fget_files+0x244/0x3f0 [ 326.324021][T11207] __do_fast_syscall_32+0x73/0x120 [ 326.325359][T11207] do_fast_syscall_32+0x32/0x80 [ 326.326645][T11207] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 326.328342][T11207] RIP: 0023:0xf7f8f579 [ 326.329404][T11207] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 326.334416][T11207] RSP: 002b:00000000f56f556c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 326.336584][T11207] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000100 [ 326.338685][T11207] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 326.340730][T11207] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 326.342795][T11207] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 326.344868][T11207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 326.346958][T11207] [ 326.892166][T11221] netlink: 'syz.3.1757': attribute type 4 has an invalid length. [ 327.039686][T11229] fuse: Bad value for 'user_id' [ 327.041060][T11229] fuse: Bad value for 'user_id' [ 327.804392][T11239] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 327.813130][T11239] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1764'. [ 327.935515][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1768'. [ 328.036538][T11255] FAULT_INJECTION: forcing a failure. [ 328.036538][T11255] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 328.040169][T11255] CPU: 1 UID: 0 PID: 11255 Comm: syz.1.1769 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 328.042945][T11255] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 328.045792][T11255] Call Trace: [ 328.046667][T11255] [ 328.047423][T11255] dump_stack_lvl+0x16c/0x1f0 [ 328.048650][T11255] should_fail_ex+0x497/0x5b0 [ 328.049893][T11255] ? fs_reclaim_acquire+0xae/0x160 [ 328.051270][T11255] should_fail_alloc_page+0xe7/0x130 [ 328.052665][T11255] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 328.054250][T11255] __alloc_pages_noprof+0x190/0x25c0 [ 328.055785][T11255] ? __pfx_register_lock_class+0x10/0x10 [ 328.057252][T11255] ? bpf_ksym_find+0x124/0x1c0 [ 328.058528][T11255] ? hlock_class+0x4e/0x130 [ 328.059724][T11255] ? hlock_class+0x4e/0x130 [ 328.060893][T11255] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 328.062354][T11255] ? __pfx___lock_acquire+0x10/0x10 [ 328.063737][T11255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.065552][T11255] ? policy_nodemask+0xea/0x4e0 [ 328.067035][T11255] alloc_pages_mpol_noprof+0x2c9/0x610 [ 328.068428][T11255] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 328.070007][T11255] ? do_raw_spin_lock+0x12d/0x2c0 [ 328.071339][T11255] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 328.072712][T11255] ? lock_acquire+0x2f/0xb0 [ 328.073892][T11255] ? __pud_alloc+0x1c6/0x600 [ 328.075217][T11255] __pmd_alloc+0x3f/0x810 [ 328.076654][T11255] __handle_mm_fault+0x942/0x2a10 [ 328.078373][T11255] ? __pfx_mt_find+0x10/0x10 [ 328.079906][T11255] ? __pfx___handle_mm_fault+0x10/0x10 [ 328.081415][T11255] handle_mm_fault+0x3fa/0xaa0 [ 328.083045][T11255] __get_user_pages+0x90f/0x3b90 [ 328.084740][T11255] ? __pfx___get_user_pages+0x10/0x10 [ 328.086551][T11255] get_user_pages_remote+0x25e/0xb30 [ 328.087988][T11255] ? lock_acquire+0x2f/0xb0 [ 328.089165][T11255] ? __pfx_get_user_pages_remote+0x10/0x10 [ 328.090695][T11255] ? down_read+0xc9/0x330 [ 328.091823][T11255] ? __might_fault+0x13b/0x190 [ 328.093174][T11255] get_arg_page+0x13e/0x640 [ 328.094326][T11255] ? __pfx_get_arg_page+0x10/0x10 [ 328.095652][T11255] ? __might_fault+0xe3/0x190 [ 328.096909][T11255] ? __might_fault+0xe3/0x190 [ 328.098115][T11255] copy_string_kernel+0x165/0x210 [ 328.099432][T11255] ? count.constprop.0.isra.0+0xf4/0x170 [ 328.100885][T11255] do_execveat_common.isra.0+0x34e/0x630 [ 328.102492][T11255] __ia32_compat_sys_execveat+0xe0/0x120 [ 328.103978][T11255] __do_fast_syscall_32+0x73/0x120 [ 328.105530][T11255] do_fast_syscall_32+0x32/0x80 [ 328.107118][T11255] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 328.108921][T11255] RIP: 0023:0xf7f26579 [ 328.109960][T11255] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 328.115552][T11255] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000166 [ 328.118413][T11255] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000040 [ 328.120478][T11255] RDX: 0000000020000280 RSI: 00000000200002c0 RDI: 0000000000000000 [ 328.122509][T11255] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 328.124579][T11255] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 328.126602][T11255] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 328.128879][T11255] [ 328.129974][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.283512][T11270] netlink: 'syz.1.1771': attribute type 4 has an invalid length. [ 329.736611][ T35] vhci_hcd: vhci_device speed not set [ 330.071804][T11290] overlay: Unknown parameter '/' [ 330.839195][T11299] overlay: Unknown parameter '/' [ 330.906112][ T5407] hid-generic 0000:0000:0000.004D: item fetching failed at offset 0/2 [ 330.910382][ T5407] hid-generic 0000:0000:0000.004D: probe with driver hid-generic failed with error -22 [ 331.013945][T11308] fuse: Bad value for 'user_id' [ 331.015306][T11308] fuse: Bad value for 'user_id' [ 331.024696][T11307] fuse: Bad value for 'user_id' [ 331.027038][T11307] fuse: Bad value for 'user_id' [ 331.746770][T11315] netlink: 'syz.2.1782': attribute type 4 has an invalid length. [ 331.763252][ T1280] hid-generic 0000:0000:0000.004E: item fetching failed at offset 0/2 [ 331.766616][ T1280] hid-generic 0000:0000:0000.004E: probe with driver hid-generic failed with error -22 [ 331.873876][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 331.906019][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1784'. [ 332.173909][T11339] FAULT_INJECTION: forcing a failure. [ 332.173909][T11339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.177998][T11339] CPU: 2 UID: 0 PID: 11339 Comm: syz.3.1790 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 332.180823][T11339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 332.184369][T11339] Call Trace: [ 332.185365][T11339] [ 332.186164][T11339] dump_stack_lvl+0x16c/0x1f0 [ 332.187789][T11339] should_fail_ex+0x497/0x5b0 [ 332.189466][T11339] _copy_to_user+0x30/0xc0 [ 332.190919][T11339] simple_read_from_buffer+0xd0/0x160 [ 332.192588][T11339] proc_fail_nth_read+0x198/0x270 [ 332.194104][T11339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.195994][T11339] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 332.197642][T11339] vfs_read+0x1ce/0xbd0 [ 332.198781][T11339] ? __fget_files+0x23a/0x3f0 [ 332.200019][T11339] ? fdget_pos+0x24c/0x360 [ 332.201190][T11339] ? __pfx_lock_release+0x10/0x10 [ 332.202849][T11339] ? trace_lock_acquire+0x14a/0x1d0 [ 332.204602][T11339] ? __pfx_vfs_read+0x10/0x10 [ 332.206054][T11339] ? __pfx___mutex_lock+0x10/0x10 [ 332.207747][T11339] ? __fget_files+0x244/0x3f0 [ 332.209464][T11339] ksys_read+0x12f/0x260 [ 332.210736][T11339] ? __pfx_ksys_read+0x10/0x10 [ 332.212143][T11339] __do_fast_syscall_32+0x73/0x120 [ 332.213486][T11339] do_fast_syscall_32+0x32/0x80 [ 332.214785][T11339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 332.216695][T11339] RIP: 0023:0xf7fef579 [ 332.218151][T11339] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 332.224755][T11339] RSP: 002b:00000000f57765a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 332.227157][T11339] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5776620 [ 332.229844][T11339] RDX: 000000000000000f RSI: 00000000f747bff4 RDI: 0000000000000000 [ 332.232723][T11339] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 332.235634][T11339] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 332.238517][T11339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 332.241413][T11339] [ 332.271400][ T62] hid-generic 0000:0000:0000.004F: item fetching failed at offset 0/2 [ 332.274123][ T62] hid-generic 0000:0000:0000.004F: probe with driver hid-generic failed with error -22 [ 332.553571][T11345] ax25_connect(): syz.2.1792 uses autobind, please contact jreuter@yaina.de [ 332.665265][T11351] fuse: Bad value for 'user_id' [ 332.666881][T11351] fuse: Bad value for 'user_id' [ 333.209963][T11364] FAULT_INJECTION: forcing a failure. [ 333.209963][T11364] name failslab, interval 1, probability 0, space 0, times 0 [ 333.226675][T11364] CPU: 1 UID: 0 PID: 11364 Comm: syz.3.1799 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 333.230198][T11364] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 333.233312][T11364] Call Trace: [ 333.234462][T11364] [ 333.235501][T11364] dump_stack_lvl+0x16c/0x1f0 [ 333.237131][T11364] should_fail_ex+0x497/0x5b0 [ 333.238746][T11364] should_failslab+0xc2/0x120 [ 333.240342][T11364] __kmalloc_cache_noprof+0x6b/0x310 [ 333.242031][T11364] ? sctp_add_bind_addr+0x9d/0x3e0 [ 333.243409][T11364] sctp_add_bind_addr+0x9d/0x3e0 [ 333.244738][T11364] sctp_copy_local_addr_list+0x39e/0x5a0 [ 333.246229][T11364] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 333.247887][T11364] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 333.249589][T11364] ? sctp_bind_addr_copy+0xe0/0x530 [ 333.251120][T11364] sctp_bind_addr_copy+0xe0/0x530 [ 333.252537][T11364] sctp_connect_new_asoc+0x1d8/0x790 [ 333.254260][T11364] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 333.255821][T11364] ? mark_held_locks+0x9f/0xe0 [ 333.257088][T11364] ? sctp_sendmsg+0x112f/0x1f10 [ 333.258390][T11364] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 333.259900][T11364] sctp_sendmsg+0x162a/0x1f10 [ 333.261510][T11364] ? __pfx___lock_acquire+0x10/0x10 [ 333.262987][T11364] ? __pfx_sctp_sendmsg+0x10/0x10 [ 333.264310][T11364] ? lock_acquire+0x2f/0xb0 [ 333.265693][T11364] ? __pfx_aa_sk_perm+0x10/0x10 [ 333.267326][T11364] ? __pfx_sctp_sendmsg+0x10/0x10 [ 333.268654][T11364] inet_sendmsg+0x119/0x140 [ 333.269855][T11364] __sys_sendto+0x426/0x4d0 [ 333.271074][T11364] ? __pfx___sys_sendto+0x10/0x10 [ 333.272414][T11364] ? ksys_write+0x1ad/0x260 [ 333.273615][T11364] ? __pfx_ksys_write+0x10/0x10 [ 333.274911][T11364] __ia32_sys_sendto+0xdd/0x1b0 [ 333.276201][T11364] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.277573][T11364] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 333.279302][T11364] __do_fast_syscall_32+0x73/0x120 [ 333.280652][T11364] do_fast_syscall_32+0x32/0x80 [ 333.281937][T11364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.283595][T11364] RIP: 0023:0xf7fef579 [ 333.284683][T11364] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 333.289814][T11364] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 333.292307][T11364] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000020847fff [ 333.294349][T11364] RDX: 0000000000034000 RSI: 0000000000000000 RDI: 000000002005ffe4 [ 333.296578][T11364] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 333.298788][T11364] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 333.300856][T11364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.302951][T11364] [ 333.578301][T11373] netlink: 'syz.0.1801': attribute type 4 has an invalid length. [ 334.306183][ T35] hid-generic 0000:0000:0000.0050: item fetching failed at offset 0/2 [ 334.309617][ T35] hid-generic 0000:0000:0000.0050: probe with driver hid-generic failed with error -22 [ 335.519938][ T5352] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 335.525218][T11416] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.527213][T11416] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.720869][T11448] FAULT_INJECTION: forcing a failure. [ 336.720869][T11448] name failslab, interval 1, probability 0, space 0, times 0 [ 336.725377][T11448] CPU: 3 UID: 0 PID: 11448 Comm: syz.2.1823 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 336.726719][ T39] audit: type=1326 audit(1728183187.951:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.729422][T11448] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 336.729437][T11448] Call Trace: [ 336.729445][T11448] [ 336.729453][T11448] dump_stack_lvl+0x16c/0x1f0 [ 336.729485][T11448] should_fail_ex+0x497/0x5b0 [ 336.729511][T11448] ? fs_reclaim_acquire+0xae/0x160 [ 336.729536][T11448] should_failslab+0xc2/0x120 [ 336.729562][T11448] __kmalloc_cache_noprof+0x6b/0x310 [ 336.729586][T11448] ? audit_log_d_path+0xce/0x1e0 [ 336.729614][T11448] audit_log_d_path+0xce/0x1e0 [ 336.729638][T11448] audit_log_d_path_exe+0x46/0x70 [ 336.729667][T11448] audit_log_task+0x279/0x300 [ 336.729692][T11448] ? __pfx_audit_log_task+0x10/0x10 [ 336.729718][T11448] ? migrate_enable+0x1ef/0x260 [ 336.729744][T11448] ? __pfx_migrate_enable+0x10/0x10 [ 336.729772][T11448] audit_seccomp+0x7a/0x280 [ 336.729796][T11448] __seccomp_filter+0x816/0xf40 [ 336.729818][T11448] ? __pfx___seccomp_filter+0x10/0x10 [ 336.729843][T11448] ? fput+0x30/0x390 [ 336.729867][T11448] ? ksys_write+0x1ad/0x260 [ 336.729889][T11448] __secure_computing+0x26c/0x3f0 [ 336.729911][T11448] syscall_trace_enter+0x8b/0x240 [ 336.729940][T11448] __do_fast_syscall_32+0xc2/0x120 [ 336.729966][T11448] do_fast_syscall_32+0x32/0x80 [ 336.729989][T11448] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 336.730014][T11448] RIP: 0023:0xf7f8f579 [ 336.730029][T11448] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 336.730047][T11448] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 000000000000005e [ 336.730068][T11448] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000000000d7 [ 336.730080][T11448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 336.730092][T11448] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 336.730104][T11448] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 336.730115][T11448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.730138][T11448] [ 336.803158][ T39] audit: type=1326 audit(1728183187.951:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.810812][ T39] audit: type=1326 audit(1728183187.951:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.817869][ T39] audit: type=1326 audit(1728183187.951:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.825801][ T39] audit: type=1326 audit(1728183187.951:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=10 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.832619][ T39] audit: type=1326 audit(1728183187.951:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.839411][ T39] audit: type=1326 audit(1728183187.951:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.845884][ T39] audit: type=1326 audit(1728183187.951:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.852525][ T39] audit: type=1326 audit(1728183187.951:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 336.859507][ T39] audit: type=1326 audit(1728183187.951:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11447 comm="syz.2.1823" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 337.033694][T11457] fuse: Unknown parameter '' [ 337.173321][T11465] sg_write: data in/out 196608/4 bytes for SCSI command 0xdb-- guessing data in; [ 337.173321][T11465] program syz.3.1830 not setting count and/or reply_len properly [ 337.357898][T11470] fuse: Bad value for 'user_id' [ 337.359446][T11470] fuse: Bad value for 'user_id' [ 338.215342][T11486] FAULT_INJECTION: forcing a failure. [ 338.215342][T11486] name failslab, interval 1, probability 0, space 0, times 0 [ 338.226062][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.3.1836 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 338.228901][T11486] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 338.231697][T11486] Call Trace: [ 338.232587][T11486] [ 338.233377][T11486] dump_stack_lvl+0x16c/0x1f0 [ 338.234639][T11486] should_fail_ex+0x497/0x5b0 [ 338.235893][T11486] ? fs_reclaim_acquire+0xae/0x160 [ 338.237240][T11486] should_failslab+0xc2/0x120 [ 338.238509][T11486] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 338.239925][T11486] ? alloc_vfsmnt+0x23/0x6e0 [ 338.241147][T11486] alloc_vfsmnt+0x23/0x6e0 [ 338.242330][T11486] clone_mnt+0x6d/0xf90 [ 338.243450][T11486] copy_tree+0x3a1/0x910 [ 338.244571][T11486] copy_mnt_ns+0x1b5/0xa00 [ 338.245752][T11486] ? trace_kmem_cache_alloc+0x2d/0xe0 [ 338.247170][T11486] ? kmem_cache_alloc_noprof+0x174/0x2f0 [ 338.248609][T11486] ? create_new_namespaces+0x30/0xad0 [ 338.250012][T11486] create_new_namespaces+0xd3/0xad0 [ 338.251390][T11486] ? bpf_lsm_capable+0x9/0x10 [ 338.252633][T11486] ? security_capable+0x7e/0x260 [ 338.253942][T11486] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 338.255419][T11486] ksys_unshare+0x45d/0xa40 [ 338.256618][T11486] ? __pfx_ksys_unshare+0x10/0x10 [ 338.257937][T11486] ? ksys_write+0x1ad/0x260 [ 338.259155][T11486] __ia32_sys_unshare+0x30/0x40 [ 338.260447][T11486] __do_fast_syscall_32+0x73/0x120 [ 338.261798][T11486] do_fast_syscall_32+0x32/0x80 [ 338.263099][T11486] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 338.264762][T11486] RIP: 0023:0xf7fef579 [ 338.265894][T11486] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 338.271051][T11486] RSP: 002b:00000000f575556c EFLAGS: 00000296 ORIG_RAX: 0000000000000136 [ 338.273212][T11486] RAX: ffffffffffffffda RBX: 0000000026020280 RCX: 0000000000000000 [ 338.275287][T11486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.277357][T11486] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 338.279370][T11486] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 338.281432][T11486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 338.283504][T11486] [ 338.284421][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.674456][T11507] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1840'. [ 339.689620][T11507] Êü: entered promiscuous mode [ 339.935261][T11516] FAULT_INJECTION: forcing a failure. [ 339.935261][T11516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.944327][T11516] CPU: 1 UID: 0 PID: 11516 Comm: syz.3.1844 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 339.947746][T11516] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 339.950616][T11516] Call Trace: [ 339.951513][T11516] [ 339.952277][T11516] dump_stack_lvl+0x16c/0x1f0 [ 339.953477][T11516] should_fail_ex+0x497/0x5b0 [ 339.954686][T11516] _copy_from_user+0x30/0xf0 [ 339.955848][T11516] kstrtouint_from_user+0xd7/0x1c0 [ 339.957226][T11516] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 339.958770][T11516] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 339.960262][T11516] proc_fail_nth_write+0x84/0x250 [ 339.961602][T11516] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 339.963107][T11516] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 339.964592][T11516] vfs_write+0x28e/0x1140 [ 339.965749][T11516] ? __fget_files+0x23a/0x3f0 [ 339.967136][T11516] ? fdget_pos+0x24c/0x360 [ 339.968720][T11516] ? __pfx_lock_release+0x10/0x10 [ 339.970144][T11516] ? trace_lock_acquire+0x14a/0x1d0 [ 339.971506][T11516] ? __pfx_vfs_write+0x10/0x10 [ 339.972754][T11516] ? __pfx___mutex_lock+0x10/0x10 [ 339.974063][T11516] ? __fget_files+0x244/0x3f0 [ 339.975307][T11516] ksys_write+0x12f/0x260 [ 339.976417][T11516] ? __pfx_ksys_write+0x10/0x10 [ 339.977715][T11516] __do_fast_syscall_32+0x73/0x120 [ 339.979059][T11516] do_fast_syscall_32+0x32/0x80 [ 339.980328][T11516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 339.981999][T11516] RIP: 0023:0xf7fef579 [ 339.983085][T11516] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 339.988155][T11516] RSP: 002b:00000000f57555a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 339.990248][T11516] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f5755620 [ 339.992272][T11516] RDX: 0000000000000001 RSI: 00000000f747bff4 RDI: 0000000000000000 [ 339.994348][T11516] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 339.996431][T11516] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 339.998745][T11516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 340.000987][T11516] [ 340.001894][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.537554][T11527] sit0: entered promiscuous mode [ 340.543117][T11527] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 340.545204][T11527] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1847'. [ 340.625062][ T62] hid-generic 0000:0000:0000.0051: item fetching failed at offset 0/2 [ 340.627763][ T62] hid-generic 0000:0000:0000.0051: probe with driver hid-generic failed with error -22 [ 341.587066][T11545] fuse: Bad value for 'user_id' [ 341.591632][T11545] fuse: Bad value for 'user_id' [ 341.850665][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 341.850676][ T39] audit: type=1326 audit(1728183193.081:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.858158][ T39] audit: type=1326 audit(1728183193.081:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.863939][ T39] audit: type=1326 audit(1728183193.081:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.869602][T11555] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 341.870542][ T39] audit: type=1326 audit(1728183193.081:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.871320][T11555] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 341.877013][ T39] audit: type=1326 audit(1728183193.081:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.881454][T11555] vhci_hcd vhci_hcd.0: Device attached [ 341.891567][ T39] audit: type=1326 audit(1728183193.081:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.908660][ T39] audit: type=1326 audit(1728183193.081:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.914140][ T39] audit: type=1326 audit(1728183193.081:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.925145][ T39] audit: type=1326 audit(1728183193.081:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.932656][ T39] audit: type=1326 audit(1728183193.081:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11552 comm="syz.2.1854" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7ffc0000 [ 341.945098][T11560] overlay: Bad value for 'metacopy' [ 342.057469][ T62] vhci_hcd: vhci_device speed not set [ 342.126573][ T62] usb 13-1: new full-speed USB device number 20 using vhci_hcd [ 342.628982][ T1280] hid-generic 0000:0000:0000.0052: item fetching failed at offset 0/2 [ 342.642219][ T1280] hid-generic 0000:0000:0000.0052: probe with driver hid-generic failed with error -22 [ 342.703855][T11556] vhci_hcd: connection reset by peer [ 342.707528][ T76] vhci_hcd: stop threads [ 342.708804][ T76] vhci_hcd: release socket [ 342.711410][ T76] vhci_hcd: disconnect device [ 343.415255][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1863'. [ 343.664317][T11595] fuse: Bad value for 'user_id' [ 343.666164][T11595] fuse: Bad value for 