last executing test programs: 6.378683283s ago: executing program 3 (id=1885): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4ca31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x2902, 0x0) dup(r0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x6, @vbi={0x0, 0x0, 0x0, 0x52424752, [0x0, 0x4bba], [0x1], 0x2}}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, &(0x7f00000019c0)=""/4107, 0x100b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) io_setup(0x3, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xc00000000, 0xffffffffffffffff, 0x2}) bpf$PROG_LOAD(0x2, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 5.510169232s ago: executing program 3 (id=1889): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b0", 0x424}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x9, @mcast1, 0x3e, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x20, 0x29, 0x2, "bf0c4ee5998d5a8a126d8775b8be4d563e"}], 0x20}, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r5, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 5.350493666s ago: executing program 3 (id=1890): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x50000001}, 0x44000) socket$kcm(0x10, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900ffe400001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00000000000000000000000000000000008c060fa6b67d710dfea132e5ab9a21020f1a4c9f87257d66c10acd6d45ced2e1690e850bfd2c60d01da353c465f679852f071d461b44f4040097b3f04a4dd2f2a80793b4576626dd338ea8da5cfdc0d289ecca47c79bb810834b775c1e4cf469a3370774622f268782948402a4bb40bf3e34d5a88f0fb5e069a4c85c17e337ddd668126578d3edd187396d5a36e6722d2f154fe5e1"], 0x5c}, 0x1, 0x620b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) pwritev2(r7, 0x0, 0x0, 0xa, 0x6e6f2b53, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0xff88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x18, 0x0) 4.919797954s ago: executing program 0 (id=1891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioperm(0x0, 0xbbd3, 0x1) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x4044005) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000480)=ANY=[], 0x10) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) 4.457885386s ago: executing program 3 (id=1893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x50000001}, 0x44000) socket$kcm(0x10, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900ffe400001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00000000000000000000000000000000008c060fa6b67d710dfea132e5ab9a21020f1a4c9f87257d66c10acd6d45ced2e1690e850bfd2c60d01da353c465f679852f071d461b44f4040097b3f04a4dd2f2a80793b4576626dd338ea8da5cfdc0d289ecca47c79bb810834b775c1e4cf469a3370774622f268782948402a4bb40bf3e34d5a88f0fb5e069a4c85c17e337ddd668126578d3edd187396d5a36e6722d2f154fe5e1"], 0x5c}, 0x1, 0x620b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) pwritev2(r7, 0x0, 0x0, 0xa, 0x6e6f2b53, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0xff88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x18, 0x0) 3.514083173s ago: executing program 0 (id=1900): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2802cb00ce7ad7b6f4f755a34f91cb0de27e97d30fcedbb295849aa4868bbf4fa72f886d5dc78d74a46c87203e4eb78568adac2e29082e99df503ad5f0ffa8a34e8d1e14ca35fe5326c17efe5ee313eba9a68fc7a9748f14bd15c0cfd2f857d4741febb2a4b080c7637bf47cddf40fee468ccf4706813ab938339e0e90c616d1ffac7d3d8e6512fc94da8f481a88bd75513820536cbefadb4c84d9e34b6e5d6e0186c0b2e912100195a4a4cdfca9730b72b70def265930e2d240cd8611e0352dbd1dfad5bb7cdc549b56b142158502ec06ced64df6bf65724f0c9052993c0486cafd4c24f347ffa4d989211929bc0a6a4529493350f4bcc843191dde9836aa44442dff3d75156970000000000000", @ANYRES16=r1, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x50000001}, 0x44000) socket$kcm(0x10, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900ffe400001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00000000000000000000000000000000008c060fa6b67d710dfea132e5ab9a21020f1a4c9f87257d66c10acd6d45ced2e1690e850bfd2c60d01da353c465f679852f071d461b44f4040097b3f04a4dd2f2a80793b4576626dd338ea8da5cfdc0d289ecca47c79bb810834b775c1e4cf469a3370774622f268782948402a4bb40bf3e34d5a88f0fb5e069a4c85c17e337ddd668126578d3edd187396d5a36e6722d2f154fe5e1"], 0x5c}, 0x1, 0x620b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, 0x0, 0x0) pwritev2(r8, 0x0, 0x0, 0xa, 0x6e6f2b53, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r8, &(0x7f0000005240), 0x264e33, 0xff88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x18, 0x0) 3.424863949s ago: executing program 3 (id=1901): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/16, 0x8}], 0x1}, 0x0) close(0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x14}}, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x0, 0x0, 0xd, 0x1}, 'syz1\x00', 0x55}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYRES16=r6, @ANYBLOB="df4800000000000018000c0000002c00038028000380140001800800010002000000050002000000000010000180090902008669740300000000180001801400"], 0x58}}, 0xc000) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e010100"], 0xf) socket$inet6(0xa, 0x2, 0x3a) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) syz_open_dev$usbmon(0x0, 0xf231, 0x4000) r7 = io_uring_setup(0x497c, &(0x7f00000001c0)) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x11, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 2.470438108s ago: executing program 2 (id=1906): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b0", 0x424}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(0x0) acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x9, @mcast1, 0x3e, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x20, 0x29, 0x2, "bf0c4ee5998d5a8a126d8775b8be4d563e"}], 0x20}, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r5, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.339116581s ago: executing program 2 (id=1907): r0 = socket$netlink(0x10, 0x3, 0x15) recvmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035000000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r1, 0xa, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004070000000800000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4dd4f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd255985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340bdc8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69c584146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8c7049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69239500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181070000005e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8504000000000000004fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3d99e3568c51cd1eab8a26b232ac46bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d89f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290c7536fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef0a96e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246bae0b04bec8e30b6772b8950f32e87beda060f9af2a0ccd4a8eab8e395ee3628eb976b7fff835e6c1bdc4a6e00acd0fe63ba8425b21845db903b38c80148e6aa497dbf0e2baf938d3ecbd433527602d89f10aca419ff54e47354194f75e343d4c75227448530b0d8d59b9f94a3fa0ca9210177926c58ef46dcd09e79c343d35aa954d12f89410c47ac29c881f8a6bda8dd40df0d1e5881338d2c5a01bf1ee6b28169fef18df13c759e767d3442ae6598106496f42b73074bb804e8763915c3e04400ad44e9f3130e904062d204d385c026722a094255db1572d66e7a4917bba2a0f6a1a57482cdb4070de8dd60fd65dacb9ec5003fb1cca05ce1c9f924cc2ec45e8d5adf7c89e3b0b8da35c1aa7fbbee6f839a8f05294a6c02281afb7601252611583408f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001700), 0x48680, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r6 = syz_io_uring_setup(0x432a, &(0x7f0000000480)={0x0, 0x6177, 0x400, 0x0, 0x157}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r5], 0x4c}}, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r9 = accept4$x25(0xffffffffffffffff, &(0x7f0000000400)={0x9, @remote}, &(0x7f0000000440)=0x12, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000004c0)={0x8, &(0x7f0000000480)=[{0x8, 0x80, 0x1, 0x6}, {0x9d3, 0xbb, 0x3, 0x2}, {0x0, 0x1, 0x4, 0x8}, {0x2, 0xe, 0x9, 0x6}, {0x6, 0x0, 0x9, 0x6}, {0x1c00, 0xf, 0x5, 0xa}, {0x3, 0x40, 0x40, 0xff}, {0x6, 0x2, 0xf9}]}, 0x8) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='personality\x00') read$FUSE(r10, &(0x7f0000006840)={0x2020}, 0x2020) setsockopt$inet_int(r10, 0x0, 0x12, &(0x7f0000000280)=0xa0000, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) write(r10, &(0x7f00000002c0)="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", 0xfa) 2.338275718s ago: executing program 0 (id=1908): socket$alg(0x26, 0x5, 0x0) r0 = syz_socket_connect_nvme_tcp() r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xf, 0x5, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000700000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x9}, {0xeeee0000, 0x2, 0x0, 0x0, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x4000}, {0x0, 0xeeee0000, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfc}, {0x2000, 0xd000, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xb000}, 0xddf8ffdb, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7100}) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x200000005c831, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000040)={0xd000, 0x80a0000}) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="000000000000000000000000000000000000000f38bb23dd23f44100000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff010000001d00000000000000000065727370616e3000000000000000000062726964676530000000000000000000b43b24af61af8e2f000000000000000065716c00000000000000000000000000ffffffffffff000000000000aaaaaaaaaa000000000000000000a000000010010000380100006d61726b5f6d00000000000000000000000000000000000000000000000000000c0000000400000001000000000100006e666c6f670000000000000000000000000000000000000000000000000000004c0000006d8000000900090000000000b80eba8ec4468a0538ee0eed5dd9119d918668afa6c019b085be3837595dc113ccf27499f7202a2b59394b2619bcf57ec99b9abb99943198532b0b7bdd0f61e5726564697265637400000000000000000000000000000000000000000000000004000000fdffffff"]}, 0x218) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000000380)=[0x401, 0x5a9e, 0xffffff80, 0xafe, 0x7, 0xa, 0x80, 0x1, 0x6], &(0x7f0000000000), 0x4) (async, rerun: 32) set_mempolicy(0x4003, &(0x7f0000000040)=0x10000000005, 0x7) (async, rerun: 32) r8 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r10, 0x80}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x7c}}, 0x4000000) (async, rerun: 32) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) (rerun: 32) write$tcp_mem(r11, &(0x7f0000000280)={0x0, 0x2d, 0x0, 0x3a, 0x0, 0x2c}, 0x48) 2.290378302s ago: executing program 0 (id=1909): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) ioperm(0x0, 0xbbd3, 0x1) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x4044005) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000480)=ANY=[], 0x10) mkdir(0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) 2.089404212s ago: executing program 2 (id=1910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x50000001}, 0x44000) socket$kcm(0x10, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900ffe400001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00000000000000000000000000000000008c060fa6b67d710dfea132e5ab9a21020f1a4c9f87257d66c10acd6d45ced2e1690e850bfd2c60d01da353c465f679852f071d461b44f4040097b3f04a4dd2f2a80793b4576626dd338ea8da5cfdc0d289ecca47c79bb810834b775c1e4cf469a3370774622f268782948402a4bb40bf3e34d5a88f0fb5e069a4c85c17e337ddd668126578d3edd187396d5a36e6722d2f154fe5e1"], 0x5c}, 0x1, 0x620b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) pwritev2(r7, 0x0, 0x0, 0xa, 0x6e6f2b53, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0xff88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x18, 0x0) 1.445375721s ago: executing program 1 (id=1911): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0xa, [{}, {0x10}], 0x0, 0x0, 0x7}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4ca31, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x2902, 0x0) dup(r0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x6, @vbi={0x0, 0x0, 0x0, 0x52424752, [0x0, 0x4bba], [0x1], 0x2}}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r4, &(0x7f00000019c0)=""/4107, 0x100b) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) io_setup(0x3, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0xc00000000, 0xffffffffffffffff, 0x2}) bpf$PROG_LOAD(0x2, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1.016188853s ago: executing program 2 (id=1912): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x6, [{}, {0x6, 0x6}, {}, {0x1}, {}, {0xf747, 0x6}, {}, {0x4}], 0x0, 0x0, 0x8, 0x0, 0x1}}) (async) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x6, [{}, {0x6, 0x6}, {}, {0x1}, {}, {0xf747, 0x6}, {}, {0x4}], 0x0, 0x0, 0x8, 0x0, 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c04"]) read$midi(r0, &(0x7f0000000000)=""/18, 0x12) socket(0x6, 0x2, 0x1ff) socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) unshare(0x22020600) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x28, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x4}, 0x0, &(0x7f0000000380)={0x3fb, 0x0, 0xfffffffffffff000, 0x0, 0x2, 0xffffffffffffffff}, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x4}, 0x0, &(0x7f0000000380)={0x3fb, 0x0, 0xfffffffffffff000, 0x0, 0x2, 0xffffffffffffffff}, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000019600)='blkio.bfq.empty_time\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000180)={'ipvlan0\x00', {0x2, 0x4e21, @broadcast}}) (async) ioctl$sock_inet_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000180)={'ipvlan0\x00', {0x2, 0x4e21, @broadcast}}) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendfile(r5, r6, 0x0, 0x8000002b) (async) sendfile(r5, r6, 0x0, 0x8000002b) 868.501757ms ago: executing program 0 (id=1913): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01, 0x0, 0x80}}}}, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x189841, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000180)={0x0, 0x2, 0x1000, 0x9, 0x12}) 510.355219ms ago: executing program 1 (id=1914): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 471.474669ms ago: executing program 1 (id=1915): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001000390400"/18, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac"], 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 358.608283ms ago: executing program 3 (id=1916): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x50000001}, 0x44000) socket$kcm(0x10, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900ffe400001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00000000000000000000000000000000008c060fa6b67d710dfea132e5ab9a21020f1a4c9f87257d66c10acd6d45ced2e1690e850bfd2c60d01da353c465f679852f071d461b44f4040097b3f04a4dd2f2a80793b4576626dd338ea8da5cfdc0d289ecca47c79bb810834b775c1e4cf469a3370774622f268782948402a4bb40bf3e34d5a88f0fb5e069a4c85c17e337ddd668126578d3edd187396d5a36e6722d2f154fe5e1"], 0x5c}, 0x1, 0x620b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, 0x0, 0x0) pwritev2(r8, 0x0, 0x0, 0xa, 0x6e6f2b53, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r8, &(0x7f0000005240), 0x264e33, 0xff88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x18, 0x0) 287.432876ms ago: executing program 1 (id=1917): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f0000000000)={0x8000000000000001, 0xd}) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 176.201445ms ago: executing program 1 (id=1918): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup3(r2, r3, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000140), 0x200, 0x50400) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r6, 0xc0186405, &(0x7f0000000200)={0x8001}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 120.38887ms ago: executing program 2 (id=1919): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db7", 0x2d}, {&(0x7f0000000900)="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", 0x424}], 0x2}, 0x0) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(0x0) acct(0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x9, @mcast1, 0x3e, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000400)=[{0x20, 0x29, 0x2, "bf0c4ee5998d5a8a126d8775b8be4d563e"}], 0x20}, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_dccp_int(r5, 0x21, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 120.039348ms ago: executing program 1 (id=1920): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x3300}) r5 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2f, {}, {}, @raw32}, {0x0, 0x2, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0x38) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'}) r6 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 330.284µs ago: executing program 0 (id=1921): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x50000001}, 0x44000) socket$kcm(0x10, 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x541b, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900ffe400001400200000000000000000000000ffffe000000108000a0000000000060002000100000014001f00000000000000000000000000000000008c060fa6b67d710dfea132e5ab9a21020f1a4c9f87257d66c10acd6d45ced2e1690e850bfd2c60d01da353c465f679852f071d461b44f4040097b3f04a4dd2f2a80793b4576626dd338ea8da5cfdc0d289ecca47c79bb810834b775c1e4cf469a3370774622f268782948402a4bb40bf3e34d5a88f0fb5e069a4c85c17e337ddd668126578d3edd187396d5a36e6722d2f154fe5e1"], 0x5c}, 0x1, 0x620b}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) pwritev2(r7, 0x0, 0x0, 0xa, 0x6e6f2b53, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0xc, 0x141341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg$inet(r7, &(0x7f0000005240), 0x264e33, 0xff88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x18, 0x0) 0s ago: executing program 2 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{0xfffffffc}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) r5 = dup(r4) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000500101c000"/24]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setregid(0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/231, 0xe7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) kernel console output (not intermixed with test programs): tes in process `syz.3.1281'. [ 337.527617][T11344] netlink: 'syz.3.1283': attribute type 1 has an invalid length. [ 337.529654][T11344] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1283'. [ 338.174902][T11360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.524821][T11366] overlayfs: failed to resolve './file1': -2 [ 339.216044][T11383] FAT-fs (sr0): bogus number of reserved sectors [ 339.218422][T11383] FAT-fs (sr0): Can't find a valid FAT filesystem [ 339.234563][T11383] netlink: 'syz.0.1291': attribute type 10 has an invalid length. [ 339.240786][T11383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1291'. [ 339.291538][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1293'. [ 339.482982][T11393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1295'. [ 339.722331][T11402] siw: device registration error -23 [ 340.056123][T11411] x_tables: duplicate underflow at hook 1 [ 340.370714][T11415] Process accounting resumed [ 340.856116][T11432] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 340.856116][T11432] program syz.2.1304 not setting count and/or reply_len properly [ 341.589184][T11442] batadv0: entered promiscuous mode [ 341.591593][T11458] fuse: Unknown parameter 'grou00000000000000000000' [ 341.596794][T11442] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 341.603985][T11458] Process accounting resumed [ 341.979610][T11467] netlink: 'syz.3.1312': attribute type 2 has an invalid length. [ 342.149183][T11478] FAULT_INJECTION: forcing a failure. [ 342.149183][T11478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.152592][T11478] CPU: 2 UID: 0 PID: 11478 Comm: syz.1.1316 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 342.155254][T11478] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 342.158008][T11478] Call Trace: [ 342.158878][T11478] [ 342.159653][T11478] dump_stack_lvl+0x16c/0x1f0 [ 342.160884][T11478] should_fail_ex+0x497/0x5b0 [ 342.162129][T11478] _copy_to_user+0x32/0xd0 [ 342.163292][T11478] simple_read_from_buffer+0xd0/0x160 [ 342.164668][T11478] proc_fail_nth_read+0x198/0x270 [ 342.165994][T11478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.167422][T11478] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.168864][T11478] vfs_read+0x1df/0xbe0 [ 342.170053][T11478] ? __fget_files+0x1fc/0x3a0 [ 342.171296][T11478] ? __pfx___mutex_lock+0x10/0x10 [ 342.173900][T11478] ? __pfx_vfs_read+0x10/0x10 [ 342.175153][T11478] ? __fget_files+0x206/0x3a0 [ 342.176380][T11478] ksys_read+0x12b/0x250 [ 342.177636][T11478] ? __pfx_ksys_read+0x10/0x10 [ 342.178897][T11478] ? rcu_is_watching+0x12/0xc0 [ 342.180156][T11478] __do_fast_syscall_32+0x73/0x120 [ 342.181492][T11478] do_fast_syscall_32+0x32/0x80 [ 342.182769][T11478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.184401][T11478] RIP: 0023:0xf7f70579 [ 342.185477][T11478] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 342.190436][T11478] RSP: 002b:00000000f50f65b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 342.192597][T11478] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f50f6620 [ 342.194797][T11478] RDX: 000000000000000f RSI: 00000000f7400ff4 RDI: 0000000000000000 [ 342.196861][T11478] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 342.198925][T11478] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 342.200966][T11478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.203010][T11478] [ 343.645776][T11525] FAULT_INJECTION: forcing a failure. [ 343.645776][T11525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.658842][T11525] CPU: 2 UID: 0 PID: 11525 Comm: syz.0.1327 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 343.661674][T11525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 343.664675][T11525] Call Trace: [ 343.665600][T11525] [ 343.666383][T11525] dump_stack_lvl+0x16c/0x1f0 [ 343.667679][T11525] should_fail_ex+0x497/0x5b0 [ 343.668938][T11525] _copy_from_user+0x2e/0xd0 [ 343.670224][T11525] copy_from_buffer+0x86/0xb0 [ 343.671415][T11525] copy_uabi_to_xstate+0xb5/0x670 [ 343.672770][T11525] ? find_held_lock+0x2d/0x110 [ 343.674106][T11525] ? __pfx_copy_uabi_to_xstate+0x10/0x10 [ 343.675596][T11525] ? __pfx_lock_release+0x10/0x10 [ 343.676956][T11525] ? trace_lock_acquire+0x146/0x1e0 [ 343.678399][T11525] ? __local_bh_enable_ip+0xa4/0x120 [ 343.679809][T11525] __fpu_restore_sig+0x1062/0x1430 [ 343.681343][T11525] ? __pfx___fpu_restore_sig+0x10/0x10 [ 343.682866][T11525] ? lock_acquire+0x2f/0xb0 [ 343.684380][T11525] ? __might_fault+0xe3/0x190 [ 343.685660][T11525] fpu__restore_sig+0x113/0x190 [ 343.686998][T11525] ia32_restore_sigcontext+0x40f/0x5d0 [ 343.688445][T11525] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 343.690136][T11525] ? __pfx_lock_release+0x10/0x10 [ 343.691629][T11525] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.693449][T11525] ? lockdep_hardirqs_on+0x7c/0x110 [ 343.695274][T11525] __do_compat_sys_sigreturn+0x14b/0x200 [ 343.697236][T11525] ? __pfx___do_compat_sys_sigreturn+0x10/0x10 [ 343.699275][T11525] ? __secure_computing+0x273/0x3f0 [ 343.700674][T11525] do_int80_emulation+0x104/0x200 [ 343.702025][T11525] asm_int80_emulation+0x1a/0x20 [ 343.703328][T11525] RIP: 0023:0xf742e579 [ 343.704395][T11525] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 343.709616][T11525] RSP: 002b:00000000f50f557c EFLAGS: 00000292 [ 343.711292][T11525] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 343.713359][T11525] RDX: 000000002006b000 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.715422][T11525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.717525][T11525] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 343.719595][T11525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.721687][T11525] [ 343.764977][T11509] FAULT_INJECTION: forcing a failure. [ 343.764977][T11509] name failslab, interval 1, probability 0, space 0, times 0 [ 343.767986][T11509] CPU: 1 UID: 0 PID: 11509 Comm: syz.2.1323 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 343.770298][T11509] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 343.772751][T11509] Call Trace: [ 343.773539][T11509] [ 343.774247][T11509] dump_stack_lvl+0x16c/0x1f0 [ 343.775358][T11509] should_fail_ex+0x497/0x5b0 [ 343.777037][T11509] ? fs_reclaim_acquire+0xae/0x150 [ 343.778740][T11509] should_failslab+0xc2/0x120 [ 343.779846][T11509] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 343.781185][T11509] ? __alloc_workqueue+0x506/0x1810 [ 343.782407][T11509] __alloc_workqueue+0x506/0x1810 [ 343.783594][T11509] alloc_workqueue+0xd3/0x200 [ 343.784697][T11509] ? __pfx_alloc_workqueue+0x10/0x10 [ 343.785990][T11509] hci_register_dev+0x240/0xc60 [ 343.787132][T11509] hci_uart_tty_ioctl+0x7d0/0xc10 [ 343.788329][T11509] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 343.789655][T11509] tty_compat_ioctl+0x381/0x4d0 [ 343.790797][T11509] ? __pfx_tty_compat_ioctl+0x10/0x10 [ 343.792031][T11509] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 343.793253][T11509] __do_fast_syscall_32+0x73/0x120 [ 343.794451][T11509] do_fast_syscall_32+0x32/0x80 [ 343.795638][T11509] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.797682][T11509] RIP: 0023:0xf743e579 [ 343.798872][T11509] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 343.803296][T11509] RSP: 002b:00000000f512657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 343.805412][T11509] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000400455c8 [ 343.807291][T11509] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.809107][T11509] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.810897][T11509] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 343.812653][T11509] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.814611][T11509] [ 343.816959][T11509] Bluetooth: Can't register HCI device [ 345.211499][T11549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.341199][T11557] usb 2-1: USB disconnect, device number 105 [ 345.382364][T11557] hub 2-0:1.0: USB hub found [ 345.383822][T11557] hub 2-0:1.0: 6 ports detected [ 345.564273][ T75] usb 2-1: new high-speed USB device number 106 using ehci-pci [ 345.744968][ T75] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 345.747382][ T75] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 345.750209][ T75] usb 2-1: Product: QEMU USB Tablet [ 345.752250][ T75] usb 2-1: Manufacturer: QEMU [ 345.753972][ T75] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 345.773608][ T75] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.006C/input/input152 [ 345.835288][ T75] hid-generic 0003:0627:0001.006C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 346.840407][T11581] syz.1.1337: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 346.846776][T11581] CPU: 1 UID: 0 PID: 11581 Comm: syz.1.1337 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 346.849507][T11581] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 346.852274][T11581] Call Trace: [ 346.853170][T11581] [ 346.853950][T11581] dump_stack_lvl+0x16c/0x1f0 [ 346.855161][T11581] warn_alloc+0x24d/0x3a0 [ 346.856305][T11581] ? __pfx_warn_alloc+0x10/0x10 [ 346.857597][T11581] ? policy_nodemask+0xea/0x4e0 [ 346.858862][T11581] ? alloc_pages_mpol_noprof+0x315/0x610 [ 346.860308][T11581] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 346.861868][T11581] ? trace_kmalloc+0x2d/0xd0 [ 346.863059][T11581] ? __pfx___might_resched+0x10/0x10 [ 346.864415][T11581] __vmalloc_node_range_noprof+0x12c0/0x1530 [ 346.866185][T11581] ? kernel_clone+0xfd/0x960 [ 346.867386][T11581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.869049][T11581] ? rcu_is_watching+0x12/0xc0 [ 346.870322][T11581] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 346.871712][T11581] ? kmem_cache_alloc_node_noprof+0x219/0x3b0 [ 346.873306][T11581] ? copy_process+0x49c/0x6f20 [ 346.874536][T11581] ? kernel_clone+0xfd/0x960 [ 346.875735][T11581] copy_process+0x29b3/0x6f20 [ 346.876950][T11581] ? kernel_clone+0xfd/0x960 [ 346.878166][T11581] ? get_pid_task+0xfc/0x250 [ 346.879359][T11581] ? __pfx_lock_release+0x10/0x10 [ 346.880655][T11581] ? trace_lock_acquire+0x146/0x1e0 [ 346.882027][T11581] ? __pfx_copy_process+0x10/0x10 [ 346.883322][T11581] ? find_held_lock+0x2d/0x110 [ 346.884561][T11581] kernel_clone+0xfd/0x960 [ 346.885740][T11581] ? __pfx_kernel_clone+0x10/0x10 [ 346.887055][T11581] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 346.888610][T11581] __do_compat_sys_ia32_clone+0xb7/0x100 [ 346.890088][T11581] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 346.891569][T11581] __do_fast_syscall_32+0x73/0x120 [ 346.892864][T11581] do_fast_syscall_32+0x32/0x80 [ 346.894139][T11581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 346.895756][T11581] RIP: 0023:0xf7f70579 [ 346.896830][T11581] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 346.901812][T11581] RSP: 002b:00000000f50f652c EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 346.903941][T11581] RAX: ffffffffffffffda RBX: 0000000001000000 RCX: 0000000020000140 [ 346.905975][T11581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 346.908148][T11581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 346.910272][T11581] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 346.912291][T11581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 346.914345][T11581] [ 346.924282][T11581] Mem-Info: [ 346.925195][T11581] active_anon:11008 inactive_anon:263 isolated_anon:0 [ 346.925195][T11581] active_file:22368 inactive_file:12677 isolated_file:0 [ 346.925195][T11581] unevictable:5368 dirty:358 writeback:0 [ 346.925195][T11581] slab_reclaimable:7676 slab_unreclaimable:56036 [ 346.925195][T11581] mapped:34167 shmem:11890 pagetables:797 [ 346.925195][T11581] sec_pagetables:308 bounce:0 [ 346.925195][T11581] kernel_misc_reclaimable:0 [ 346.925195][T11581] free:45695 free_pcp:9832 free_cma:0 [ 346.936882][T11581] Node 0 active_anon:3976kB inactive_anon:1052kB active_file:816kB inactive_file:6840kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5336kB dirty:12kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9580kB pagetables:612kB sec_pagetables:1156kB all_unreclaimable? yes [ 346.945052][T11581] Node 1 active_anon:40056kB inactive_anon:0kB active_file:88656kB inactive_file:43868kB unevictable:19236kB isolated(anon):0kB isolated(file):0kB mapped:130332kB dirty:1420kB writeback:0kB shmem:43860kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2472kB pagetables:2576kB sec_pagetables:76kB all_unreclaimable? no [ 346.953454][T11581] Node 0 DMA free:2892kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:128kB inactive_anon:112kB active_file:104kB inactive_file:28kB unevictable:0kB writepending:12kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:796kB local_pcp:224kB free_cma:0kB [ 346.960779][T11581] lowmem_reserve[]: 0 270 0 0 0 [ 346.962097][T11581] Node 0 DMA32 free:16076kB boost:0kB min:13788kB low:17232kB high:20676kB