'user_id' [ 344.026586][T11605] xt_CONNSECMARK: invalid mode: 0 [ 344.487578][ T35] hid-generic 0000:0000:0000.0053: item fetching failed at offset 0/2 [ 344.490718][ T35] hid-generic 0000:0000:0000.0053: probe with driver hid-generic failed with error -22 [ 344.610714][ T76] syzkaller0: tun_net_xmit 76 [ 344.614105][ T76] syzkaller0: tun_net_xmit 48 [ 344.876586][ T5351] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 344.876713][ T5407] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 345.029700][ T5351] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 345.032091][ T5351] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.034138][ T5351] usb 6-1: Product: syz [ 345.035218][ T5351] usb 6-1: Manufacturer: syz [ 345.036629][ T5351] usb 6-1: SerialNumber: syz [ 345.040733][ T5351] usb 6-1: config 0 descriptor?? [ 345.056522][ T5407] usb 8-1: Using ep0 maxpacket: 8 [ 345.059797][ T5407] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 345.062777][ T5407] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 345.065433][ T5407] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 345.068058][ T5407] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 345.070630][ T5407] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 345.073964][ T5407] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 345.076672][ T5407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.296248][ T5407] usb 8-1: usb_control_msg returned -32 [ 345.298064][ T5407] usbtmc 8-1:16.0: can't read capabilities [ 345.309922][ T5351] usb 6-1: USB disconnect, device number 12 [ 345.342835][T11628] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 345.344995][T11628] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 345.347533][T11628] vhci_hcd vhci_hcd.0: Device attached [ 345.423671][T11631] overlay: Bad value for 'metacopy' [ 346.083789][T11645] netlink: 'syz.2.1880': attribute type 4 has an invalid length. [ 346.178719][T11629] vhci_hcd: connection closed [ 346.179061][ T11] vhci_hcd: stop threads [ 346.181702][ T11] vhci_hcd: release socket [ 346.183038][ T11] vhci_hcd: disconnect device [ 346.202792][T11648] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 347.226592][ T5407] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 347.256638][ T62] vhci_hcd: vhci_device speed not set [ 347.396677][ T5407] usb 7-1: Using ep0 maxpacket: 8 [ 347.400610][ T5407] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 347.403884][ T5407] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 347.407152][ T5407] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 347.410388][ T5407] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 347.414090][ T5407] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 347.418850][ T5407] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 347.422061][ T5407] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.644701][ T5407] usb 7-1: usb_control_msg returned -32 [ 347.646331][ T5407] usbtmc 7-1:16.0: can't read capabilities [ 347.777349][ T5351] usb 8-1: USB disconnect, device number 27 [ 348.018514][T11659] fuse: Bad value for 'user_id' [ 348.018534][T11659] fuse: Bad value for 'user_id' [ 348.104810][T11661] fuse: Unknown parameter 'grid' [ 348.345025][ T35] hid-generic 0000:0000:0000.0054: item fetching failed at offset 0/2 [ 348.347761][ T35] hid-generic 0000:0000:0000.0054: probe with driver hid-generic failed with error -22 [ 349.267986][T11683] netlink: 'syz.3.1892': attribute type 7 has an invalid length. [ 349.270092][T11683] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1892'. [ 350.056892][ T1280] usb 7-1: USB disconnect, device number 12 [ 350.185326][ T1101] syzkaller0: tun_net_xmit 76 [ 350.190534][ T1101] syzkaller0: tun_net_xmit 48 [ 350.211014][ T5407] syzkaller0: tun_net_xmit 76 [ 350.531881][T11693] fuse: Bad value for 'user_id' [ 350.533211][T11693] fuse: Bad value for 'user_id' [ 350.879757][T11706] binder: 11705:11706 ioctl c0306201 20000180 returned -22 [ 351.713012][T11704] FAULT_INJECTION: forcing a failure. [ 351.713012][T11704] name failslab, interval 1, probability 0, space 0, times 0 [ 351.717560][T11704] CPU: 3 UID: 0 PID: 11704 Comm: syz.1.1898 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 351.721191][T11704] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 351.724860][T11704] Call Trace: [ 351.726078][T11704] [ 351.727167][T11704] dump_stack_lvl+0x16c/0x1f0 [ 351.728824][T11704] should_fail_ex+0x497/0x5b0 [ 351.730439][T11704] ? fs_reclaim_acquire+0xae/0x160 [ 351.732148][T11704] should_failslab+0xc2/0x120 [ 351.733763][T11704] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 351.735920][T11704] ? hlock_class+0x4e/0x130 [ 351.737489][T11704] ? kstrdup_const+0x63/0x80 [ 351.739105][T11704] kstrdup+0x3c/0x80 [ 351.740464][T11704] kstrdup_const+0x63/0x80 [ 351.741992][T11704] __kernfs_new_node+0x9c/0x890 [ 351.743711][T11704] ? __pfx___kernfs_new_node+0x10/0x10 [ 351.745590][T11704] ? __pfx_lock_release+0x10/0x10 [ 351.747374][T11704] ? kernfs_add_one+0x39d/0x520 [ 351.749098][T11704] ? lock_acquire.part.0+0x11b/0x380 [ 351.750945][T11704] ? find_held_lock+0x2d/0x110 [ 351.752640][T11704] kernfs_new_node+0x186/0x240 [ 351.754283][T11704] kernfs_create_link+0xcc/0x240 [ 351.756019][T11704] sysfs_do_create_link_sd+0x90/0x140 [ 351.757868][T11704] sysfs_create_link+0x61/0xc0 [ 351.759515][T11704] device_add+0x62e/0x1a70 [ 351.761073][T11704] ? __pfx_device_add+0x10/0x10 [ 351.762771][T11704] ? __init_waitqueue_head+0xca/0x150 [ 351.764575][T11704] netdev_register_kobject+0x187/0x3f0 [ 351.766479][T11704] register_netdevice+0x1473/0x1e20 [ 351.768278][T11704] ? __pfx_register_netdevice+0x10/0x10 [ 351.770205][T11704] ip6_tnl_create2+0x79/0xe0 [ 351.771853][T11704] ip6_tnl_newlink+0x1bf/0x380 [ 351.773527][T11704] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 351.775343][T11704] ? rtnl_create_link+0xa2e/0xf10 [ 351.777059][T11704] ? __pfx_ip6_tnl_newlink+0x10/0x10 [ 351.778962][T11704] __rtnl_newlink+0x119c/0x1920 [ 351.780681][T11704] ? __pfx___rtnl_newlink+0x10/0x10 [ 351.782551][T11704] rtnl_newlink+0x67/0xa0 [ 351.784058][T11704] ? __pfx_rtnl_newlink+0x10/0x10 [ 351.785773][T11704] rtnetlink_rcv_msg+0x3c7/0xea0 [ 351.787411][T11704] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 351.789266][T11704] ? __pfx___dev_queue_xmit+0x10/0x10 [ 351.791160][T11704] netlink_rcv_skb+0x165/0x410 [ 351.792709][T11704] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 351.794567][T11704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 351.796460][T11704] ? netlink_deliver_tap+0x1ae/0xcf0 [ 351.798281][T11704] netlink_unicast+0x53c/0x7f0 [ 351.799947][T11704] ? __pfx_netlink_unicast+0x10/0x10 [ 351.801782][T11704] ? __phys_addr_symbol+0x30/0x80 [ 351.803516][T11704] ? __check_object_size+0x488/0x710 [ 351.805328][T11704] netlink_sendmsg+0x8b8/0xd70 [ 351.806975][T11704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.808804][T11704] ? lock_acquire+0x2f/0xb0 [ 351.810401][T11704] ____sys_sendmsg+0x9ae/0xb40 [ 351.812126][T11704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.814058][T11704] ? get_compat_msghdr+0x11b/0x170 [ 351.815917][T11704] ? __pfx___lock_acquire+0x10/0x10 [ 351.817799][T11704] ___sys_sendmsg+0x135/0x1e0 [ 351.819558][T11704] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.821459][T11704] ? lock_acquire+0x2f/0xb0 [ 351.823010][T11704] ? __fget_files+0x40/0x3f0 [ 351.824582][T11704] ? fdget+0x176/0x210 [ 351.826019][T11704] __sys_sendmsg+0x117/0x1f0 [ 351.827618][T11704] ? __pfx___sys_sendmsg+0x10/0x10 [ 351.829335][T11704] ? __fget_files+0x244/0x3f0 [ 351.831002][T11704] __do_fast_syscall_32+0x73/0x120 [ 351.832767][T11704] do_fast_syscall_32+0x32/0x80 [ 351.834425][T11704] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 351.836591][T11704] RIP: 0023:0xf7f26579 [ 351.838010][T11704] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 351.844352][T11704] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 351.847206][T11704] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000080 [ 351.849973][T11704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 351.852666][T11704] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 351.855351][T11704] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 351.858128][T11704] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 351.860849][T11704] [ 351.863811][T11707] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 351.958055][T11716] autofs: Unknown parameter './file1' [ 352.041403][T11722] affs: No valid root block on device nullb0 [ 352.054577][T11723] tmpfs: Unknown parameter 'Î ' [ 352.206864][ T62] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 352.356570][ T62] usb 7-1: Using ep0 maxpacket: 8 [ 352.361404][ T62] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.364213][ T62] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.367059][ T62] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.369772][ T62] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.373120][ T62] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.379178][ T62] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.601725][ T62] usb 7-1: GET_CAPABILITIES returned 0 [ 352.604802][ T62] usbtmc 7-1:16.0: can't read capabilities [ 352.811680][ T62] usb 7-1: USB disconnect, device number 13 [ 353.079520][T11735] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1909'. [ 353.081971][T11735] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 353.084036][T11735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1909'. [ 353.226764][ T35] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 353.253978][ T45] syzkaller0: tun_net_xmit 76 [ 353.255342][ T45] syzkaller0: tun_net_xmit 48 [ 353.276644][ T6771] syzkaller0: tun_net_xmit 76 [ 353.396546][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 353.400677][ T35] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 353.403203][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 353.405803][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 353.408447][ T35] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.411889][ T35] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 353.414198][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.622284][ T35] usb 6-1: GET_CAPABILITIES returned 0 [ 353.623794][ T35] usbtmc 6-1:16.0: can't read capabilities [ 353.832589][ T5407] usb 6-1: USB disconnect, device number 13 [ 354.491899][T11747] fuse: Bad value for 'user_id' [ 354.493312][T11747] fuse: Bad value for 'user_id' [ 354.520388][T11748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1914'. [ 354.529574][T11750] netlink: 'syz.0.1915': attribute type 4 has an invalid length. [ 356.382310][ T45] syzkaller0: tun_net_xmit 76 [ 356.383696][ T45] syzkaller0: tun_net_xmit 48 [ 357.533293][T11792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1928'. [ 357.542326][ T62] hid-generic 0000:0000:0000.0055: item fetching failed at offset 0/2 [ 357.545346][ T62] hid-generic 0000:0000:0000.0055: probe with driver hid-generic failed with error -22 [ 357.670663][T11803] sctp: [Deprecated]: syz.3.1931 (pid 11803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.670663][T11803] Use struct sctp_sack_info instead [ 358.595910][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1940'. [ 358.663769][T11840] netem: invalid attributes len -1 [ 358.665211][T11840] netem: change failed [ 358.899993][T11846] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1944'. [ 359.161119][T11853] block device autoloading is deprecated and will be removed. [ 359.228820][T11855] netlink: 'syz.3.1947': attribute type 4 has an invalid length. [ 359.340386][T11865] wireguard0: entered promiscuous mode [ 359.342065][T11865] wireguard0: entered allmulticast mode [ 359.433105][T11868] fuse: Bad value for 'user_id' [ 359.435160][T11868] fuse: Bad value for 'user_id' [ 360.326572][ T35] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 360.390181][T11881] netlink: 'syz.1.1957': attribute type 4 has an invalid length. [ 360.431045][T11884] FAULT_INJECTION: forcing a failure. [ 360.431045][T11884] name failslab, interval 1, probability 0, space 0, times 0 [ 360.435550][T11884] CPU: 0 UID: 0 PID: 11884 Comm: syz.3.1958 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 360.439517][T11884] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 360.443377][T11884] Call Trace: [ 360.444583][T11884] [ 360.445681][T11884] dump_stack_lvl+0x16c/0x1f0 [ 360.447432][T11884] should_fail_ex+0x497/0x5b0 [ 360.449173][T11884] should_failslab+0xc2/0x120 [ 360.450920][T11884] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 360.453235][T11884] ? skb_clone+0x190/0x3f0 [ 360.455034][T11884] skb_clone+0x190/0x3f0 [ 360.456306][T11884] netlink_deliver_tap+0xb26/0xcf0 [ 360.457954][T11884] netlink_unicast+0x5e1/0x7f0 [ 360.459599][T11884] ? __pfx_netlink_unicast+0x10/0x10 [ 360.461547][T11884] ? __phys_addr_symbol+0x30/0x80 [ 360.463514][T11884] ? __check_object_size+0x4a1/0x710 [ 360.465454][T11884] netlink_sendmsg+0x8b8/0xd70 [ 360.467193][T11884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.469012][T11884] ? lock_acquire+0x2f/0xb0 [ 360.470676][T11884] ____sys_sendmsg+0x9ae/0xb40 [ 360.472414][T11884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.474340][T11884] ? get_compat_msghdr+0x11b/0x170 [ 360.476212][T11884] ? __pfx___lock_acquire+0x10/0x10 [ 360.478270][T11884] ___sys_sendmsg+0x135/0x1e0 [ 360.479778][T11884] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.481171][T11884] ? lock_acquire+0x2f/0xb0 [ 360.482384][T11884] ? __fget_files+0x40/0x3f0 [ 360.483605][T11884] ? fdget+0x176/0x210 [ 360.484759][T11884] __sys_sendmsg+0x117/0x1f0 [ 360.485971][T11884] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.487311][T11884] ? __fget_files+0x244/0x3f0 [ 360.488605][T11884] __do_fast_syscall_32+0x73/0x120 [ 360.490482][T11884] do_fast_syscall_32+0x32/0x80 [ 360.492270][T11884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 360.494453][T11884] RIP: 0023:0xf7fef579 [ 360.495957][T11884] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 360.501539][T11884] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 360.503741][T11884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 360.505882][T11884] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 360.507892][T11884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 360.510761][T11884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 360.513776][T11884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 360.516633][T11884] [ 360.527209][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 360.530728][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.534119][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.540226][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.542619][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.545652][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.547941][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.587877][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x7 [ 360.591216][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x7 [ 360.594755][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.597504][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.597525][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.597542][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.597559][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.597576][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.597620][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616190][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616217][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616235][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616253][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616271][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616288][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616306][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616324][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616342][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616369][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616387][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.616405][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.649826][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.652553][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.655167][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.657917][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.660453][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.663160][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.666038][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.668596][ T5407] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 360.673622][ T5407] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz0] on syz0 [ 360.743827][ T5407] hid-generic 0000:0000:0000.0057: item fetching failed at offset 0/2 [ 360.746660][ T5407] hid-generic 0000:0000:0000.0057: probe with driver hid-generic failed with error -22 [ 360.761700][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 360.763174][ T35] usbtmc 7-1:16.0: can't read capabilities [ 361.201396][ T5407] usb 7-1: USB disconnect, device number 14 [ 362.761551][ T5386] hid-generic 0000:0000:0000.0058: item fetching failed at offset 0/2 [ 362.763939][ T5386] hid-generic 0000:0000:0000.0058: probe with driver hid-generic failed with error -22 [ 363.333398][T11932] fuse: Bad value for 'user_id' [ 363.336953][T11932] fuse: Bad value for 'user_id' [ 364.220337][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x7 [ 364.222372][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x7 [ 364.224288][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.226200][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.228402][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.230438][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.233231][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.236106][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.239898][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.242613][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.244603][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.247362][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.249421][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.251442][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.253489][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.255517][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.257821][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.259885][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.261997][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.264105][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.266228][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.268320][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.270341][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.272459][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.274665][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.276719][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.278746][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.280728][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.282717][ T62] hid-generic 0000:0000:0000.0059: unknown main item tag 0x0 [ 364.285300][ T62] hid-generic 0000:0000:0000.0059: hidraw0: HID v0.00 Device [syz0] on syz0 [ 366.085089][T11978] netlink: 'syz.3.1985': attribute type 4 has an invalid length. [ 366.148403][T11983] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 366.150665][T11983] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 366.153049][T11983] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 366.320764][T11986] FAULT_INJECTION: forcing a failure. [ 366.320764][T11986] name failslab, interval 1, probability 0, space 0, times 0 [ 366.324171][T11986] CPU: 1 UID: 0 PID: 11986 Comm: syz.3.1986 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 366.327035][T11986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 366.329873][T11986] Call Trace: [ 366.330792][T11986] [ 366.331593][T11986] dump_stack_lvl+0x16c/0x1f0 [ 366.332867][T11986] should_fail_ex+0x497/0x5b0 [ 366.334142][T11986] ? fs_reclaim_acquire+0xae/0x160 [ 366.335545][T11986] should_failslab+0xc2/0x120 [ 366.336837][T11986] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 366.338299][T11986] ? security_file_alloc+0x34/0x2b0 [ 366.339694][T11986] ? rcu_is_watching+0x12/0xc0 [ 366.340984][T11986] security_file_alloc+0x34/0x2b0 [ 366.342344][T11986] init_file+0x93/0x230 [ 366.343471][T11986] alloc_empty_file+0x91/0x1e0 [ 366.344761][T11986] alloc_file_pseudo+0x13d/0x200 [ 366.346113][T11986] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 366.347582][T11986] ? __pfx_idr_alloc_u32+0x10/0x10 [ 366.348966][T11986] __anon_inode_getfile+0x136/0x3c0 [ 366.350382][T11986] ? __pfx___anon_inode_getfile+0x10/0x10 [ 366.351906][T11986] ? preempt_schedule_thunk+0x1a/0x30 [ 366.353352][T11986] bpf_link_prime+0x202/0x4d0 [ 366.354633][T11986] bpf_raw_tp_link_attach+0x206/0x540 [ 366.356082][T11986] ? __pfx_lock_release+0x10/0x10 [ 366.357442][T11986] ? trace_lock_acquire+0x14a/0x1d0 [ 366.358857][T11986] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 366.360448][T11986] ? lock_acquire+0x2f/0xb0 [ 366.361676][T11986] ? __fget_files+0x40/0x3f0 [ 366.362938][T11986] ? fput+0x30/0x390 [ 366.364001][T11986] ? __bpf_prog_get+0xa0/0x290 [ 366.365282][T11986] __sys_bpf+0x3a7/0x5780 [ 366.366465][T11986] ? finish_task_switch.isra.0+0x217/0xcc0 [ 366.368037][T11986] ? __pfx___sys_bpf+0x10/0x10 [ 366.369332][T11986] ? __schedule+0xefd/0x5750 [ 366.370595][T11986] ? fput+0x30/0x390 [ 366.371655][T11986] ? ksys_write+0x1ad/0x260 [ 366.372891][T11986] __ia32_sys_bpf+0x76/0xe0 [ 366.374120][T11986] __do_fast_syscall_32+0x73/0x120 [ 366.375527][T11986] do_fast_syscall_32+0x32/0x80 [ 366.376842][T11986] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 366.378558][T11986] RIP: 0023:0xf7fef579 [ 366.379658][T11986] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 366.384768][T11986] RSP: 002b:00000000f573456c EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 366.386994][T11986] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 00000000200007c0 [ 366.389096][T11986] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 366.391220][T11986] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 366.393344][T11986] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 