reserved_highatomic:4096KB active_anon:3848kB inactive_anon:940kB active_file:712kB inactive_file:6812kB unevictable:3536kB writepending:0kB present:1032196kB managed:304016kB mlocked:0kB bounce:0kB free_pcp:5232kB local_pcp:1628kB free_cma:0kB [ 346.969807][T11581] lowmem_reserve[]: 0 0 0 0 0 [ 346.971060][T11581] Node 1 DMA32 free:155812kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:40056kB inactive_anon:0kB active_file:88656kB inactive_file:43868kB unevictable:19436kB writepending:1420kB present:1048432kB managed:948252kB mlocked:16000kB bounce:0kB free_pcp:39896kB local_pcp:1180kB free_cma:0kB [ 346.979100][T11581] lowmem_reserve[]: 0 0 0 0 0 [ 346.980786][T11581] Node 0 DMA: 5*4kB (M) 43*8kB (UM) 18*16kB (UM) 52*32kB (UM) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2892kB [ 346.984533][T11581] Node 0 DMA32: 429*4kB (UEH) 65*8kB (UEH) 11*16kB (UMEH) 55*32kB (UMEH) 24*64kB (UMH) 19*128kB (UE) 5*256kB (UE) 5*512kB (U) 2*1024kB (UM) 1*2048kB (M) 0*4096kB = 16076kB [ 346.989116][T11581] Node 1 DMA32: 0*4kB 65*8kB (UME) 59*16kB (UME) 5*32kB (UE) 56*64kB (UME) 75*128kB (U) 40*256kB (U) 55*512kB (UME) 42*1024kB (UME) 19*2048kB (UM) 5*4096kB (M) = 155608kB [ 346.993582][T11581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.996195][T11581] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 346.998622][T11581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.001087][T11581] Node 1 hugepages_total=7 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 347.003581][T11581] 45660 total pagecache pages [ 347.004875][T11581] 0 pages in swap cache [ 347.006001][T11581] Free swap = 123744kB [ 347.007110][T11581] Total swap = 124996kB [ 347.008239][T11581] 524155 pages RAM [ 347.009245][T11581] 0 pages HighMem/MovableOnly [ 347.010493][T11581] 207248 pages reserved [ 347.011606][T11581] 0 pages cma reserved [ 347.087901][T11589] fuse: Unknown parameter 'grou00000000000000000000' [ 347.090489][T11589] Process accounting resumed [ 347.302123][T11605] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1342'. [ 347.323098][T11600] siw: device registration error -23 [ 347.791503][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 347.793665][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 347.802021][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 347.805726][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 348.030440][ T5969] block nbd3: Receive control failed (result -32) [ 348.038750][T11599] block nbd3: shutting down sockets [ 348.064456][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 348.066103][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 348.208808][ T6003] libceph: connect (1)[c::]:6789 error -101 [ 348.210522][ T6003] libceph: mon0 (1)[c::]:6789 connect error [ 348.302547][T11630] kvm: apic: phys broadcast and lowest prio [ 348.414055][T11634] FAULT_INJECTION: forcing a failure. [ 348.414055][T11634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.417713][T11634] CPU: 0 UID: 0 PID: 11634 Comm: syz.3.1352 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 348.420424][T11634] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 348.423230][T11634] Call Trace: [ 348.424118][T11634] [ 348.424894][T11634] dump_stack_lvl+0x16c/0x1f0 [ 348.426226][T11634] should_fail_ex+0x497/0x5b0 [ 348.427485][T11634] _copy_to_user+0x32/0xd0 [ 348.428667][T11634] simple_read_from_buffer+0xd0/0x160 [ 348.430092][T11634] proc_fail_nth_read+0x198/0x270 [ 348.431435][T11634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.432895][T11634] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.434376][T11634] vfs_read+0x1df/0xbe0 [ 348.435478][T11634] ? __fget_files+0x1fc/0x3a0 [ 348.436722][T11634] ? __pfx___mutex_lock+0x10/0x10 [ 348.438066][T11634] ? __pfx_vfs_read+0x10/0x10 [ 348.439321][T11634] ? __fget_files+0x206/0x3a0 [ 348.440571][T11634] ksys_read+0x12b/0x250 [ 348.441720][T11634] ? __pfx_ksys_read+0x10/0x10 [ 348.442986][T11634] __do_fast_syscall_32+0x73/0x120 [ 348.444341][T11634] do_fast_syscall_32+0x32/0x80 [ 348.445659][T11634] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 348.447314][T11634] RIP: 0023:0xf749e579 [ 348.448402][T11634] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 348.453471][T11634] RSP: 002b:00000000f51865b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 348.455653][T11634] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5186620 [ 348.457728][T11634] RDX: 000000000000000f RSI: 00000000f7490ff4 RDI: 0000000000000000 [ 348.459840][T11634] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 348.461962][T11634] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 348.464022][T11634] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 348.466091][T11634] [ 348.466154][ T6003] libceph: connect (1)[c::]:6789 error -101 [ 348.469673][ T6003] libceph: mon0 (1)[c::]:6789 connect error [ 348.576422][ T5964] libceph: connect (1)[c::]:6789 error -101 [ 348.578102][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 348.582202][T11611] ceph: No mds server is up or the cluster is laggy [ 348.716280][T11643] siw: device registration error -23 [ 348.974470][ T6003] libceph: connect (1)[c::]:6789 error -101 [ 348.976183][ T6003] libceph: mon0 (1)[c::]:6789 connect error [ 349.034800][T11625] ceph: No mds server is up or the cluster is laggy [ 349.374260][ T6547] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 349.554465][ T6547] usb 6-1: Using ep0 maxpacket: 32 [ 349.557878][ T6547] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 349.561584][ T6547] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 349.567819][ T6547] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 349.571014][ T6547] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.573438][ T6547] usb 6-1: Product: syz [ 349.575199][ T6547] usb 6-1: Manufacturer: syz [ 349.576419][ T6547] usb 6-1: SerialNumber: syz [ 349.816221][ T6547] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 349.874344][ T75] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 349.972283][T11688] cgroup: release_agent respecified [ 350.011174][T11655] overlayfs: invalid origin (0000007900000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 350.032651][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1357'. [ 350.037476][ T6003] usb 6-1: USB disconnect, device number 7 [ 350.043211][ T6003] usblp0: removed [ 350.084204][ T75] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 350.087065][ T75] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 350.089605][ T75] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 350.091953][ T75] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.096361][T11670] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 350.102093][ T75] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.250743][T11692] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2758444543 (5516889086 ns) > initial count (140296 ns). Using initial count to start timer. [ 350.300472][ T39] kauditd_printk_skb: 10 callbacks suppressed [ 350.300488][ T39] audit: type=1326 audit(1732729563.067:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.3.1364" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf749e579 code=0x0 [ 350.400914][ T75] usb 8-1: USB disconnect, device number 9 [ 350.493660][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 350.496217][T11703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1370'. [ 350.597828][T11710] trusted_key: encrypted_key: insufficient parameters specified [ 350.796606][T11720] FAT-fs (sr0): bogus number of reserved sectors [ 350.798723][T11720] FAT-fs (sr0): Can't find a valid FAT filesystem [ 350.803559][T11720] netlink: 'syz.1.1375': attribute type 10 has an invalid length. [ 350.807421][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1375'. [ 351.977693][T11739] usb 2-1: USB disconnect, device number 106 [ 352.343963][T11751] trusted_key: encrypted_key: insufficient parameters specified [ 352.593734][T11753] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 352.593734][T11753] program syz.0.1383 not setting count and/or reply_len properly [ 352.807350][ T63] IPVS: starting estimator thread 0... [ 352.811738][T11759] tipc: Started in network mode [ 352.813065][T11759] tipc: Node identity ac1414aa, cluster identity 4711 [ 352.815166][T11759] tipc: Enabling of bearer rejected, failed to enable media [ 352.904292][T11760] IPVS: using max 38 ests per chain, 91200 per kthread [ 353.738374][T11770] fuse: Bad value for 'user_id' [ 353.739749][T11770] fuse: Bad value for 'user_id' [ 353.742845][T11770] Process accounting resumed [ 353.792529][T11774] FAT-fs (sr0): bogus number of reserved sectors [ 353.794327][T11774] FAT-fs (sr0): Can't find a valid FAT filesystem [ 353.808560][T11776] trusted_key: encrypted_key: insufficient parameters specified [ 353.810890][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 353.922398][T11783] input: syz0 as /devices/virtual/input/input154 [ 353.930968][T11783] FAULT_INJECTION: forcing a failure. [ 353.930968][T11783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.934514][T11783] CPU: 3 UID: 0 PID: 11783 Comm: syz.3.1393 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 353.937122][T11783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 353.939849][T11783] Call Trace: [ 353.940714][T11783] [ 353.941486][T11783] dump_stack_lvl+0x16c/0x1f0 [ 353.942697][T11783] should_fail_ex+0x497/0x5b0 [ 353.943915][T11783] _copy_from_user+0x2e/0xd0 [ 353.945111][T11783] input_event_from_user+0x22d/0x3b0 [ 353.946455][T11783] ? __pfx_input_event_from_user+0x10/0x10 [ 353.947956][T11783] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 353.949379][T11783] ? input_event+0x8e/0xa0 [ 353.950576][T11783] uinput_write+0xbb6/0x12b0 [ 353.951855][T11783] ? __pfx_uinput_write+0x10/0x10 [ 353.953168][T11783] ? bpf_lsm_file_permission+0x9/0x10 [ 353.954574][T11783] ? security_file_permission+0x71/0x210 [ 353.956011][T11783] ? __pfx_uinput_write+0x10/0x10 [ 353.957292][T11783] vfs_write+0x24c/0x1150 [ 353.958413][T11783] ? __fget_files+0x1fc/0x3a0 [ 353.959629][T11783] ? __pfx_lock_release+0x10/0x10 [ 353.960922][T11783] ? __pfx_vfs_write+0x10/0x10 [ 353.962164][T11783] ? lock_acquire+0x2f/0xb0 [ 353.963313][T11783] ? __fget_files+0x40/0x3a0 [ 353.964508][T11783] ? __fget_files+0x206/0x3a0 [ 353.965734][T11783] ksys_write+0x207/0x250 [ 353.966859][T11783] ? __pfx_ksys_write+0x10/0x10 [ 353.968137][T11783] __do_fast_syscall_32+0x73/0x120 [ 353.969478][T11783] do_fast_syscall_32+0x32/0x80 [ 353.970738][T11783] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 353.972360][T11783] RIP: 0023:0xf749e579 [ 353.973420][T11783] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 353.978269][T11783] RSP: 002b:00000000f516557c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 353.980377][T11783] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000200005c0 [ 353.982381][T11783] RDX: 00000000200005d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.984381][T11783] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 353.986390][T11783] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 353.988404][T11783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 353.990443][T11783] [ 353.991360][ C3] vkms_vblank_simulate: vblank timer overrun [ 354.124982][T11782] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 354.124982][T11782] program syz.1.1392 not setting count and/or reply_len properly [ 354.248076][T11788] tipc: Started in network mode [ 354.249412][T11788] tipc: Node identity ac1414aa, cluster identity 4711 [ 354.253545][T11788] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.256242][T11788] tipc: Enabled bearer , priority 10 [ 354.386012][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.456026][T11787] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 354.456026][T11787] program syz.1.1402 not setting count and/or reply_len properly [ 354.524235][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.664274][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.791795][T11800] fuse: Bad value for 'user_id' [ 354.793152][T11800] fuse: Bad value for 'user_id' [ 354.796078][T11800] Process accounting resumed [ 354.804332][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.944206][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 354.991425][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1400'. [ 355.057850][T11811] FAT-fs (sr0): bogus number of reserved sectors [ 355.059717][T11811] FAT-fs (sr0): Can't find a valid FAT filesystem [ 355.068894][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1401'. [ 355.084300][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.224259][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.269382][T11822] overlay: filesystem on ./bus not supported as upperdir [ 355.367366][ T63] tipc: Node number set to 2886997162 [ 355.430045][T11828] fuse: Bad value for 'user_id' [ 355.431378][T11828] fuse: Bad value for 'user_id' [ 355.433181][T11828] Process accounting resumed [ 355.504237][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.568377][T11830] input: syz0 as /devices/virtual/input/input157 [ 355.716005][T11841] FAT-fs (sr0): bogus number of reserved sectors [ 355.718050][T11841] FAT-fs (sr0): Can't find a valid FAT filesystem [ 355.725974][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 355.774296][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 355.851929][T11843] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 355.851929][T11843] program syz.0.1413 not setting count and/or reply_len properly [ 355.991889][T11847] netlink: 'syz.0.1414': attribute type 4 has an invalid length. [ 355.995443][T11847] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1414'. [ 356.830916][T11858] input: syz0 as /devices/virtual/input/input159 [ 357.113278][T11866] IPv6: syztnl0: Disabled Multicast RS [ 357.184326][ T6003] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 357.249416][T11868] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 357.249416][T11868] program syz.3.1422 not setting count and/or reply_len properly [ 357.314359][ T6003] usb 6-1: device descriptor read/64, error -71 [ 357.564296][ T6003] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 357.694864][ T6003] usb 6-1: device descriptor read/64, error -71 [ 357.804476][ T6003] usb usb6-port1: attempt power cycle [ 358.154237][ T6003] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 358.179924][ T6003] usb 6-1: device descriptor read/8, error -71 [ 358.194269][ T5964] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 358.213362][T11898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1428'. [ 358.354247][ T5964] usb 5-1: Using ep0 maxpacket: 16 [ 358.358783][ T5964] usb 5-1: config 0 has no interfaces? [ 358.362067][ T5964] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.365864][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.370754][ T5964] usb 5-1: Product: syz [ 358.371936][ T5964] usb 5-1: Manufacturer: syz [ 358.373304][ T5964] usb 5-1: SerialNumber: syz [ 358.377552][ T5964] usb 5-1: config 0 descriptor?? [ 358.415031][ T6003] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 358.434636][ T6003] usb 6-1: device descriptor read/8, error -71 [ 358.544518][ T6003] usb usb6-port1: unable to enumerate USB device [ 358.698977][T11894] program syz.0.1426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.710859][ T5964] usb 5-1: USB disconnect, device number 10 [ 359.298505][T11919] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 359.298505][T11919] program syz.0.1433 not setting count and/or reply_len properly [ 359.318534][T11918] afs: Unknown parameter 'dynAflock' [ 359.394209][ C2] net_ratelimit: 3 callbacks suppressed [ 359.394220][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 359.632043][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 360.054539][T11936] fuse: Bad value for 'fd' [ 360.057883][T11936] Process accounting resumed [ 360.186721][T11943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1441'. [ 360.347981][T11947] overlay: filesystem on ./bus not supported as upperdir [ 360.434255][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 360.522281][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1443'. [ 360.606247][T11953] loop6: detected capacity change from 0 to 524287999 [ 360.610432][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.612845][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.617548][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.620612][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.623364][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.625931][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.628797][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.631125][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.633231][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.635580][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.637664][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.640112][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.642361][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.644751][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.646871][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.649610][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.651629][T11953] ldm_validate_partition_table(): Disk read failed. [ 360.654426][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.656795][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.658931][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 360.661237][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 360.725208][T11953] Dev loop6: unable to read RDB block 0 [ 360.733713][T11953] loop6: unable to read partition table [ 360.736803][T11953] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 360.747454][T11954] ldm_validate_partition_table(): Disk read failed. [ 360.749947][T11954] Dev loop6: unable to read RDB block 0 [ 360.752064][T11954] loop6: unable to read partition table [ 360.753666][T11954] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 361.140302][T11963] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 361.140302][T11963] program syz.2.1447 not setting count and/or reply_len properly [ 361.474296][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 361.643915][T11969] fuse: Bad value for 'fd' [ 361.646422][T11969] Process accounting resumed [ 361.675147][T11971] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1451'. [ 361.677513][T11971] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1451'. [ 361.717810][T11977] cgroup2: Unknown parameter 'uid' [ 361.752773][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1454'. [ 362.045913][T11996] hub 2-0:1.0: USB hub found [ 362.049244][T11996] hub 2-0:1.0: 6 ports detected [ 362.062132][T12000] hub 2-0:1.0: USB hub found [ 362.063792][T12000] hub 2-0:1.0: 6 ports detected [ 362.234204][ T833] usb 2-1: new high-speed USB device number 107 using ehci-pci [ 362.426523][ T833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 362.429059][ T833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 362.431163][ T833] usb 2-1: Product: QEMU USB Tablet [ 362.432584][ T833] usb 2-1: Manufacturer: QEMU [ 362.433943][ T833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 362.450857][ T833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.006D/input/input163 [ 362.514221][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 362.518698][ T833] hid-generic 0003:0627:0001.006D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 362.649772][T12011] FAT-fs (sr0): bogus number of reserved sectors [ 362.651889][T12011] FAT-fs (sr0): Can't find a valid FAT filesystem [ 362.673191][T12011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 362.728088][T12013] fuse: Bad value for 'fd' [ 362.730248][T12013] Process accounting resumed [ 362.833616][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 363.068346][T12035] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 363.068346][T12035] program syz.3.1466 not setting count and/or reply_len properly [ 363.564328][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 363.735973][ T39] audit: type=1326 audit(1732729576.507:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.742217][ T39] audit: type=1326 audit(1732729576.507:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=315 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.751402][ T39] audit: type=1326 audit(1732729576.507:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.758905][ T39] audit: type=1326 audit(1732729576.507:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.765949][ T39] audit: type=1326 audit(1732729576.507:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.773405][ T39] audit: type=1326 audit(1732729576.507:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.781011][ T39] audit: type=1326 audit(1732729576.507:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.788465][ T39] audit: type=1326 audit(1732729576.507:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.797023][ T39] audit: type=1326 audit(1732729576.507:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.806693][ T39] audit: type=1326 audit(1732729576.507:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12038 comm="syz.0.1468" exe="/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf742e579 code=0x7ffc0000 [ 363.937264][ T6003] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 364.084270][ T6003] usb 6-1: Using ep0 maxpacket: 16 [ 364.088202][ T6003] usb 6-1: config 0 has no interfaces? [ 364.092400][ T6003] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.098957][ T6003] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.101753][ T6003] usb 6-1: Product: syz [ 364.103213][ T6003] usb 6-1: Manufacturer: syz [ 364.105790][ T6003] usb 6-1: SerialNumber: syz [ 364.110070][ T6003] usb 6-1: config 0 descriptor?? [ 364.213292][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1472'. [ 364.370089][T12055] vivid-001: disconnect [ 364.427237][T12037] program syz.1.1467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.432555][ T832] usb 6-1: USB disconnect, device number 12 [ 364.486469][T12060] siw: device registration error -23 [ 364.604222][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.131502][T12051] vivid-001: reconnect [ 365.614387][ T6003] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 365.629408][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 365.644204][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 365.738066][T12085] loop6: detected capacity change from 0 to 524287999 [ 365.740955][ C0] blk_print_req_error: 24 callbacks suppressed [ 365.740968][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.745079][ C0] buffer_io_error: 24 callbacks suppressed [ 365.745086][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.750256][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.753481][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.756672][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.759151][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.761383][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.764239][ T6003] usb 7-1: Using ep0 maxpacket: 32 [ 365.764718][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.767644][ T6003] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 365.769262][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.771455][ T6003] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 365.774737][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.778621][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.781042][ T6003] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 365.781907][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.784441][ T6003] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.786827][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.788380][ T6003] usb 7-1: Product: syz [ 365.788391][ T6003] usb 7-1: Manufacturer: syz [ 365.788398][ T6003] usb 7-1: SerialNumber: syz [ 365.794386][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.796621][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.798976][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.801038][T12085] ldm_validate_partition_table(): Disk read failed. [ 365.846701][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.850056][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.856981][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 365.860057][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.862955][T12085] Dev loop6: unable to read RDB block 0 [ 365.866604][T12085] loop6: unable to read partition table [ 365.868388][T12085] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 365.872835][T12086] ldm_validate_partition_table(): Disk read failed. [ 365.876137][T12086] Dev loop6: unable to read RDB block 0 [ 365.878285][T12086] loop6: unable to read partition table [ 365.879811][T12086] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 365.909326][T12091] FAT-fs (sr0): bogus number of reserved sectors [ 365.910974][T12091] FAT-fs (sr0): Can't find a valid FAT filesystem [ 365.929552][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 366.070756][ T6003] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 366.318388][T12078] overlayfs: invalid origin (0000007900000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 366.389289][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 366.393420][ T6003] usb 7-1: USB disconnect, device number 12 [ 366.399109][ T6003] usblp0: removed [ 366.674262][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.053898][T12111] usb 2-1: USB disconnect, device number 107 [ 367.110853][T12111] hub 2-0:1.0: USB hub found [ 367.112858][T12111] hub 2-0:1.0: 6 ports detected [ 367.194221][ T832] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 367.274414][ T9] usb 2-1: new high-speed USB device number 108 using ehci-pci [ 367.344189][ T832] usb 7-1: Using ep0 maxpacket: 16 [ 367.348539][ T832] usb 7-1: config 0 has no interfaces? [ 367.352238][ T832] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 367.354896][ T832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.357112][ T832] usb 7-1: Product: syz [ 367.358375][ T832] usb 7-1: Manufacturer: syz [ 367.359688][ T832] usb 7-1: SerialNumber: syz [ 367.362992][ T832] usb 7-1: config 0 descriptor?? [ 367.457736][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 367.460068][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 367.462152][ T9] usb 2-1: Product: QEMU USB Tablet [ 367.463469][ T9] usb 2-1: Manufacturer: QEMU [ 367.465089][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 367.489328][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.006E/input/input165 [ 367.558085][ T9] hid-generic 0003:0627:0001.006E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 367.688030][T12101] program syz.2.1486 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.695730][ T9] usb 7-1: USB disconnect, device number 13 [ 367.724252][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 367.862496][T12115] FAT-fs (sr0): bogus number of reserved sectors [ 367.864254][T12115] FAT-fs (sr0): Can't find a valid FAT filesystem [ 367.873859][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 367.882416][T12117] fuse: Invalid rootmode [ 367.886453][T12117] Process accounting resumed [ 367.961712][T12120] fuse: Invalid rootmode [ 367.964735][T12120] Process accounting resumed [ 368.030896][T12127] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1492'. [ 368.033352][T12127] netlink: 'syz.1.1492': attribute type 7 has an invalid length. [ 368.035760][T12127] netlink: 'syz.1.1492': attribute type 8 has an invalid length. [ 368.037791][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 368.045669][T12127] erspan0: entered promiscuous mode [ 368.047900][T12127] batadv_slave_1: entered promiscuous mode [ 368.050150][T12127] erspan0: left promiscuous mode [ 368.051905][T12127] batadv_slave_1: left promiscuous mode [ 368.074206][T12125] usb 2-1: USB disconnect, device number 108 [ 368.082077][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1492'. [ 368.085239][T12129] netlink: 'syz.1.1492': attribute type 7 has an invalid length. [ 368.087813][T12129] netlink: 'syz.1.1492': attribute type 8 has an invalid length. [ 368.090535][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1492'. [ 368.096492][T12129] erspan0: entered promiscuous mode [ 368.098564][T12129] batadv_slave_1: entered promiscuous mode [ 368.100754][T12129] erspan0: left promiscuous mode [ 368.102731][T12129] batadv_slave_1: left promiscuous mode [ 368.111141][T12125] hub 2-0:1.0: USB hub found [ 368.112501][T12125] hub 2-0:1.0: 6 ports detected [ 368.251216][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 368.260239][T12133] fuse: Bad value for 'rootmode' [ 368.269650][T12133] Process accounting resumed [ 368.286054][ T6547] usb 2-1: new high-speed USB device number 109 using ehci-pci [ 368.317876][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1505'. [ 368.374465][T12143] FAT-fs (sr0): bogus number of reserved sectors [ 368.376342][T12143] FAT-fs (sr0): Can't find a valid FAT filesystem [ 368.424521][T12149] fuse: Invalid rootmode [ 368.429420][T12149] Process accounting resumed [ 368.485725][ T6547] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 368.488116][ T6547] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 368.490164][ T6547] usb 2-1: Product: QEMU USB Tablet [ 368.491543][ T6547] usb 2-1: Manufacturer: QEMU [ 368.492949][ T6547] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 368.517188][ T6547] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.006F/input/input166 [ 368.578222][ T6547] hid-generic 0003:0627:0001.006F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 368.754290][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 368.983036][T12159] dlm: no local IP address has been set [ 368.986712][T12159] dlm: cannot start dlm midcomms -107 [ 369.288103][T12161] fuse: Bad value for 'rootmode' [ 369.299111][T12161] Process accounting resumed [ 369.340861][T12167] FAT-fs (sr0): bogus number of reserved sectors [ 369.342501][T12167] FAT-fs (sr0): Can't find a valid FAT filesystem [ 369.520831][T12175] siw: device registration error -23 [ 369.521312][T12174] fuse: Invalid rootmode [ 369.553282][T12174] Process accounting resumed [ 369.670223][T12177] syz.2.1513(12177): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 369.794308][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 369.937317][T12191] usb 2-1: USB disconnect, device number 109 [ 370.041538][T12195] hub 2-0:1.0: USB hub found [ 370.046069][T12195] hub 2-0:1.0: 6 ports detected [ 370.244298][ T6022] usb 2-1: new high-speed USB device number 110 using ehci-pci [ 370.324961][T12202] FAT-fs (sr0): bogus number of reserved sectors [ 370.326643][T12202] FAT-fs (sr0): Can't find a valid FAT filesystem [ 370.429033][ T6022] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 370.431623][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 370.433746][ T6022] usb 2-1: Product: QEMU USB Tablet [ 