366.395448][T11986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 366.397563][T11986] [ 367.132067][T12004] fuse: Bad value for 'user_id' [ 367.133462][T12004] fuse: Bad value for 'user_id' [ 367.177562][T12005] FAULT_INJECTION: forcing a failure. [ 367.177562][T12005] name failslab, interval 1, probability 0, space 0, times 0 [ 367.180858][T12005] CPU: 2 UID: 0 PID: 12005 Comm: syz.1.1992 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 367.183670][T12005] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 367.186515][T12005] Call Trace: [ 367.187414][T12005] [ 367.188207][T12005] dump_stack_lvl+0x16c/0x1f0 [ 367.189468][T12005] should_fail_ex+0x497/0x5b0 [ 367.190732][T12005] ? fs_reclaim_acquire+0xae/0x160 [ 367.192094][T12005] should_failslab+0xc2/0x120 [ 367.193354][T12005] __kmalloc_node_track_caller_noprof+0xcf/0x440 [ 367.195037][T12005] ? vfs_parse_fs_string+0xc4/0x150 [ 367.196421][T12005] kmemdup_nul+0x34/0xb0 [ 367.197557][T12005] vfs_parse_fs_string+0xc4/0x150 [ 367.198916][T12005] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 367.200404][T12005] ? __raw_spin_lock_init+0x3a/0x110 [ 367.201818][T12005] ? qnx4_init_fs_context+0xd/0x40 [ 367.203220][T12005] ? alloc_fs_context+0x59b/0x9c0 [ 367.204557][T12005] path_mount+0x677/0x1f10 [ 367.205752][T12005] ? kmem_cache_free+0x152/0x4b0 [ 367.207409][T12005] ? __pfx_path_mount+0x10/0x10 [ 367.208722][T12005] ? putname+0x12e/0x170 [ 367.209862][T12005] __ia32_sys_mount+0x292/0x310 [ 367.211180][T12005] ? __pfx___ia32_sys_mount+0x10/0x10 [ 367.212614][T12005] __do_fast_syscall_32+0x73/0x120 [ 367.213979][T12005] do_fast_syscall_32+0x32/0x80 [ 367.215303][T12005] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 367.216973][T12005] RIP: 0023:0xf7f26579 [ 367.218076][T12005] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 367.223116][T12005] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 367.225342][T12005] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000020000280 [ 367.227993][T12005] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 367.230216][T12005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 367.232329][T12005] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 367.234428][T12005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 367.236524][T12005] [ 368.158130][T12025] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1997'. [ 368.161317][T12025] netlink: 5288 bytes leftover after parsing attributes in process `syz.1.1997'. [ 368.164285][T12025] openvswitch: netlink: Message has 8 unknown bytes. [ 368.796164][ T62] hid-generic 0000:0000:0000.005A: item fetching failed at offset 0/2 [ 368.799279][ T62] hid-generic 0000:0000:0000.005A: probe with driver hid-generic failed with error -22 [ 369.244161][T12053] fuse: Bad value for 'user_id' [ 369.245894][T12053] fuse: Bad value for 'user_id' [ 369.765166][T12063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 369.766927][T12063] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 369.769646][T12063] vhci_hcd vhci_hcd.0: Device attached [ 369.832790][T12066] overlay: Bad value for 'metacopy' [ 369.958102][ T35] vhci_hcd: vhci_device speed not set [ 370.016530][ T35] usb 13-1: new full-speed USB device number 21 using vhci_hcd [ 370.441141][ T5386] hid-generic 0000:0000:0000.005B: item fetching failed at offset 0/2 [ 370.443500][ T5386] hid-generic 0000:0000:0000.005B: probe with driver hid-generic failed with error -22 [ 370.648799][T12064] vhci_hcd: connection reset by peer [ 370.658621][ T1101] vhci_hcd: stop threads [ 370.660058][ T1101] vhci_hcd: release socket [ 370.661739][ T1101] vhci_hcd: disconnect device [ 371.820394][T12101] fuse: Bad value for 'user_id' [ 371.821734][T12101] fuse: Bad value for 'user_id' [ 372.410832][T12112] trusted_key: syz.3.2022 sent an empty control message without MSG_MORE. [ 372.634890][ T5594] hid-generic 0000:0000:0000.005C: item fetching failed at offset 0/2 [ 372.637428][ T5594] hid-generic 0000:0000:0000.005C: probe with driver hid-generic failed with error -22 [ 374.148000][T12151] fuse: Bad value for 'user_id' [ 374.149757][T12151] fuse: Bad value for 'user_id' [ 374.183278][T12159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2035'. [ 374.227536][T12163] netlink: 'syz.3.2036': attribute type 9 has an invalid length. [ 374.230467][T12163] netlink: 134672 bytes leftover after parsing attributes in process `syz.3.2036'. [ 374.232980][T12163] openvswitch: netlink: Port -524278 exceeds max allowable 65535 [ 374.235219][T12164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2036'. [ 374.786528][ T1280] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 374.940807][T12174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 374.940834][ T1280] usb 6-1: Using ep0 maxpacket: 16 [ 374.942598][T12174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 374.942815][T12174] vhci_hcd vhci_hcd.0: Device attached [ 374.961515][ T1280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.964254][ T1280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.975464][ T1280] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.981226][ T1280] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 374.983660][ T1280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.987530][ T1280] usb 6-1: config 0 descriptor?? [ 374.991008][T12178] FAULT_INJECTION: forcing a failure. [ 374.991008][T12178] name failslab, interval 1, probability 0, space 0, times 0 [ 374.996314][T12178] CPU: 1 UID: 0 PID: 12178 Comm: syz.2.2040 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 374.999104][T12178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 375.001799][T12178] Call Trace: [ 375.001807][T12178] [ 375.001812][T12178] dump_stack_lvl+0x16c/0x1f0 [ 375.001833][T12178] should_fail_ex+0x497/0x5b0 [ 375.001849][T12178] ? fs_reclaim_acquire+0xae/0x160 [ 375.001864][T12178] should_failslab+0xc2/0x120 [ 375.001879][T12178] __kmalloc_noprof+0xcb/0x410 [ 375.001894][T12178] ? __pfx_d_absolute_path+0x10/0x10 [ 375.001909][T12178] tomoyo_encode2+0x100/0x3e0 [ 375.001927][T12178] tomoyo_realpath_from_path+0x1a7/0x710 [ 375.001946][T12178] tomoyo_path_number_perm+0x245/0x5b0 [ 375.001960][T12178] ? tomoyo_path_number_perm+0x232/0x5b0 [ 375.001974][T12178] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 375.001999][T12178] ? trace_lock_acquire+0x14a/0x1d0 [ 375.002015][T12178] ? lock_acquire+0x2f/0xb0 [ 375.002029][T12178] ? __fget_files+0x40/0x3f0 [ 375.002045][T12178] ? __fget_files+0x244/0x3f0 [ 375.002058][T12178] security_file_ioctl_compat+0x9b/0x240 [ 375.002074][T12178] __do_compat_sys_ioctl+0x52/0x2b0 [ 375.002091][T12178] __do_fast_syscall_32+0x73/0x120 [ 375.002107][T12178] do_fast_syscall_32+0x32/0x80 [ 375.002120][T12178] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 375.002135][T12178] RIP: 0023:0xf7f8f579 [ 375.002145][T12178] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 375.002170][T12178] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 375.002182][T12178] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0386105 [ 375.002189][T12178] RDX: 0000000020000d40 RSI: 0000000000000000 RDI: 0000000000000000 [ 375.002196][T12178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 375.002202][T12178] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 375.002209][T12178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 375.002222][T12178] [ 375.002755][T12178] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.114307][T12174] overlay: Bad value for 'metacopy' [ 375.126750][ T5594] vhci_hcd: vhci_device speed not set [ 375.176582][ T35] vhci_hcd: vhci_device speed not set [ 375.186528][ T5594] usb 19-1: new full-speed USB device number 20 using vhci_hcd [ 375.241601][T12175] vhci_hcd: connection reset by peer [ 375.243870][ T76] vhci_hcd: stop threads [ 375.245142][ T76] vhci_hcd: release socket [ 375.246698][ T76] vhci_hcd: disconnect device [ 375.256638][T12185] Invalid logical block size (1) [ 375.601004][ T1280] usbhid 6-1:0.0: can't add hid device: -71 [ 375.603256][ T1280] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 375.607344][ T1280] usb 6-1: USB disconnect, device number 14 [ 375.928398][T12193] Invalid logical block size (1) [ 376.274986][T12212] FAULT_INJECTION: forcing a failure. [ 376.274986][T12212] name failslab, interval 1, probability 0, space 0, times 0 [ 376.280033][T12212] CPU: 3 UID: 0 PID: 12212 Comm: syz.3.2049 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 376.283782][T12212] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 376.287425][T12212] Call Trace: [ 376.288582][T12212] [ 376.289604][T12212] dump_stack_lvl+0x16c/0x1f0 [ 376.291237][T12212] should_fail_ex+0x497/0x5b0 [ 376.292802][T12212] ? fs_reclaim_acquire+0xae/0x160 [ 376.294231][T12212] should_failslab+0xc2/0x120 [ 376.295690][T12212] kmem_cache_alloc_node_noprof+0x71/0x310 [ 376.297831][T12212] ? __alloc_skb+0x2b3/0x380 [ 376.299522][T12212] __alloc_skb+0x2b3/0x380 [ 376.301098][T12212] ? __pfx___alloc_skb+0x10/0x10 [ 376.302800][T12212] netlink_alloc_large_skb+0x69/0x130 [ 376.304361][T12212] netlink_sendmsg+0x689/0xd70 [ 376.305602][T12212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.307158][T12212] ? lock_acquire+0x2f/0xb0 [ 376.308699][T12212] ____sys_sendmsg+0x9ae/0xb40 [ 376.310361][T12212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.312158][T12212] ? get_compat_msghdr+0x11b/0x170 [ 376.313898][T12212] ? __pfx___lock_acquire+0x10/0x10 [ 376.315777][T12212] ___sys_sendmsg+0x135/0x1e0 [ 376.317498][T12212] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.319411][T12212] ? lock_acquire+0x2f/0xb0 [ 376.321027][T12212] ? __fget_files+0x40/0x3f0 [ 376.322660][T12212] ? fdget+0x176/0x210 [ 376.324150][T12212] __sys_sendmsg+0x117/0x1f0 [ 376.325781][T12212] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.327642][T12212] ? __fget_files+0x244/0x3f0 [ 376.329335][T12212] __do_fast_syscall_32+0x73/0x120 [ 376.331013][T12212] do_fast_syscall_32+0x32/0x80 [ 376.332693][T12212] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 376.334937][T12212] RIP: 0023:0xf7fef579 [ 376.336384][T12212] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 376.342981][T12212] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 376.345903][T12212] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000580 [ 376.348590][T12212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 376.351403][T12212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 376.354188][T12212] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 376.356953][T12212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 376.359750][T12212] [ 376.360950][ C3] vkms_vblank_simulate: vblank timer overrun [ 376.606869][T12221] Invalid logical block size (1) [ 377.027494][ T1296] hid-generic 0000:0000:0000.005D: item fetching failed at offset 0/2 [ 377.030455][ T1296] hid-generic 0000:0000:0000.005D: probe with driver hid-generic failed with error -22 [ 377.114549][ T62] hid-generic 0000:0000:0000.005E: item fetching failed at offset 0/2 [ 377.117594][ T62] hid-generic 0000:0000:0000.005E: probe with driver hid-generic failed with error -22 [ 377.216568][ T5407] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 377.376520][ T5407] usb 8-1: Using ep0 maxpacket: 16 [ 377.379251][ T5407] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 