370.436450][ T6022] usb 2-1: Manufacturer: QEMU [ 370.438061][ T6022] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 370.463198][ T6022] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0070/input/input167 [ 370.527491][ T6022] hid-generic 0003:0627:0001.0070: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 370.834224][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 370.839777][T12210] fuse: Bad value for 'rootmode' [ 370.843256][T12210] Process accounting resumed [ 371.093076][T12224] usb 2-1: USB disconnect, device number 110 [ 371.153430][T12224] hub 2-0:1.0: USB hub found [ 371.172454][T12224] hub 2-0:1.0: 6 ports detected [ 371.228914][T12231] hub 2-0:1.0: USB hub found [ 371.237536][T12231] hub 2-0:1.0: 6 ports detected [ 371.486534][T12237] siw: device registration error -23 [ 371.494273][ T6003] usb 2-1: new high-speed USB device number 111 using ehci-pci [ 371.696583][ T6003] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 371.698973][ T6003] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 371.701110][ T6003] usb 2-1: Product: QEMU USB Tablet [ 371.702468][ T6003] usb 2-1: Manufacturer: QEMU [ 371.703663][ T6003] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 371.725020][ T6003] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0071/input/input168 [ 371.787139][ T6003] hid-generic 0003:0627:0001.0071: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 371.874270][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.282440][T12240] FAT-fs (sr0): bogus number of reserved sectors [ 372.287023][T12240] FAT-fs (sr0): Can't find a valid FAT filesystem [ 372.313466][T12240] __nla_validate_parse: 4 callbacks suppressed [ 372.313483][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 372.357907][T12248] fuse: Unknown parameter 'use00000000000000000000' [ 372.360157][T12248] Process accounting resumed [ 372.403278][T12249] usb 2-1: USB disconnect, device number 111 [ 372.431543][T12249] hub 2-0:1.0: USB hub found [ 372.435851][T12249] hub 2-0:1.0: 6 ports detected [ 372.540760][T12257] vivid-004: disconnect [ 372.634301][ T6022] usb 2-1: new high-speed USB device number 112 using ehci-pci [ 372.838852][ T6022] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 372.842366][ T6022] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 372.846122][ T6022] usb 2-1: Product: QEMU USB Tablet [ 372.848440][ T6022] usb 2-1: Manufacturer: QEMU [ 372.850077][ T6022] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 372.867589][ T6022] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0072/input/input169 [ 372.914284][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 372.928962][ T6022] hid-generic 0003:0627:0001.0072: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 373.068561][T12264] jfs: Unknown parameter 'discardäÅt]]JÆ[µhñ\ ÙÏ÷I0±¼HX^¼Ǭ †¼¢·g_uy35Šq5fþŠLeö¶^‹£ ÿ´ëHþX6\x#“Uc664ÐÑ>EÜÂõæ'w æÅÎ@Ä [ 380.126125][T12443] dump_stack_lvl+0x16c/0x1f0 [ 380.127807][T12443] should_fail_ex+0x497/0x5b0 [ 380.129539][T12443] _copy_from_user+0x2e/0xd0 [ 380.131047][T12443] kstrtouint_from_user+0xd7/0x1c0 [ 380.132841][T12443] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 380.134742][T12443] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 380.136591][T12443] proc_fail_nth_write+0x84/0x250 [ 380.138355][T12443] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.140339][T12443] ? ksys_write+0x12b/0x250 [ 380.141914][T12443] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 380.143688][T12443] vfs_write+0x24c/0x1150 [ 380.145202][T12443] ? __fget_files+0x1fc/0x3a0 [ 380.146835][T12443] ? __pfx___mutex_lock+0x10/0x10 [ 380.148593][T12443] ? __pfx_vfs_write+0x10/0x10 [ 380.150219][T12443] ? __fget_files+0x206/0x3a0 [ 380.151872][T12443] ksys_write+0x12b/0x250 [ 380.153415][T12443] ? __pfx_ksys_write+0x10/0x10 [ 380.155026][T12443] __do_fast_syscall_32+0x73/0x120 [ 380.156771][T12443] do_fast_syscall_32+0x32/0x80 [ 380.158507][T12443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 380.160690][T12443] RIP: 0023:0xf743e579 [ 380.162129][T12443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 380.168568][T12443] RSP: 002b:00000000f51265b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 380.171338][T12443] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5126620 [ 380.174057][T12443] RDX: 0000000000000001 RSI: 00000000f7430ff4 RDI: 0000000000000000 [ 380.176491][T12443] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 380.178609][T12443] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 380.181279][T12443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 380.183953][T12443] [ 380.194342][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 380.263263][T12445] fuse: Unknown parameter 'user_i00000000000000000000' [ 380.266995][T12445] Process accounting resumed [ 380.399984][T12454] FAT-fs (sr0): bogus number of reserved sectors [ 380.401946][T12454] FAT-fs (sr0): Can't find a valid FAT filesystem [ 380.416865][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 381.204542][T12470] usb 2-1: USB disconnect, device number 116 [ 381.234277][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 381.242810][T12470] hub 2-0:1.0: USB hub found [ 381.251327][T12470] hub 2-0:1.0: 6 ports detected [ 381.424395][ T5964] usb 2-1: new high-speed USB device number 117 using ehci-pci [ 381.439850][T12479] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004 [ 381.560046][T12481] fuse: Unknown parameter 'user_id00000000000000000000' [ 381.571851][T12481] Process accounting resumed [ 381.611732][ T5964] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 381.620017][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 381.628829][ T5964] usb 2-1: Product: QEMU USB Tablet [ 381.635128][ T5964] usb 2-1: Manufacturer: QEMU [ 381.641612][ T5964] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 381.690024][ T5964] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0077/input/input174 [ 381.766701][ T5964] hid-generic 0003:0627:0001.0077: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 381.901834][T12485] FAT-fs (sr0): bogus number of reserved sectors [ 381.903497][T12485] FAT-fs (sr0): Can't find a valid FAT filesystem [ 381.911791][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1592'. [ 382.122054][T12495] usb 2-1: USB disconnect, device number 117 [ 382.180981][T12495] hub 2-0:1.0: USB hub found [ 382.182343][T12495] hub 2-0:1.0: 6 ports detected [ 382.274326][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 382.354269][ T833] usb 2-1: new high-speed USB device number 118 using ehci-pci [ 382.417093][T12500] netlink: zone id is out of range [ 382.418474][T12500] netlink: zone id is out of range [ 382.419814][T12500] netlink: zone id is out of range [ 382.421160][T12500] netlink: zone id is out of range [ 382.422482][T12500] netlink: zone id is out of range [ 382.423813][T12500] netlink: zone id is out of range [ 382.490155][T12504] fuse: Unknown parameter 'user_id00000000000000000000' [ 382.493612][T12504] Process accounting resumed [ 382.527707][T12510] FAT-fs (sr0): bogus number of reserved sectors [ 382.529481][T12510] FAT-fs (sr0): Can't find a valid FAT filesystem [ 382.544570][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 382.548861][ T833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 382.552134][ T833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 382.556551][ T833] usb 2-1: Product: QEMU USB Tablet [ 382.557935][ T833] usb 2-1: Manufacturer: QEMU [ 382.559379][ T833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 382.579720][ T833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0078/input/input175 [ 382.587219][ T833] hid-generic 0003:0627:0001.0078: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 382.603728][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1600'. [ 382.807618][T12533] fuse: Unknown parameter 'user_id00000000000000000000' [ 382.809894][T12533] Process accounting resumed [ 382.822988][T12536] FAT-fs (sr0): bogus number of reserved sectors [ 382.834268][T12536] FAT-fs (sr0): Can't find a valid FAT filesystem [ 382.843824][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1610'. [ 382.845542][T12539] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1612'. [ 383.057200][T12556] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 383.062473][T12558] usb 2-1: USB disconnect, device number 118 [ 383.147668][T12561] hub 2-0:1.0: USB hub found [ 383.149855][T12561] hub 2-0:1.0: 6 ports detected [ 383.279121][T12565] FAULT_INJECTION: forcing a failure. [ 383.279121][T12565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.282959][T12565] CPU: 3 UID: 0 PID: 12565 Comm: syz.2.1620 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 383.285662][T12565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 383.288640][T12565] Call Trace: [ 383.289537][T12565] [ 383.290313][T12565] dump_stack_lvl+0x16c/0x1f0 [ 383.291548][T12565] should_fail_ex+0x497/0x5b0 [ 383.292797][T12565] _copy_to_user+0x32/0xd0 [ 383.293950][T12565] snd_seq_ioctl+0x33e/0x3f0 [ 383.295175][T12565] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 383.296516][T12565] ? __fget_files+0x206/0x3a0 [ 383.297774][T12565] snd_seq_ioctl_compat+0xea/0x310 [ 383.299112][T12565] ? __pfx_snd_seq_ioctl_compat+0x10/0x10 [ 383.300602][T12565] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 383.301993][T12565] __do_fast_syscall_32+0x73/0x120 [ 383.303339][T12565] do_fast_syscall_32+0x32/0x80 [ 383.304627][T12565] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 383.306293][T12565] RIP: 0023:0xf743e579 [ 383.307379][T12565] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 383.312340][T12565] RSP: 002b:00000000f512657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 383.314511][T12565] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000c0305302 [ 383.316562][T12565] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.318620][T12565] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 383.320676][T12565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 383.322727][T12565] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 383.324790][T12565] [ 383.334231][ T30] usb 2-1: new high-speed USB device number 119 using ehci-pci [ 383.338759][T12565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 383.415734][T12569] fuse: Bad value for 'fd' [ 383.418438][T12569] Process accounting resumed [ 383.474409][T12571] FAT-fs (sr0): bogus number of reserved sectors [ 383.476254][T12571] FAT-fs (sr0): Can't find a valid FAT filesystem [ 383.487991][T12571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1622'. [ 383.546913][T12573] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1623'. [ 383.552234][ T30] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 383.557073][ T30] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 383.561008][ T30] usb 2-1: Product: QEMU USB Tablet [ 383.563520][ T30] usb 2-1: Manufacturer: QEMU [ 383.565916][ T30] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 383.599470][ T30] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0079/input/input176 [ 383.655312][ T30] hid-generic 0003:0627:0001.0079: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 383.662441][T12582] Invalid ELF section header size [ 383.739548][T12584] FAULT_INJECTION: forcing a failure. [ 383.739548][T12584] name failslab, interval 1, probability 0, space 0, times 0 [ 383.743103][T12584] CPU: 3 UID: 0 PID: 12584 Comm: syz.2.1628 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 383.745821][T12584] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 383.748603][T12584] Call Trace: [ 383.749518][T12584] [ 383.750305][T12584] dump_stack_lvl+0x16c/0x1f0 [ 383.751550][T12584] should_fail_ex+0x497/0x5b0 [ 383.752812][T12584] ? fs_reclaim_acquire+0xae/0x150 [ 383.754165][T12584] should_failslab+0xc2/0x120 [ 383.755412][T12584] __kmalloc_noprof+0xce/0x4f0 [ 383.756789][T12584] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 383.758543][T12584] ? tomoyo_realpath_from_path+0xbf/0x710 [ 383.760033][T12584] tomoyo_realpath_from_path+0xbf/0x710 [ 383.761491][T12584] ? tomoyo_path_number_perm+0x235/0x5b0 [ 383.762957][T12584] tomoyo_path_number_perm+0x248/0x5b0 [ 383.764376][T12584] ? tomoyo_path_number_perm+0x235/0x5b0 [ 383.766048][T12584] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 383.767871][T12584] ? __pfx_lock_release+0x10/0x10 [ 383.769293][T12584] ? trace_lock_acquire+0x146/0x1e0 [ 383.770689][T12584] ? lock_acquire+0x2f/0xb0 [ 383.771985][T12584] ? __fget_files+0x40/0x3a0 [ 383.773304][T12584] ? __fget_files+0x206/0x3a0 [ 383.774729][T12584] security_file_ioctl_compat+0x9b/0x240 [ 383.776213][T12584] __do_compat_sys_ioctl+0x4e/0x2c0 [ 383.777588][T12584] __do_fast_syscall_32+0x73/0x120 [ 383.778936][T12584] do_fast_syscall_32+0x32/0x80 [ 383.780204][T12584] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 383.781844][T12584] RIP: 0023:0xf743e579 [ 383.782913][T12584] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 383.787988][T12584] RSP: 002b:00000000f512657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 383.790143][T12584] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000401c5820 [ 383.792184][T12584] RDX: 0000000020000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.794386][T12584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 383.796427][T12584] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 383.798478][T12584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 383.800527][T12584] [ 383.813558][T12584] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.899247][T12592] fuse: Bad value for 'fd' [ 383.901365][T12592] Process accounting resumed [ 383.951097][T12595] FAT-fs (sr0): bogus number of reserved sectors [ 383.953419][T12595] FAT-fs (sr0): Can't find a valid FAT filesystem [ 383.961748][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'. [ 384.063797][T12596] usb 2-1: USB disconnect, device number 119 [ 384.106324][T12599] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 384.126352][T12600] hub 2-0:1.0: USB hub found [ 384.128039][T12600] hub 2-0:1.0: 6 ports detected [ 384.290066][T12602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1633'. [ 384.324231][ T5964] usb 2-1: new high-speed USB device number 120 using ehci-pci [ 384.500459][T12606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1634'. [ 384.501006][ T5964] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 384.518124][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 384.521745][ T5964] usb 2-1: Product: QEMU USB Tablet [ 384.536197][ T5964] usb 2-1: Manufacturer: QEMU [ 384.545547][ T5964] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 384.635566][ T5964] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.007A/input/input177 [ 384.684457][ T5964] hid-generic 0003:0627:0001.007A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 385.394223][ C2] net_ratelimit: 10 callbacks suppressed [ 385.394242][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 385.472295][T12619] fuse: Bad value for 'fd' [ 385.477000][T12619] Process accounting resumed [ 385.490942][T12621] FAT-fs (sr0): bogus number of reserved sectors [ 385.492968][T12621] FAT-fs (sr0): Can't find a valid FAT filesystem [ 385.504799][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1640'. [ 385.589469][T12637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1646'. [ 385.599097][T12627] usb 2-1: USB disconnect, device number 120 [ 385.618102][T12627] hub 2-0:1.0: USB hub found [ 385.620261][T12627] hub 2-0:1.0: 6 ports detected [ 