377.382154][ T5407] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 377.384716][ T5407] usb 8-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 377.387237][ T5407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.390309][ T5407] usb 8-1: config 0 descriptor?? [ 377.807984][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.811428][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.815651][ T5407] hid (null): invalid report_size 812540268 [ 377.819007][ T5407] hid-generic 0003:0158:0100.005F: unknown main item tag 0x1 [ 377.820849][ T5407] hid-generic 0003:0158:0100.005F: unexpected long global item [ 377.822921][ T5407] hid-generic 0003:0158:0100.005F: probe with driver hid-generic failed with error -22 [ 377.876402][T12249] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 377.878273][T12249] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 377.880851][T12249] vhci_hcd vhci_hcd.0: Device attached [ 377.920732][ T1373] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.922589][ T1373] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.942555][T12252] overlay: Bad value for 'metacopy' [ 377.995131][T12254] usb usb9: usbfs: process 12254 (syz.1.2061) did not claim interface 10 before use [ 378.008212][T12254] nftables ruleset with unbound chain [ 378.015869][T12235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.022937][T12235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.026543][T12235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2056'. [ 378.048163][T12235] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 378.051934][T12235] bond3: (slave gre1): Error -95 calling set_mac_address [ 378.066621][ T35] vhci_hcd: vhci_device speed not set [ 378.126525][ T35] usb 17-1: new full-speed USB device number 19 using vhci_hcd [ 378.675129][ T6771] usb 8-1: USB disconnect, device number 28 [ 378.729887][T12250] vhci_hcd: connection reset by peer [ 378.732117][ T76] vhci_hcd: stop threads [ 378.733642][ T76] vhci_hcd: release socket [ 378.735283][ T76] vhci_hcd: disconnect device [ 378.796724][T12272] Invalid logical block size (1) [ 378.820761][T12269] netlink: 'syz.0.2067': attribute type 5 has an invalid length. [ 378.830487][T12269] ebtables: wrong size: *len 80, entries_size 48, replsz 48 [ 379.819000][T12295] Invalid logical block size (1) [ 380.105448][T12304] fuse: Bad value for 'user_id' [ 380.108432][T12304] fuse: Bad value for 'user_id' [ 380.306620][ T5594] vhci_hcd: vhci_device speed not set [ 380.487101][T12324] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 380.488829][T12324] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 380.491180][T12324] vhci_hcd vhci_hcd.0: Device attached [ 380.591373][T12331] overlay: Bad value for 'metacopy' [ 380.746582][ T1280] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 380.896495][ T1280] usb 6-1: Using ep0 maxpacket: 16 [ 380.900638][ T1280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.904579][ T1280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.916519][ T1280] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.920928][ T1280] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.923363][ T1280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.926298][ T1280] usb 6-1: config 0 descriptor?? [ 381.077446][T12335] Invalid logical block size (1) [ 381.313897][T12325] vhci_hcd: connection closed [ 381.314074][ T76] vhci_hcd: stop threads [ 381.321054][ T76] vhci_hcd: release socket [ 381.322968][ T76] vhci_hcd: disconnect device [ 381.353358][T12338] syz.3.2082 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 381.535352][ T1280] usbhid 6-1:0.0: can't add hid device: -71 [ 381.537008][ T1280] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 381.539719][ T1280] usb 6-1: USB disconnect, device number 15 [ 381.884059][T12345] netlink: 'syz.2.2084': attribute type 7 has an invalid length. [ 381.886770][T12345] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2084'. [ 381.892515][T12345] netlink: 'syz.2.2084': attribute type 3 has an invalid length. [ 381.895009][T12345] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2084'. [ 382.207133][T12354] Invalid logical block size (1) [ 382.208381][T12357] misc userio: No port type given on /dev/userio [ 382.217383][T12357] afs: Unknown parameter 'floc' [ 382.666410][T12366] misc userio: No port type given on /dev/userio [ 382.675765][T12366] afs: Unknown parameter 'floc' [ 383.359875][ T35] vhci_hcd: vhci_device speed not set [ 383.771164][T12375] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 383.773329][T12375] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 383.776634][T12371] Invalid logical block size (1) [ 383.776708][T12375] vhci_hcd vhci_hcd.0: Device attached [ 383.897786][T12378] overlay: Bad value for 'metacopy' [ 384.066760][ T35] vhci_hcd: vhci_device speed not set [ 384.126905][ T35] usb 17-1: device descriptor read/64, error -110 [ 384.307652][ T35] vhci_hcd: vhci_device speed not set [ 384.366650][ T35] usb 17-1: new full-speed USB device number 20 using vhci_hcd [ 384.386567][ T1280] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 384.569744][T12387] FAULT_INJECTION: forcing a failure. [ 384.569744][T12387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.573617][T12387] CPU: 3 UID: 0 PID: 12387 Comm: syz.3.2096 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 384.576512][T12387] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 384.579431][T12387] Call Trace: [ 384.580352][T12387] [ 384.581112][T12387] dump_stack_lvl+0x16c/0x1f0 [ 384.582401][T12387] should_fail_ex+0x497/0x5b0 [ 384.583674][T12387] __kvm_read_guest_page+0x16b/0x210 [ 384.585056][T12387] kvm_fetch_guest_virt+0x128/0x1a0 [ 384.586456][T12387] __do_insn_fetch_bytes+0x506/0x730 [ 384.587824][T12387] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 384.589390][T12387] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 384.590892][T12387] x86_decode_insn+0x1863/0x55a0 [ 384.592199][T12387] ? hlock_class+0x4e/0x130 [ 384.593376][T12387] ? __pfx_x86_decode_insn+0x10/0x10 [ 384.594851][T12387] ? init_decode_cache+0xd/0x210 [ 384.596252][T12387] ? init_emulate_ctxt+0x3a1/0x590 [ 384.597634][T12387] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 384.599075][T12387] x86_emulate_instruction+0x975/0x1b10 [ 384.600502][T12387] handle_ud+0x104/0x3f0 [ 384.601580][T12387] ? __pfx_handle_ud+0x10/0x10 [ 384.602835][T12387] handle_exception_nmi+0x613/0x1120 [ 384.604215][T12387] ? __pfx_handle_exception_nmi+0x10/0x10 [ 384.605710][T12387] vmx_handle_exit+0x733/0x1ed0 [ 384.607150][T12387] vcpu_run+0x2aa3/0x4c90 [ 384.608494][T12387] ? __pfx_vcpu_run+0x10/0x10 [ 384.610014][T12387] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 384.611696][T12387] ? rcu_watching_snap_stopped_since+0xd0/0x110 [ 384.613721][T12387] ? trace_lock_acquire+0x14a/0x1d0 [ 384.615569][T12387] ? __local_bh_enable_ip+0xa4/0x120 [ 384.617497][T12387] ? kvm_arch_vcpu_ioctl_run+0x14d/0x1730 [ 384.619555][T12387] ? lock_acquire+0x2f/0xb0 [ 384.621281][T12387] ? kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 384.623308][T12387] kvm_arch_vcpu_ioctl_run+0x447/0x1730 [ 384.625127][T12387] kvm_vcpu_ioctl+0x6c7/0x1510 [ 384.626898][T12387] ? tomoyo_path_number_perm+0x467/0x5b0 [ 384.628657][T12387] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 384.630123][T12387] ? tomoyo_path_number_perm+0x190/0x5b0 [ 384.631610][T12387] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.633239][T12387] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 384.634985][T12387] ? do_vfs_ioctl+0x513/0x1950 [ 384.636428][T12387] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 384.637892][T12387] ? trace_lock_acquire+0x14a/0x1d0 [ 384.639418][T12387] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 384.641005][T12387] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 384.642652][T12387] ? __fget_files+0x244/0x3f0 [ 384.644018][T12387] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 384.645833][T12387] __do_compat_sys_ioctl+0x259/0x2b0 [ 384.647726][T12387] __do_fast_syscall_32+0x73/0x120 [ 384.649533][T12387] do_fast_syscall_32+0x32/0x80 [ 384.651311][T12387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.653635][T12387] RIP: 0023:0xf7fef579 [ 384.655137][T12387] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 384.661104][T12387] RSP: 002b:00000000f577656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 384.663633][T12387] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 000000000000ae80 [ 384.666314][T12387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.666568][ T1280] usb 5-1: Using ep0 maxpacket: 16 [ 384.668790][T12387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.672352][T12387] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 384.673644][ T1280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.674516][T12387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.674540][T12387] [ 384.680480][ T1280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.683912][ T1280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.691254][ T1280] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 384.694311][ T1280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.699159][T12376] vhci_hcd: connection reset by peer [ 384.700676][ T1280] usb 5-1: config 0 descriptor?? [ 384.710419][ T12] vhci_hcd: stop threads [ 384.711939][ T12] vhci_hcd: release socket [ 384.713359][ T12] vhci_hcd: disconnect device [ 384.891410][T12392] cgroup: noprefix used incorrectly [ 385.329869][ T1280] usbhid 5-1:0.0: can't add hid device: -71 [ 385.331498][ T1280] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 385.334301][ T1280] usb 5-1: USB disconnect, device number 17 [ 385.336601][T12396] Invalid logical block size (1) [ 385.891733][T12403] FAULT_INJECTION: forcing a failure. [ 385.891733][T12403] name failslab, interval 1, probability 0, space 0, times 0 [ 385.895490][T12403] CPU: 1 UID: 0 PID: 12403 Comm: syz.0.2101 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 385.898217][T12403] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 385.900943][T12403] Call Trace: [ 385.901827][T12403] [ 385.902626][T12403] dump_stack_lvl+0x16c/0x1f0 [ 385.903905][T12403] should_fail_ex+0x497/0x5b0 [ 385.905471][T12403] ? fs_reclaim_acquire+0xae/0x160 [ 385.907131][T12403] should_failslab+0xc2/0x120 [ 385.908638][T12403] __kmalloc_noprof+0xcb/0x410 [ 385.910267][T12403] ? __pfx_lock_release+0x10/0x10 [ 385.911974][T12403] tomoyo_encode2+0x100/0x3e0 [ 385.913567][T12403] ? bpf_ksym_find+0x124/0x1c0 [ 385.915176][T12403] tomoyo_encode+0x2c/0x40 [ 385.916622][T12403] tomoyo_mount_acl+0x145/0x880 [ 385.917934][T12403] ? hlock_class+0x4e/0x130 [ 385.919453][T12403] ? __lock_acquire+0x163e/0x3ce0 [ 385.921057][T12403] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 385.922798][T12403] ? __pfx___lock_acquire+0x10/0x10 [ 385.924525][T12403] ? stack_trace_save+0x95/0xd0 [ 385.926065][T12403] ? __pfx_lock_release+0x10/0x10 [ 385.928274][T12403] ? trace_lock_acquire+0x14a/0x1d0 [ 385.929715][T12403] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.931808][T12403] ? tomoyo_mount_permission+0x146/0x410 [ 385.933712][T12403] ? lock_acquire+0x2f/0xb0 [ 385.935014][T12403] ? tomoyo_mount_permission+0x146/0x410 [ 385.936875][T12403] tomoyo_mount_permission+0x16b/0x410 [ 385.938716][T12403] ? tomoyo_mount_permission+0x146/0x410 [ 385.940591][T12403] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 385.942480][T12403] ? get_current_fs_domain+0x188/0x1f0 [ 385.944163][T12403] security_sb_mount+0x9b/0x260 [ 385.945742][T12403] path_mount+0x129/0x1f10 [ 385.947276][T12403] ? kmem_cache_free+0x152/0x4b0 [ 385.948556][T12403] ? __pfx_path_mount+0x10/0x10 [ 385.948892][T12406] ALSA: mixer_oss: invalid OSS volume 'u' [ 385.949836][T12403] ? putname+0x12e/0x170 [ 385.949859][T12403] __ia32_sys_mount+0x292/0x310 [ 385.949871][T12403] ? __pfx___ia32_sys_mount+0x10/0x10 [ 385.949890][T12403] __do_fast_syscall_32+0x73/0x120 [ 385.956956][T12403] do_fast_syscall_32+0x32/0x80 [ 385.958268][T12403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 385.960081][T12403] RIP: 0023:0xf742e579 [ 385.961156][T12403] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 385.966212][T12403] RSP: 002b:00000000f571656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 385.968505][T12403] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 0000000020000080 [ 385.970672][T12403] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000100 [ 385.972746][T12403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 385.975032][T12403] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 385.977646][T12403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 385.980263][T12403] [ 386.007233][ T62] hid-generic 0000:0000:0000.0060: item fetching failed at offset 0/2 [ 386.010614][ T62] hid-generic 0000:0000:0000.0060: probe with driver hid-generic failed with error -22 [ 386.046555][T12413] Invalid logical block size (1) [ 386.238247][T12418] FAULT_INJECTION: forcing a failure. [ 386.238247][T12418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.241701][T12418] CPU: 1 UID: 0 PID: 12418 Comm: syz.2.2105 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 386.244449][T12418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 386.247282][T12418] Call Trace: [ 386.248142][T12418] [ 386.248919][T12418] dump_stack_lvl+0x16c/0x1f0 [ 386.250254][T12418] should_fail_ex+0x497/0x5b0 [ 386.251481][T12418] _copy_to_user+0x30/0xc0 [ 386.252640][T12418] simple_read_from_buffer+0xd0/0x160 [ 386.254029][T12418] proc_fail_nth_read+0x198/0x270 [ 386.255458][T12418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.256909][T12418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.258401][T12418] vfs_read+0x1ce/0xbd0 [ 386.259687][T12418] ? __fget_files+0x23a/0x3f0 [ 386.261225][T12418] ? fdget_pos+0x24c/0x360 [ 386.262413][T12418] ? __pfx_lock_release+0x10/0x10 [ 386.263734][T12418] ? trace_lock_acquire+0x14a/0x1d0 [ 386.265110][T12418] ? __pfx_vfs_read+0x10/0x10 [ 386.266286][T12418] ? __pfx___mutex_lock+0x10/0x10 [ 386.267536][T12418] ? __fget_files+0x244/0x3f0 [ 386.268759][T12418] ksys_read+0x12f/0x260 [ 386.269869][T12418] ? __pfx_ksys_read+0x10/0x10 [ 386.271091][T12418] __do_fast_syscall_32+0x73/0x120 [ 386.272471][T12418] do_fast_syscall_32+0x32/0x80 [ 386.273736][T12418] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 386.275454][T12418] RIP: 0023:0xf7f8f579 [ 386.276486][T12418] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 386.281311][T12418] RSP: 002b:00000000f57165a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 386.283488][T12418] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000f5716620 [ 386.285513][T12418] RDX: 000000000000000f RSI: 00000000f741bff4 RDI: 0000000000000000 [ 386.287554][T12418] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 386.289750][T12418] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 386.291802][T12418] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 386.294005][T12418] [ 386.421802][T12424] fuse: Bad value for 'user_id' [ 386.423293][T12424] fuse: Bad value for 'user_id' [ 387.346651][ T5407] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 387.500602][ T5407] usb 8-1: Using ep0 maxpacket: 16 [ 387.503997][ T5407] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.511203][ T5407] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.514868][ T5407] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.520123][ T5407] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 387.524158][ T5407] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.530207][ T5407] usb 8-1: config 0 descriptor?? [ 388.278631][ T5407] usbhid 8-1:0.0: can't add hid device: -71 [ 388.280247][ T5407] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 388.286892][ T5407] usb 8-1: USB disconnect, device number 29 [ 388.366051][T12445] netlink: 'syz.2.2114': attribute type 10 has an invalid length. [ 388.368268][T12445] ipvlan1: entered promiscuous mode [ 388.380366][T12445] team0: Device ipvlan1 failed to register rx_handler [ 388.393140][T12445] autofs: Bad value for 'fd' [ 388.426925][ T39] kauditd_printk_skb: 38 callbacks suppressed [ 388.426937][ T39] audit: type=1804 audit(1728183239.651:173): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2114" name="/newroot/508/bus/bus" dev="overlay" ino=2765 res=1 errno=0 [ 388.428018][T12445] evm: overlay not supported [ 389.506611][ T35] vhci_hcd: vhci_device speed not set [ 389.623032][T12476] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2125'. [ 389.626240][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.629132][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.631736][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.634586][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.637310][T12476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.640317][T12476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.643155][T12476] batadv_slave_1: entered promiscuous mode [ 389.936693][ T5594] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 390.086530][ T5594] usb 8-1: Using ep0 maxpacket: 16 [ 390.091229][ T5594] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.095328][ T5594] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.098070][ T5594] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 390.101673][ T5594] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 390.104178][ T5594] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.147837][ T5594] usb 8-1: config 0 descriptor?? [ 390.759364][ T5594] usbhid 8-1:0.0: can't add hid device: -71 [ 390.761004][ T5594] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 390.763882][ T5594] usb 8-1: USB disconnect, device number 30 [ 391.423545][ T1280] hid-generic 0000:0000:0000.0061: item fetching failed at offset 0/2 [ 391.431129][ T1280] hid-generic 0000:0000:0000.0061: probe with driver hid-generic failed with error -22 [ 391.486920][T12505] hsr0: entered allmulticast mode [ 391.488300][T12505] hsr_slave_0: entered allmulticast mode [ 391.489865][T12505] hsr_slave_1: entered allmulticast mode [ 391.492032][T12505] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2134'. [ 391.494867][T12505] hsr_slave_0: left promiscuous mode [ 391.496977][T12505] hsr_slave_1: left promiscuous mode [ 391.507083][T12505] hsr0 (unregistering): left allmulticast mode [ 391.993028][T12514] binder: 12513:12514 ioctl c018620c 20000280 returned -1 [ 392.362163][T12519] Invalid logical block size (1) [ 392.636543][ T1296] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 392.679615][ T5594] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 392.708253][T12529] program syz.2.2142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 392.786609][ T1296] usb 5-1: Using ep0 maxpacket: 8 [ 392.790047][ T1296] usb 5-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 392.793416][ T1296] usb 5-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 392.798602][ T1296] usb 5-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 392.801800][ T1296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.810847][ T1296] usb 5-1: Product: syz [ 392.812361][ T1296] usb 5-1: Manufacturer: syz [ 392.814027][ T1296] usb 5-1: SerialNumber: syz [ 392.819130][ T1296] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 392.823459][ T1296] dvb-usb: bulk message failed: -22 (3/0) [ 392.836536][ T5594] usb 6-1: Using ep0 maxpacket: 16 [ 392.841212][ T1296] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 392.842122][ T5594] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.845466][ T1296] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 392.847458][ T5594] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.847472][ T5594] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 392.847491][ T5594] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 392.847502][ T5594] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.848296][ T5594] usb 6-1: config 0 descriptor?? [ 392.852397][ T1296] usb 5-1: media controller created [ 392.878682][ T1296] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 392.891356][ T1296] dvb-usb: bulk message failed: -22 (6/0) [ 392.893637][ T1296] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 392.899789][ T1296] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input114 [ 392.906740][ T1296] dvb-usb: schedule remote query interval to 150 msecs. [ 392.909009][ T1296] dvb-usb: bulk message failed: -22 (3/0) [ 392.937055][ T1296] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 393.031705][ T1296] usb 5-1: USB disconnect, device number 18 [ 393.054808][ T1296] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 393.462304][ T5594] usbhid 6-1:0.0: can't add hid device: -71 [ 393.464001][ T5594] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 393.466825][ T5594] usb 6-1: USB disconnect, device number 16 [ 393.647415][T12541] Invalid logical block size (1) [ 393.991049][T12554] FAULT_INJECTION: forcing a failure. [ 393.991049][T12554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.994498][T12554] CPU: 0 UID: 0 PID: 12554 Comm: syz.1.2147 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 393.997313][T12554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 394.000098][T12554] Call Trace: [ 394.000986][T12554] [ 394.001763][T12554] dump_stack_lvl+0x16c/0x1f0 [ 394.003022][T12554] should_fail_ex+0x497/0x5b0 [ 394.004266][T12554] _copy_from_iter+0x29b/0x13e0 [ 394.005542][T12554] ? __pfx__copy_from_iter+0x10/0x10 [ 394.006940][T12554] ? __virt_addr_valid+0x1a4/0x590 [ 394.008284][T12554] ? __virt_addr_valid+0x5e/0x590 [ 394.009606][T12554] ? __phys_addr_symbol+0x30/0x80 [ 394.010959][T12554] ? __check_object_size+0x488/0x710 [ 394.012730][T12554] netlink_sendmsg+0x813/0xd70 [ 394.014008][T12554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.015401][T12554] ? lock_acquire+0x2f/0xb0 [ 394.016704][T12554] ____sys_sendmsg+0x9ae/0xb40 [ 394.017987][T12554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.019366][T12554] ? get_compat_msghdr+0x11b/0x170 [ 394.020701][T12554] ? __pfx___lock_acquire+0x10/0x10 [ 394.022074][T12554] ___sys_sendmsg+0x135/0x1e0 [ 394.023313][T12554] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.024677][T12554] ? lock_acquire+0x2f/0xb0 [ 394.025834][T12554] ? __fget_files+0x40/0x3f0 [ 394.027023][T12554] ? fdget+0x176/0x210 [ 394.028080][T12554] __sys_sendmsg+0x117/0x1f0 [ 394.029270][T12554] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.030606][T12554] ? __fget_files+0x244/0x3f0 [ 394.031834][T12554] __do_fast_syscall_32+0x73/0x120 [ 394.033130][T12554] do_fast_syscall_32+0x32/0x80 [ 394.034386][T12554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 394.036037][T12554] RIP: 0023:0xf7f26579 [ 394.037107][T12554] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 394.042205][T12554] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 394.044418][T12554] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480 [ 394.046476][T12554] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 394.048520][T12554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 394.050554][T12554] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 394.052533][T12554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 394.054622][T12554] [ 394.061767][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 394.805434][T12566] input: syz0 as /devices/virtual/input/input115 [ 395.286582][ T5594] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 395.289405][ T35] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 395.436532][ T35] usb 7-1: Using ep0 maxpacket: 16 [ 395.439875][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.443764][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.446710][ T5594] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 395.449049][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 395.452457][ T35] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 395.454845][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.457025][ T5594] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 395.459794][ T5594] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 395.462437][ T5594] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 395.466419][ T5594] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 395.468053][ T35] usb 7-1: config 0 descriptor?? [ 395.477441][ T5594] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 395.479973][ T5594] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 395.482245][ T5594] usb 6-1: Product: syz [ 395.483432][ T5594] usb 6-1: Manufacturer: syz [ 395.487489][ T5594] cdc_wdm 6-1:1.0: skipping garbage [ 395.488988][ T5594] cdc_wdm 6-1:1.0: skipping garbage [ 395.491037][ T5594] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 395.492782][ T5594] cdc_wdm 6-1:1.0: Unknown control protocol [ 395.754964][T12584] ------------[ cut here ]------------ [ 395.757087][T12584] kmem_cache of name '9p-fcall-cache' already exists [ 395.759626][T12584] WARNING: CPU: 3 PID: 12584 at mm/slab_common.c:107 __kmem_cache_create_args+0xb0/0x3c0 [ 395.763315][T12584] Modules linked in: [ 395.764910][T12584] CPU: 3 UID: 0 PID: 12584 Comm: syz.1.2154 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 395.770313][T12584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 395.774183][T12584] RIP: 0010:__kmem_cache_create_args+0xb0/0x3c0 [ 395.776574][T12584] Code: 98 48 3d 10 bb f1 8d 74 25 48 8b 7b 60 48 89 ee e8 c5 68 34 09 85 c0 75 e0 90 48 c7 c7 e8 1f 58 8d 48 89 ee e8 41 b1 7e ff 90 <0f> 0b 90 90 be 20 00 00 00 48 89 ef e8 4f 6a 34 09 48 85 c0 0f 85 [ 395.783780][T12584] RSP: 0018:ffffc900271a78f0 EFLAGS: 00010286 [ 395.786094][T12584] RAX: 0000000000000000 RBX: ffff8880489b3e00 RCX: ffffc90007a61000 [ 395.788950][T12584] RDX: 0000000000040000 RSI: ffffffff814e28c6 RDI: 0000000000000001 [ 395.791132][T12584] RBP: ffffffff8ca1e320 R08: 0000000000000001 R09: 0000000000000000 [ 395.793215][T12584] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 395.795295][T12584] R13: 0000000000020018 R14: ffffc900271a79e0 R15: 0000000000020018 [ 395.797490][T12584] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5685b40 [ 395.799941][T12584] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 395.801745][T12584] CR2: 00000000f5685da4 CR3: 00000000695b2000 CR4: 0000000000352ef0 [ 395.803925][T12584] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.806095][T12584] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.808265][T12584] Call Trace: [ 395.809260][T12584] [ 395.810199][T12584] ? __warn+0xea/0x3d0 [ 395.811335][T12584] ? __kmem_cache_create_args+0xb0/0x3c0 [ 395.812809][T12584] ? report_bug+0x3c0/0x580 [ 395.813972][T12584] ? handle_bug+0x54/0xa0 [ 395.815177][T12584] ? exc_invalid_op+0x17/0x50 [ 395.816510][T12584] ? asm_exc_invalid_op+0x1a/0x20 [ 395.817916][T12584] ? __warn_printk+0x1a6/0x350 [ 395.819277][T12584] ? __kmem_cache_create_args+0xb0/0x3c0 [ 395.820791][T12584] p9_client_create+0xe04/0x1150 [ 395.822156][T12584] ? __pfx_p9_client_create+0x10/0x10 [ 395.823611][T12584] ? __raw_spin_lock_init+0x3a/0x110 [ 395.825044][T12584] v9fs_session_init+0x1f8/0x1a80 [ 395.826481][T12584] ? __pfx_v9fs_session_init+0x10/0x10 [ 395.827969][T12584] ? kasan_save_track+0x14/0x30 [ 395.829357][T12584] v9fs_mount+0xc6/0xa50 [ 395.830549][T12584] ? __pfx_v9fs_mount+0x10/0x10 [ 395.831883][T12584] ? __pfx_v9fs_mount+0x10/0x10 [ 395.833218][T12584] legacy_get_tree+0x109/0x220 [ 395.834540][T12584] vfs_get_tree+0x8f/0x380 [ 395.835770][T12584] path_mount+0x6e1/0x1f10 [ 395.837098][T12584] ? kmem_cache_free+0x152/0x4b0 [ 395.838491][T12584] ? __pfx_path_mount+0x10/0x10 [ 395.839873][T12584] ? putname+0x12e/0x170 [ 395.841055][T12584] __ia32_sys_mount+0x292/0x310 [ 395.842413][T12584] ? __pfx___ia32_sys_mount+0x10/0x10 [ 395.843881][T12584] __do_fast_syscall_32+0x73/0x120 [ 395.845299][T12584] do_fast_syscall_32+0x32/0x80 [ 395.846920][T12584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.849280][T12584] RIP: 0023:0xf7f26579 [ 395.850862][T12584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 395.858024][T12584] RSP: 002b:00000000f568556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 395.860884][T12584] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 0000000020000480 [ 395.863021][T12584] RDX: 00000000200004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.865158][T12584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.867332][T12584] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 395.869391][T12584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.871507][T12584] [ 395.872380][T12584] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 395.874308][T12584] CPU: 3 UID: 0 PID: 12584 Comm: syz.1.2154 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 395.877343][T12584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 395.881248][T12584] Call Trace: [ 395.882472][T12584] [ 395.883585][T12584] dump_stack_lvl+0x3d/0x1f0 [ 395.885338][T12584] panic+0x71d/0x800 [ 395.886844][T12584] ? __pfx_panic+0x10/0x10 [ 395.888534][T12584] ? show_trace_log_lvl+0x29d/0x3d0 [ 395.890484][T12584] ? __kmem_cache_create_args+0xb0/0x3c0 [ 395.892255][T12584] check_panic_on_warn+0xab/0xb0 [ 395.894002][T12584] __warn+0xf6/0x3d0 [ 395.895486][T12584] ? __kmem_cache_create_args+0xb0/0x3c0 [ 395.897556][T12584] report_bug+0x3c0/0x580 [ 395.899201][T12584] handle_bug+0x54/0xa0 [ 395.900765][T12584] exc_invalid_op+0x17/0x50 [ 395.902468][T12584] asm_exc_invalid_op+0x1a/0x20 [ 395.904293][T12584] RIP: 0010:__kmem_cache_create_args+0xb0/0x3c0 [ 395.906546][T12584] Code: 98 48 3d 10 bb f1 8d 74 25 48 8b 7b 60 48 89 ee e8 c5 68 34 09 85 c0 75 e0 90 48 c7 c7 e8 1f 58 8d 48 89 ee e8 41 b1 7e ff 90 <0f> 0b 90 90 be 20 00 00 00 48 89 ef e8 4f 6a 34 09 48 85 c0 0f 85 [ 395.911597][T12584] RSP: 0018:ffffc900271a78f0 EFLAGS: 00010286 [ 395.913195][T12584] RAX: 0000000000000000 RBX: ffff8880489b3e00 RCX: ffffc90007a61000 [ 395.915999][T12584] RDX: 0000000000040000 RSI: ffffffff814e28c6 RDI: 0000000000000001 [ 395.918937][T12584] RBP: ffffffff8ca1e320 R08: 0000000000000001 R09: 0000000000000000 [ 395.921871][T12584] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 395.924799][T12584] R13: 0000000000020018 R14: ffffc900271a79e0 R15: 0000000000020018 [ 395.927622][T12584] ? __warn_printk+0x1a6/0x350 [ 395.929433][T12584] p9_client_create+0xe04/0x1150 [ 395.931301][T12584] ? __pfx_p9_client_create+0x10/0x10 [ 395.933296][T12584] ? __raw_spin_lock_init+0x3a/0x110 [ 395.935232][T12584] v9fs_session_init+0x1f8/0x1a80 [ 395.937118][T12584] ? __pfx_v9fs_session_init+0x10/0x10 [ 395.939176][T12584] ? kasan_save_track+0x14/0x30 [ 395.941004][T12584] v9fs_mount+0xc6/0xa50 [ 395.942512][T12584] ? __pfx_v9fs_mount+0x10/0x10 [ 395.944332][T12584] ? __pfx_v9fs_mount+0x10/0x10 [ 395.946147][T12584] legacy_get_tree+0x109/0x220 [ 395.947933][T12584] vfs_get_tree+0x8f/0x380 [ 395.949593][T12584] path_mount+0x6e1/0x1f10 [ 395.951259][T12584] ? kmem_cache_free+0x152/0x4b0 [ 395.953107][T12584] ? __pfx_path_mount+0x10/0x10 [ 395.954930][T12584] ? putname+0x12e/0x170 [ 395.956339][T12584] __ia32_sys_mount+0x292/0x310 [ 395.957641][T12584] ? __pfx___ia32_sys_mount+0x10/0x10 [ 395.959263][T12584] __do_fast_syscall_32+0x73/0x120 [ 395.961206][T12584] do_fast_syscall_32+0x32/0x80 [ 395.963058][T12584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.965402][T12584] RIP: 0023:0xf7f26579 [ 395.966940][T12584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 395.973564][T12584] RSP: 002b:00000000f568556c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 395.975790][T12584] RAX: ffffffffffffffda RBX: 0000000020000240 RCX: 0000000020000480 [ 395.977924][T12584] RDX: 00000000200004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.980085][T12584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.982180][T12584] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 395.984288][T12584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.986399][T12584] [ 395.987812][T12584] Kernel Offset: disabled [ 395.989102][T12584] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:54:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81caf9c6 RDX=ffff88801f74a440 RSI=ffffffff81cafe93 RDI=0000000000000005 RBP=ffff888024ac6800 RSP=ffffc90000f0f7a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888024ac6820 R13=0000000000000002 R14=dffffc0000000000 R15=000000000000001d RIP=ffffffff8172f85d RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f855b8 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000110886d RBX=0000000000000001 RCX=ffffffff8b12f709 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12120 RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cce88 R15=0000000000000000 RIP=ffffffff8b130aef RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7456108 CR3=000000006609a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000c400000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc90021f2f5f8 RCX=ffffffff913a7572 RDX=1ffff920043e5ec0 RSI=ffffc90021f2fd20 RDI=ffffc90021f2f5f8 RBP=ffffc90021f2fd20 RSP=ffffc90021f2f548 R8 =0000000000000001 R9 =ffffffff913a7576 R10=ffffc90021f2f5f8 R11=000000000007f1d5 R12=0000000000000008 R13=ffffc90021f2f5f8 R14=ffffc90021f2f600 R15=ffffc90021f2fd48 RIP=ffffffff813ceaf0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002001b000 CR3=00000000495f4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000043 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85034e45 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc900271a7258 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000043 R14=ffffffff85034de0 R15=0000000000000000 RIP=ffffffff85034e6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5685da4 CR3=00000000695b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000