385.627856][T12641] vivid-001: disconnect [ 385.820469][ T30] usb 2-1: new high-speed USB device number 121 using ehci-pci [ 385.826623][T12632] vivid-001: reconnect [ 386.018794][ T30] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 386.021294][ T30] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 386.023398][ T30] usb 2-1: Product: QEMU USB Tablet [ 386.024866][ T30] usb 2-1: Manufacturer: QEMU [ 386.034183][ T30] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 386.062239][ T30] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.007B/input/input178 [ 386.159978][ T30] hid-generic 0003:0627:0001.007B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 386.434300][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 386.935599][T12662] mkiss: ax0: crc mode is auto. [ 386.953915][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1651'. [ 387.161417][T12675] FAT-fs (sr0): bogus number of reserved sectors [ 387.163179][T12675] FAT-fs (sr0): Can't find a valid FAT filesystem [ 387.171261][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 387.474388][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 387.498979][T12677] usb 2-1: USB disconnect, device number 121 [ 387.553960][T12687] hub 2-0:1.0: USB hub found [ 387.565555][T12687] hub 2-0:1.0: 6 ports detected [ 387.602441][T12696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.604400][T12696] IPv6: NLM_F_CREATE should be set when creating new route [ 387.606395][T12696] IPv6: NLM_F_CREATE should be set when creating new route [ 387.612839][T12696] sit0: entered promiscuous mode [ 387.615822][T12696] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 387.618169][T12696] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1661'. [ 387.721801][T12698] siw: device registration error -23 [ 387.724258][ T6005] usb 2-1: new high-speed USB device number 122 using ehci-pci [ 387.800028][T12697] afs: Unknown parameter 'dynAflock' [ 387.898264][ T6005] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 387.900695][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 387.902887][ T6005] usb 2-1: Product: QEMU USB Tablet [ 387.904670][ T6005] usb 2-1: Manufacturer: QEMU [ 387.906150][ T6005] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 387.929676][ T6005] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.007C/input/input179 [ 387.955144][T12705] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1663'. [ 387.985391][ T6005] hid-generic 0003:0627:0001.007C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 388.014914][T12709] FAT-fs (sr0): bogus number of reserved sectors [ 388.017132][T12709] FAT-fs (sr0): Can't find a valid FAT filesystem [ 388.040980][T12709] netlink: 'syz.0.1664': attribute type 10 has an invalid length. [ 388.071890][T12713] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1665'. [ 388.122578][T12719] netlink: 'syz.0.1668': attribute type 4 has an invalid length. [ 388.195871][T12721] usb 2-1: USB disconnect, device number 122 [ 388.249228][T12730] hub 2-0:1.0: USB hub found [ 388.252901][T12730] hub 2-0:1.0: 6 ports detected [ 388.514288][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 388.854190][ T6004] usb 2-1: new high-speed USB device number 123 using ehci-pci [ 389.016557][T12750] __nla_validate_parse: 1 callbacks suppressed [ 389.016572][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1676'. [ 389.020948][T12750] netlink: 'syz.1.1676': attribute type 7 has an invalid length. [ 389.022992][T12750] netlink: 'syz.1.1676': attribute type 8 has an invalid length. [ 389.025812][T12750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 389.028950][T12750] FAULT_INJECTION: forcing a failure. [ 389.028950][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 389.033274][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.1.1676 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 389.036495][T12750] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 389.039523][T12750] Call Trace: [ 389.040000][T12751] vivid-001: disconnect [ 389.040650][T12750] [ 389.042602][T12750] dump_stack_lvl+0x16c/0x1f0 [ 389.044101][T12750] should_fail_ex+0x497/0x5b0 [ 389.045648][T12750] ? fs_reclaim_acquire+0xae/0x150 [ 389.047298][T12750] should_failslab+0xc2/0x120 [ 389.048619][T12750] __kmalloc_cache_noprof+0x68/0x420 [ 389.050039][T12750] hsr_create_self_node+0x4f/0x3d0 [ 389.051779][T12750] hsr_dev_finalize+0x26d/0xbf0 [ 389.053407][T12750] ? __pfx_validate_linkmsg+0x10/0x10 [ 389.054571][T12747] vivid-001: reconnect [ 389.055279][T12750] hsr_newlink+0x40b/0x8e0 [ 389.055303][T12750] ? __pfx_hsr_newlink+0x10/0x10 [ 389.059853][T12750] ? rtnl_create_link+0xa2e/0xf10 [ 389.061607][T12750] rtnl_newlink+0x11ad/0x1c10 [ 389.063140][T12750] ? __pfx_hsr_newlink+0x10/0x10 [ 389.064806][T12750] ? __pfx_rtnl_newlink+0x10/0x10 [ 389.066394][T12750] ? __pfx___lock_acquire+0x10/0x10 [ 389.067860][T12750] ? kmem_cache_free+0x152/0x4c0 [ 389.069503][T12750] ? aa_get_newest_label+0x376/0x680 [ 389.071127][T12750] ? find_held_lock+0x2d/0x110 [ 389.072739][T12750] ? find_held_lock+0x2d/0x110 [ 389.074367][T12750] ? rtnetlink_rcv_msg+0x93a/0xea0 [ 389.075919][T12750] ? __pfx_lock_release+0x10/0x10 [ 389.077414][T12750] ? trace_lock_acquire+0x146/0x1e0 [ 389.078794][T12750] ? __pfx_rtnl_newlink+0x10/0x10 [ 389.080133][T12750] rtnetlink_rcv_msg+0x95b/0xea0 [ 389.081475][T12750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.082944][T12750] ? __pfx___dev_queue_xmit+0x10/0x10 [ 389.084397][T12750] netlink_rcv_skb+0x165/0x410 [ 389.085762][T12750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 389.087536][T12750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 389.089040][T12750] ? netlink_deliver_tap+0x1ae/0xca0 [ 389.090468][T12750] netlink_unicast+0x53c/0x7f0 [ 389.091840][T12750] ? __pfx_netlink_unicast+0x10/0x10 [ 389.093290][T12750] ? __phys_addr_symbol+0x30/0x80 [ 389.094718][T12750] ? __check_object_size+0x488/0x710 [ 389.096137][T12750] netlink_sendmsg+0x8b8/0xd70 [ 389.097395][T12750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.098996][T12750] ____sys_sendmsg+0x9ae/0xb40 [ 389.100293][T12750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.101702][T12750] ? get_compat_msghdr+0x11b/0x170 [ 389.103069][T12750] ___sys_sendmsg+0x135/0x1e0 [ 389.104320][T12750] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.105947][T12750] ? __pfx_lock_release+0x10/0x10 [ 389.107321][T12750] ? trace_lock_acquire+0x146/0x1e0 [ 389.108696][T12750] ? __fget_files+0x206/0x3a0 [ 389.109944][T12750] __sys_sendmsg+0x16e/0x220 [ 389.111157][T12750] ? __pfx___sys_sendmsg+0x10/0x10 [ 389.112498][T12750] __do_fast_syscall_32+0x73/0x120 [ 389.113846][T12750] do_fast_syscall_32+0x32/0x80 [ 389.115151][T12750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.116932][T12750] RIP: 0023:0xf7f70579 [ 389.118006][T12750] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 389.122918][T12750] RSP: 002b:00000000f50f657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 389.125072][T12750] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200000c0 [ 389.127384][T12750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.130199][T12750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.133194][T12750] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 389.135975][T12750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.138574][T12750] [ 389.162347][ T6004] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 389.165184][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 389.167203][ T6004] usb 2-1: Product: QEMU USB Tablet [ 389.174262][ T6004] usb 2-1: Manufacturer: QEMU [ 389.177973][ T6004] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 389.189583][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1677'. [ 389.192116][T12756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.197084][T12756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.197646][ T6004] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.007D/input/input180 [ 389.207212][T12756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.209378][T12756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.213119][T12756] batman_adv: batadv0: Removing interface: gretap1 [ 389.294249][ T6004] hid-generic 0003:0627:0001.007D: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 389.408830][T12775] FAULT_INJECTION: forcing a failure. [ 389.408830][T12775] name failslab, interval 1, probability 0, space 0, times 0 [ 389.412052][T12775] CPU: 2 UID: 0 PID: 12775 Comm: syz.2.1682 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 389.414880][T12775] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 389.417665][T12775] Call Trace: [ 389.418539][T12775] [ 389.419306][T12775] dump_stack_lvl+0x16c/0x1f0 [ 389.420614][T12775] should_fail_ex+0x497/0x5b0 [ 389.421822][T12775] ? fs_reclaim_acquire+0xae/0x150 [ 389.423164][T12775] should_failslab+0xc2/0x120 [ 389.424401][T12775] __kmalloc_noprof+0xce/0x4f0 [ 389.425675][T12775] ? nft_expr_init+0x218/0x3b0 [ 389.426932][T12775] nft_expr_init+0x218/0x3b0 [ 389.428159][T12775] ? __pfx_nft_expr_init+0x10/0x10 [ 389.429569][T12775] ? do_init_timer+0xc9/0x110 [ 389.430993][T12775] nft_set_elem_expr_alloc+0x27/0x270 [ 389.432374][T12775] nft_set_expr_alloc+0x6c/0x5f0 [ 389.433684][T12775] nf_tables_newset+0x2e91/0x4120 [ 389.435233][T12775] ? __pfx_nf_tables_newset+0x10/0x10 [ 389.436629][T12775] ? __pfx___lock_acquire+0x10/0x10 [ 389.437981][T12775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.439547][T12775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 389.441071][T12775] ? __nla_validate_parse+0x605/0x2b10 [ 389.442451][T12775] ? net_generic+0xea/0x2a0 [ 389.443662][T12775] ? __pfx_lock_release+0x10/0x10 [ 389.444979][T12775] ? __nla_parse+0x40/0x60 [ 389.446221][T12775] nfnetlink_rcv_batch+0x1a2a/0x24e0 [ 389.447632][T12775] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 389.449202][T12775] ? stack_depot_save_flags+0x28/0x900 [ 389.450692][T12775] ? __pfx_mark_lock+0x10/0x10 [ 389.451918][T12775] ? __lock_acquire+0xcc5/0x3c40 [ 389.453207][T12775] ? __nla_parse+0x40/0x60 [ 389.454376][T12775] nfnetlink_rcv+0x3c3/0x430 [ 389.455765][T12775] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 389.457101][T12775] netlink_unicast+0x53c/0x7f0 [ 389.458353][T12775] ? __pfx_netlink_unicast+0x10/0x10 [ 389.459676][T12775] ? __phys_addr_symbol+0x30/0x80 [ 389.460818][T12775] ? __check_object_size+0x488/0x710 [ 389.462011][T12775] netlink_sendmsg+0x8b8/0xd70 [ 389.463272][T12775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.464651][T12775] ____sys_sendmsg+0x9ae/0xb40 [ 389.465930][T12775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.467320][T12775] ? get_compat_msghdr+0x11b/0x170 [ 389.468688][T12775] ___sys_sendmsg+0x135/0x1e0 [ 389.469941][T12775] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.471354][T12775] ? __pfx_lock_release+0x10/0x10 [ 389.472645][T12775] ? trace_lock_acquire+0x146/0x1e0 [ 389.473990][T12775] ? __fget_files+0x206/0x3a0 [ 389.475228][T12775] __sys_sendmsg+0x16e/0x220 [ 389.476445][T12775] ? __pfx___sys_sendmsg+0x10/0x10 [ 389.477969][T12775] __do_fast_syscall_32+0x73/0x120 [ 389.479278][T12775] do_fast_syscall_32+0x32/0x80 [ 389.480545][T12775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 389.482186][T12775] RIP: 0023:0xf743e579 [ 389.483260][T12775] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 389.488147][T12775] RSP: 002b:00000000f512657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 389.490274][T12775] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 389.492327][T12775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 389.494460][T12775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 389.496539][T12775] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 389.498520][T12775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 389.500671][T12775] [ 389.554231][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 390.329491][T12803] FAULT_INJECTION: forcing a failure. [ 390.329491][T12803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.336785][T12803] CPU: 2 UID: 0 PID: 12803 Comm: syz.3.1690 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 390.339784][T12803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 390.342896][T12803] Call Trace: [ 390.343779][T12803] [ 390.344565][T12803] dump_stack_lvl+0x16c/0x1f0 [ 390.345819][T12803] should_fail_ex+0x497/0x5b0 [ 390.347014][T12803] _copy_from_user+0x2e/0xd0 [ 390.348195][T12803] get_compat_msghdr+0xa8/0x170 [ 390.349796][T12803] ? __pfx_get_compat_msghdr+0x10/0x10 [ 390.351752][T12803] ___sys_sendmsg+0x1b0/0x1e0 [ 390.353036][T12803] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.354401][T12803] ? __pfx_lock_release+0x10/0x10 [ 390.355708][T12803] ? trace_lock_acquire+0x146/0x1e0 [ 390.357088][T12803] ? __fget_files+0x206/0x3a0 [ 390.358330][T12803] __sys_sendmsg+0x16e/0x220 [ 390.359760][T12803] ? __pfx___sys_sendmsg+0x10/0x10 [ 390.361400][T12803] __do_fast_syscall_32+0x73/0x120 [ 390.362810][T12803] do_fast_syscall_32+0x32/0x80 [ 390.364374][T12803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.366090][T12803] RIP: 0023:0xf749e579 [ 390.367171][T12803] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 390.373272][T12803] RSP: 002b:00000000f518657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 390.375486][T12803] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000240 [ 390.377528][T12803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 390.379628][T12803] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.381689][T12803] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 390.383670][T12803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.385713][T12803] [ 390.544395][T12820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1693'. [ 390.551332][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 390.594212][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 390.900208][T12829] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 391.301154][T12836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.617496][T12844] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 391.617496][T12844] program syz.0.1700 not setting count and/or reply_len properly [ 391.634238][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 392.077359][T12851] trusted_key: encrypted_key: insufficient parameters specified [ 392.172320][T12856] vivid-002: disconnect [ 392.181103][T12852] vivid-002: reconnect [ 392.307207][T12866] FAT-fs (sr0): bogus number of reserved sectors [ 392.309432][T12866] FAT-fs (sr0): Can't find a valid FAT filesystem [ 392.327594][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 392.428172][T12876] afs: Unknown parameter 'dynAflock' [ 392.545437][T12877] usb 2-1: USB disconnect, device number 123 [ 392.612105][T12879] hub 2-0:1.0: USB hub found [ 392.614012][T12879] hub 2-0:1.0: 6 ports detected [ 392.674281][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 392.814269][ T5964] usb 2-1: new high-speed USB device number 124 using ehci-pci [ 392.818083][T12881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.009166][ T5964] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 393.026106][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 393.028316][ T5964] usb 2-1: Product: QEMU USB Tablet [ 393.029730][ T5964] usb 2-1: Manufacturer: QEMU [ 393.030957][ T5964] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 393.128539][ T5964] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.007E/input/input182 [ 393.153075][ T5964] hid-generic 0003:0627:0001.007E: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 393.398119][T12886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 393.439963][T12888] trusted_key: encrypted_key: insufficient parameters specified [ 393.536957][T12891] vivid-002: disconnect [ 393.540797][T12889] vivid-002: reconnect [ 393.724271][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 393.773550][T12894] siw: device registration error -23 [ 393.976971][T12906] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 393.976971][T12906] program syz.3.1716 not setting count and/or reply_len properly [ 394.615160][T12916] fuse: Unknown parameter 'user_i00000000000000000000' [ 394.618484][T12916] Process accounting resumed [ 394.648744][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1721'. [ 394.678172][ T5963] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 394.754205][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 394.873404][T12927] FAT-fs (sr0): bogus number of reserved sectors [ 394.876535][T12927] FAT-fs (sr0): Can't find a valid FAT filesystem [ 394.884572][T12927] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 394.958028][T12933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.713415][T12948] fuse: Unknown parameter 'user_i00000000000000000000' [ 395.717046][T12948] Process accounting resumed [ 395.764927][T12950] fuse: Unknown parameter 'fd0x0000000000000006' [ 395.766980][T12950] Process accounting resumed [ 395.783054][T12951] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 395.783054][T12951] program syz.1.1730 not setting count and/or reply_len properly [ 395.794229][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 396.062394][T12954] usb 2-1: USB disconnect, device number 124 [ 396.097259][T12954] hub 2-0:1.0: USB hub found [ 396.098831][T12954] hub 2-0:1.0: 6 ports detected [ 396.264258][ T832] usb 2-1: new high-speed USB device number 125 using ehci-pci [ 396.388006][T12960] FAT-fs (sr0): bogus number of reserved sectors [ 396.390275][T12960] FAT-fs (sr0): Can't find a valid FAT filesystem [ 396.398658][T12960] netlink: 'syz.0.1734': attribute type 10 has an invalid length. [ 396.488743][ T832] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 396.491166][ T832] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 396.493172][ T832] usb 2-1: Product: QEMU USB Tablet [ 396.494625][ T832] usb 2-1: Manufacturer: QEMU [ 396.496419][ T832] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 396.509352][T12969] FAT-fs (sr0): bogus number of reserved sectors [ 396.511726][T12969] FAT-fs (sr0): Can't find a valid FAT filesystem [ 396.514304][ T832] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.007F/input/input185 [ 396.539731][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'. [ 396.585583][ T832] hid-generic 0003:0627:0001.007F: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 396.589023][T12973] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 396.590689][T12973] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 396.594263][T12973] vhci_hcd vhci_hcd.0: Device attached [ 396.642869][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 396.764193][T12974] vhci_hcd: connection closed [ 396.784422][ T12] vhci_hcd: stop threads [ 396.786775][ T12] vhci_hcd: release socket [ 396.790317][ T12] vhci_hcd: disconnect device [ 396.834222][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 397.355650][T12985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.567167][T12997] usb 2-1: USB disconnect, device number 125 [ 397.634446][T12997] hub 2-0:1.0: USB hub found [ 397.635879][T12997] hub 2-0:1.0: 6 ports detected [ 397.814320][ T833] usb 2-1: new high-speed USB device number 126 using ehci-pci [ 397.874286][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 398.008581][ T833] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 398.010896][ T833] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 398.012920][ T833] usb 2-1: Product: QEMU USB Tablet [ 398.014957][ T833] usb 2-1: Manufacturer: QEMU [ 398.017012][ T833] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 398.036163][ T833] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0080/input/input186 [ 398.105490][ T833] hid-generic 0003:0627:0001.0080: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 398.914338][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 399.123485][T13014] fuse: Unknown parameter 'fd0x0000000000000006' [ 399.130374][T13014] Process accounting resumed [ 399.256606][T13023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1753'. [ 399.327164][T13028] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 399.455619][T13034] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 399.455619][T13034] program syz.3.1751 not setting count and/or reply_len properly [ 399.914393][T13020] netlink: 'syz.1.1752': attribute type 4 has an invalid length. [ 399.950574][T13038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.954265][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 400.098780][T13042] syz.2.1759: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 400.103776][T13042] CPU: 0 UID: 0 PID: 13042 Comm: syz.2.1759 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 400.106596][T13042] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 400.109330][T13042] Call Trace: [ 400.110195][T13042] [ 400.110955][T13042] dump_stack_lvl+0x16c/0x1f0 [ 400.112183][T13042] warn_alloc+0x24d/0x3a0 [ 400.113321][T13042] ? __pfx_warn_alloc+0x10/0x10 [ 400.114587][T13042] ? __get_vm_area_node+0x1b0/0x2f0 [ 400.115876][T13042] ? __get_vm_area_node+0x1dc/0x2f0 [ 400.117165][T13042] __vmalloc_node_range_noprof+0x1105/0x1530 [ 400.118671][T13042] ? hash_net_create+0x3ea/0x1250 [ 400.119944][T13042] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 400.121536][T13042] ? rcu_is_watching+0x12/0xc0 [ 400.122746][T13042] ? trace_kmalloc+0x2d/0xd0 [ 400.123907][T13042] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 400.125359][T13042] ? hash_net_create+0x3ea/0x1250 [ 400.126631][T13042] __kvmalloc_node_noprof+0x14f/0x1a0 [ 400.129127][T13042] ? hash_net_create+0x3ea/0x1250 [ 400.130396][T13042] hash_net_create+0x3ea/0x1250 [ 400.131596][T13042] ? __nla_parse+0x16/0x60 [ 400.132743][T13042] ? __pfx_hash_net_create+0x10/0x10 [ 400.134043][T13042] ip_set_create+0x62a/0x1400 [ 400.135382][T13042] ? rcu_is_watching+0x12/0xc0 [ 400.136884][T13042] ? __pfx_ip_set_create+0x10/0x10 [ 400.138168][T13042] nfnetlink_rcv_msg+0x9c3/0x11e0 [ 400.139404][T13042] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 400.140732][T13042] ? hlock_class+0x4e/0x130 [ 400.141883][T13042] ? mark_lock+0xb5/0xc60 [ 400.142939][T13042] ? hlock_class+0x4e/0x130 [ 400.144023][T13042] ? __lock_acquire+0xcc5/0x3c40 [ 400.145336][T13042] netlink_rcv_skb+0x165/0x410 [ 400.146683][T13042] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 400.147988][T13042] ? __pfx___lock_acquire+0x10/0x10 [ 400.149358][T13042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.150780][T13042] ? __pfx_aa_get_newest_label+0x10/0x10 [ 400.152229][T13042] ? bpf_lsm_capable+0x9/0x10 [ 400.153455][T13042] ? security_capable+0x7e/0x260 [ 400.154760][T13042] ? ns_capable+0xd7/0x110 [ 400.156054][T13042] nfnetlink_rcv+0x1b4/0x430 [ 400.157257][T13042] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 400.158556][T13042] ? netlink_deliver_tap+0x1ae/0xca0 [ 400.159860][T13042] netlink_unicast+0x53c/0x7f0 [ 400.161212][T13042] ? __pfx_netlink_unicast+0x10/0x10 [ 400.162522][T13042] ? __phys_addr_symbol+0x30/0x80 [ 400.163804][T13042] ? __check_object_size+0x488/0x710 [ 400.165196][T13042] netlink_sendmsg+0x8b8/0xd70 [ 400.166646][T13042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.167981][T13042] ____sys_sendmsg+0x9ae/0xb40 [ 400.169188][T13042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.170502][T13042] ? get_compat_msghdr+0x11b/0x170 [ 400.171790][T13042] ___sys_sendmsg+0x135/0x1e0 [ 400.172976][T13042] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.174261][T13042] ? __pfx_lock_release+0x10/0x10 [ 400.175659][T13042] ? trace_lock_acquire+0x146/0x1e0 [ 400.177045][T13042] ? __fget_files+0x206/0x3a0 [ 400.178283][T13042] __sys_sendmsg+0x16e/0x220 [ 400.179491][T13042] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.180812][T13042] ? rcu_is_watching+0x12/0xc0 [ 400.182065][T13042] __do_fast_syscall_32+0x73/0x120 [ 400.183389][T13042] do_fast_syscall_32+0x32/0x80 [ 400.184643][T13042] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 400.186293][T13042] RIP: 0023:0xf743e579 [ 400.187336][T13042] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 400.191960][T13042] RSP: 002b:00000000f512657c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 400.193994][T13042] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000040 [ 400.195920][T13042] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.198012][T13042] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 400.199971][T13042] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 400.201930][T13042] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 400.203876][T13042] [ 400.205452][T13042] Mem-Info: [ 400.206298][T13042] active_anon:13968 inactive_anon:263 isolated_anon:0 [ 400.206298][T13042] active_file:22860 inactive_file:12699 isolated_file:0 [ 400.206298][T13042] unevictable:1768 dirty:213 writeback:0 [ 400.206298][T13042] slab_reclaimable:7637 slab_unreclaimable:57148 [ 400.206298][T13042] mapped:30582 shmem:8203 pagetables:780 [ 400.206298][T13042] sec_pagetables:309 bounce:0 [ 400.206298][T13042] kernel_misc_reclaimable:0 [ 400.206298][T13042] free:46722 free_pcp:8441 free_cma:0 [ 400.218564][T13042] Node 0 active_anon:4012kB inactive_anon:1052kB active_file:816kB inactive_file:6872kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:5320kB dirty:0kB writeback:0kB shmem:5000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9580kB pagetables:612kB sec_pagetables:1156kB all_unreclaimable? yes [ 400.227635][T13042] Node 1 active_anon:51860kB inactive_anon:0kB active_file:90624kB inactive_file:43924kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:120808kB dirty:852kB writeback:0kB shmem:27812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:2424kB pagetables:2608kB sec_pagetables:80kB all_unreclaimable? no [ 400.236044][T13042] Node 0 DMA free:2892kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB active_anon:128kB inactive_anon:112kB active_file:104kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:816kB local_pcp:168kB free_cma:0kB [ 400.243515][T13042] lowmem_reserve[]: 0 270 0 0 0 [ 400.244858][T13042] Node 0 DMA32 free:17936kB boost:0kB min:13788kB low:17232kB high:20676kB reserved_highatomic:4096KB active_anon:3884kB inactive_anon:940kB active_file:712kB inactive_file:6844kB unevictable:3536kB writepending:0kB present:1032196kB managed:304016kB mlocked:0kB bounce:0kB free_pcp:1768kB local_pcp:768kB free_cma:0kB [ 400.252139][T13042] lowmem_reserve[]: 0 0 0 0 0 [ 400.253414][T13042] Node 1 DMA32 free:160660kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:0KB active_anon:40460kB inactive_anon:0kB active_file:90624kB inactive_file:43924kB unevictable:3536kB writepending:852kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:43420kB local_pcp:15464kB free_cma:0kB [ 400.261295][T13042] lowmem_reserve[]: 0 0 0 0 0 [ 400.274362][T13042] Node 0 DMA: 5*4kB (M) 43*8kB (UM) 18*16kB (UM) 52*32kB (UM) 9*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2892kB [ 400.279308][T13042] Node 0 DMA32: 264*4kB (UEH) 58*8kB (UEH) 16*16kB (UMEH) 31*32kB (UMEH) 21*64kB (UMH) 22*128kB (UME) 9*256kB (UME) 7*512kB (UM) 1*1024kB (U) 2*2048kB (M) 0*4096kB = 17936kB [ 400.284537][T13042] Node 1 DMA32: 1*4kB (E) 8*8kB (ME) 15*16kB (UE) 3*32kB (E) 6*64kB (UME) 37*128kB (UME) 40*256kB (UE) 21*512kB (UE) 35*1024kB (UME) 24*2048kB (UM) 12*4096kB (UM) = 160660kB [ 400.289481][T13042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.291772][T13042] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 400.294018][T13042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 400.297492][T13042] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 400.300870][T13042] 43262 total pagecache pages [ 400.302059][T13042] 0 pages in swap cache [ 400.303124][T13042] Free swap = 124052kB [ 400.305586][T13042] Total swap = 124996kB [ 400.306994][T13042] 524155 pages RAM [ 400.307968][T13042] 0 pages HighMem/MovableOnly [ 400.309164][T13042] 207248 pages reserved [ 400.310162][T13042] 0 pages cma reserved [ 400.536313][T13059] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 400.536313][T13059] program syz.3.1761 not setting count and/or reply_len properly [ 400.994206][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 401.298184][T13067] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 401.468712][T13075] siw: device registration error -23 [ 401.660423][T13087] usb 2-1: USB disconnect, device number 126 [ 401.859446][T13089] hub 2-0:1.0: USB hub found [ 401.863902][T13089] hub 2-0:1.0: 6 ports detected [ 402.034219][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.034272][ T35] usb 2-1: new high-speed USB device number 127 using ehci-pci [ 402.219488][ T35] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 402.222211][ T35] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 402.224689][ T35] usb 2-1: Product: QEMU USB Tablet [ 402.226268][ T35] usb 2-1: Manufacturer: QEMU [ 402.227638][ T35] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 402.243974][ T35] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0081/input/input189 [ 402.305563][ T35] hid-generic 0003:0627:0001.0081: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 402.449027][T13111] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 402.581573][T13116] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 402.581573][T13116] program syz.3.1774 not setting count and/or reply_len properly [ 403.074630][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 403.297400][T13119] FAT-fs (sr0): bogus number of reserved sectors [ 403.299588][T13119] FAT-fs (sr0): Can't find a valid FAT filesystem [ 403.337419][T13119] netlink: 'syz.0.1786': attribute type 10 has an invalid length. [ 403.538486][T13132] siw: device registration error -23 [ 404.114289][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 404.196320][T13138] syz.2.1782: attempt to access beyond end of device [ 404.196320][T13138] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 404.200366][T13138] efs: cannot read volume header [ 404.915442][T13159] siw: device registration error -23 [ 405.164241][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 405.282567][T13164] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 405.282567][T13164] program syz.3.1787 not setting count and/or reply_len properly [ 405.612142][T13176] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 405.620100][T13176] cramfs: wrong magic [ 405.695303][T13181] netlink: 'syz.1.1796': attribute type 1 has an invalid length. [ 405.713104][T13181] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1796'. [ 405.880276][T13186] netlink: 'syz.1.1797': attribute type 4 has an invalid length. [ 405.883346][T13186] netlink: 'syz.1.1797': attribute type 4 has an invalid length. [ 406.194209][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 407.234261][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 407.554260][ T5963] Bluetooth: hci4: command 0x1003 tx timeout [ 407.554311][ T5969] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 407.930036][T13232] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 407.930036][T13232] program syz.1.1808 not setting count and/or reply_len properly [ 407.966416][T13234] FAT-fs (sr0): bogus number of reserved sectors [ 407.968313][T13234] FAT-fs (sr0): Can't find a valid FAT filesystem [ 407.995615][T13234] netlink: 'syz.2.1811': attribute type 10 has an invalid length. [ 408.274214][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 408.648718][T13235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.736873][T13247] siw: device registration error -23 [ 409.324207][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 409.589011][T13265] CUSE: info not properly terminated [ 409.846309][T13273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1822'. [ 410.354289][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 410.754916][T13293] usb 2-1: USB disconnect, device number 127 [ 410.763544][T13300] siw: device registration error -23 [ 410.780599][T13293] hub 2-0:1.0: USB hub found [ 410.782048][T13293] hub 2-0:1.0: 6 ports detected [ 410.964498][ T30] usb 2-1: new high-speed USB device number 2 using ehci-pci [ 411.142947][ T30] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 411.145701][ T30] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 411.148471][ T30] usb 2-1: Product: QEMU USB Tablet [ 411.150014][ T30] usb 2-1: Manufacturer: QEMU [ 411.151464][ T30] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 411.170975][ T30] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0082/input/input193 [ 411.235855][ T30] hid-generic 0003:0627:0001.0082: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 411.394278][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 411.510513][T13309] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1831'. [ 411.512941][T13309] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1831'. [ 412.031392][T13315] FAT-fs (sr0): bogus number of reserved sectors [ 412.033504][T13315] FAT-fs (sr0): Can't find a valid FAT filesystem [ 412.063113][T13315] netlink: 'syz.3.1833': attribute type 10 has an invalid length. [ 412.419560][T13333] usb 2-1: USB disconnect, device number 2 [ 412.434208][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 412.449500][T13333] hub 2-0:1.0: USB hub found [ 412.450858][T13333] hub 2-0:1.0: 6 ports detected [ 412.560156][T13337] siw: device registration error -23 [ 412.604258][ T25] usb 2-1: new high-speed USB device number 3 using ehci-pci [ 412.788912][ T25] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 412.792303][ T25] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 412.794894][ T25] usb 2-1: Product: QEMU USB Tablet [ 412.796395][ T25] usb 2-1: Manufacturer: QEMU [ 412.797691][ T25] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 412.811177][ T25] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0083/input/input194 [ 412.875626][ T25] hid-generic 0003:0627:0001.0083: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 413.484233][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 413.956386][T13363] IPv6: addrconf: prefix option has invalid lifetime [ 414.060561][T13372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.065248][T13373] FAT-fs (sr0): bogus number of reserved sectors [ 414.067081][T13373] FAT-fs (sr0): Can't find a valid FAT filesystem [ 414.077683][T13373] netlink: 'syz.1.1851': attribute type 10 has an invalid length. [ 414.080097][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 414.230902][ T39] audit: type=1326 audit(1732729626.997:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.1.1855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7fc00000 [ 414.279826][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 414.514252][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 414.978649][ T39] audit: type=1326 audit(1732729627.747:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13382 comm="syz.1.1855" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x7fc00000 [ 415.564302][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 415.874867][T13412] FAT-fs (sr0): bogus number of reserved sectors [ 415.876581][T13412] FAT-fs (sr0): Can't find a valid FAT filesystem [ 415.884809][T13412] netlink: 'syz.3.1862': attribute type 10 has an invalid length. [ 415.887940][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1862'. [ 416.090921][T13429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1867'. [ 416.244791][T13434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.594211][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 416.916585][T13445] FAT-fs (sr0): bogus number of reserved sectors [ 416.918891][T13445] FAT-fs (sr0): Can't find a valid FAT filesystem [ 416.937576][T13445] netlink: 'syz.1.1873': attribute type 10 has an invalid length. [ 416.941347][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1873'. [ 417.114781][T13455] vivid-001: disconnect [ 417.117243][T13454] vivid-001: reconnect [ 417.292196][T13460] hsr0: entered promiscuous mode [ 417.354344][ T35] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 417.535668][ T35] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.538650][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 417.541497][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.544412][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.548014][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.550416][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.553824][ T35] usb 6-1: config 0 descriptor?? [ 417.556703][T13453] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 417.634282][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 417.675096][T13467] bond0: (slave syz_tun): Releasing backup interface [ 417.679166][T13467] batman_adv: batadv0: Removing interface: team0 [ 417.684429][T13467] bond0: (slave bond_slave_0): Releasing backup interface [ 417.687977][T13467] bond0: (slave bond_slave_1): Releasing backup interface [ 417.704336][T13467] team0: Port device team_slave_0 removed [ 417.709847][T13467] team0: Port device team_slave_1 removed [ 417.711571][T13467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.714056][T13467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.716954][T13467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.818432][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1883'. [ 417.971168][ T35] plantronics 0003:047F:FFFF.0084: unknown main item tag 0xd [ 417.973151][ T35] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 417.975750][ T35] plantronics 0003:047F:FFFF.0084: No inputs registered, leaving [ 417.980194][ T35] plantronics 0003:047F:FFFF.0084: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 418.024214][ T9] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 418.164291][ T9] usb 7-1: device descriptor read/64, error -71 [ 418.424282][ T9] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 418.614576][T13482] vivid-000: disconnect [ 418.618017][T13481] vivid-000: reconnect [ 418.674306][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 418.814372][ T9] usb 7-1: device descriptor read/64, error -71 [ 418.861462][T13484] usb 2-1: USB disconnect, device number 3 [ 418.938289][ T9] usb usb7-port1: attempt power cycle [ 418.952295][T13489] hub 2-0:1.0: USB hub found [ 418.964429][T13489] hub 2-0:1.0: 6 ports detected [ 419.065301][T13452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.072288][ T5964] usb 6-1: USB disconnect, device number 13 [ 419.144312][ T6005] usb 2-1: new high-speed USB device number 4 using ehci-pci [ 419.328579][ T6005] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 419.331676][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 419.334808][ T6005] usb 2-1: Product: QEMU USB Tablet [ 419.336717][ T6005] usb 2-1: Manufacturer: QEMU [ 419.338866][ T6005] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 419.356759][ T6005] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0085/input/input195 [ 419.394394][ T9] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 419.415546][ T9] usb 7-1: device descriptor read/8, error -71 [ 419.416159][ T6005] hid-generic 0003:0627:0001.0085: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 419.496131][T13503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.656106][ T9] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 419.674693][ T9] usb 7-1: device descriptor read/8, error -71 [ 419.714263][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 419.784758][ T9] usb usb7-port1: unable to enumerate USB device [ 420.111437][T13517] usb 2-1: USB disconnect, device number 4 [ 420.160082][T13517] hub 2-0:1.0: USB hub found [ 420.161886][T13517] hub 2-0:1.0: 6 ports detected [ 420.334289][ T9] usb 2-1: new high-speed USB device number 5 using ehci-pci [ 420.526577][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 420.529430][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 420.531806][ T9] usb 2-1: Product: QEMU USB Tablet [ 420.533313][ T9] usb 2-1: Manufacturer: QEMU [ 420.534839][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 420.556478][T13522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1895'. [ 420.558963][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0086/input/input196 [ 420.566026][ T9] hid-generic 0003:0627:0001.0086: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 420.754337][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.025882][T13543] usb 2-1: USB disconnect, device number 5 [ 421.078917][T13543] hub 2-0:1.0: USB hub found [ 421.080485][T13543] hub 2-0:1.0: 6 ports detected [ 421.264607][ T9] usb 2-1: new high-speed USB device number 6 using ehci-pci [ 421.448669][ T9] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 421.451119][ T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 421.453477][ T9] usb 2-1: Product: QEMU USB Tablet [ 421.455356][ T9] usb 2-1: Manufacturer: QEMU [ 421.456713][ T9] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 421.475452][ T9] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0087/input/input197 [ 421.537617][ T9] hid-generic 0003:0627:0001.0087: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 421.804241][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 421.940835][T13555] trusted_key: syz.1.1904 sent an empty control message without MSG_MORE. [ 422.132912][T13569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.711082][T13582] usb 2-1: USB disconnect, device number 6 [ 422.808092][T13582] hub 2-0:1.0: USB hub found [ 422.814856][T13582] hub 2-0:1.0: 6 ports detected [ 422.834280][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 423.024609][ T6005] usb 2-1: new high-speed USB device number 7 using ehci-pci [ 423.208881][ T6005] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 423.211197][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 423.213184][ T6005] usb 2-1: Product: QEMU USB Tablet [ 423.215365][ T6005] usb 2-1: Manufacturer: QEMU [ 423.216715][ T6005] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 423.244099][ T6005] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0088/input/input198 [ 423.305960][ T6005] hid-generic 0003:0627:0001.0088: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 423.874351][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 424.079717][T13601] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1915'. [ 424.271174][T13609] usb 2-1: USB disconnect, device number 7 [ 424.327415][T13609] hub 2-0:1.0: USB hub found [ 424.334422][T13609] hub 2-0:1.0: 6 ports detected [ 424.406126][ T39] audit: type=1326 audit(1732729637.167:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.439140][ T39] audit: type=1326 audit(1732729637.177:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.446293][ T39] audit: type=1326 audit(1732729637.177:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=42 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.452038][ T39] audit: type=1326 audit(1732729637.177:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.458012][ T39] audit: type=1326 audit(1732729637.177:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.463367][ T39] audit: type=1326 audit(1732729637.177:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.470283][ T39] audit: type=1326 audit(1732729637.177:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.475674][ T39] audit: type=1326 audit(1732729637.177:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.481085][ T39] audit: type=1326 audit(1732729637.177:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.488589][ T39] audit: type=1326 audit(1732729637.177:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13618 comm="syz.2.1922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x7ffc0000 [ 424.518054][ T6005] usb 2-1: new high-speed USB device number 8 using ehci-pci [ 424.567174][T13630] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 424.567174][T13630] program syz.1.1920 not setting count and/or reply_len properly [ 424.717720][ T6005] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 424.723125][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 424.730319][ T6005] usb 2-1: Product: QEMU USB Tablet [ 424.734976][ T6005] usb 2-1: Manufacturer: QEMU [ 424.738659][ T6005] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 424.766851][ T6005] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb2/2-1/2-1:1.0/0003:0627:0001.0089/input/input199 [ 424.839080][ T6005] hid-generic 0003:0627:0001.0089: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 424.924258][ C2] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 425.247040][T13626] ================================================================== [ 425.249250][T13626] BUG: KASAN: vmalloc-out-of-bounds in push_insn_history+0x615/0x690 [ 425.251282][T13626] Write of size 4 at addr ffffc9000305f010 by task syz.2.1922/13626 [ 425.254285][T13626] [ 425.255938][T13626] CPU: 2 UID: 0 PID: 13626 Comm: syz.2.1922 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 425.259770][T13626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 425.263474][T13626] Call Trace: [ 425.264589][T13626] [ 425.265373][T13626] dump_stack_lvl+0x116/0x1f0 [ 425.266570][T13626] print_report+0xc3/0x620 [ 425.267736][T13626] ? __virt_addr_valid+0x5e/0x590 [ 425.269044][T13626] kasan_report+0xd9/0x110 [ 425.270203][T13626] ? push_insn_history+0x615/0x690 [ 425.271482][T13626] ? push_insn_history+0x615/0x690 [ 425.273074][T13626] push_insn_history+0x615/0x690 [ 425.274771][T13626] do_check_common+0xb78/0xd540 [ 425.276314][T13626] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.277659][T13626] ? __pfx_do_check_common+0x10/0x10 [ 425.279033][T13626] ? kvfree+0x47/0x50 [ 425.280054][T13626] ? check_cfg+0x403/0x840 [ 425.281187][T13626] bpf_check+0x77c2/0xc9b0 [ 425.282379][T13626] ? hlock_class+0x4e/0x130 [ 425.283936][T13626] ? __pfx_bpf_check+0x10/0x10 [ 425.285599][T13626] ? find_held_lock+0x2d/0x110 [ 425.287254][T13626] ? bpf_prog_load+0xd45/0x2670 [ 425.288927][T13626] ? __pfx_lock_release+0x10/0x10 [ 425.290606][T13626] ? trace_lock_acquire+0x146/0x1e0 [ 425.292416][T13626] ? bpf_prog_load+0xd45/0x2670 [ 425.294060][T13626] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.295828][T13626] ? read_tsc+0x9/0x20 [ 425.297247][T13626] ? ktime_get_with_offset+0x20f/0x3a0 [ 425.299093][T13626] ? bpf_obj_name_cpy+0x156/0x1b0 [ 425.300423][T13626] bpf_prog_load+0xe3f/0x2670 [ 425.301852][T13626] ? __pfx_bpf_prog_load+0x10/0x10 [ 425.303581][T13626] ? find_held_lock+0x2d/0x110 [ 425.305238][T13626] ? __might_fault+0x13b/0x190 [ 425.306832][T13626] ? __might_fault+0xe3/0x190 [ 425.308474][T13626] __sys_bpf+0x5677/0x57a0 [ 425.309999][T13626] ? __pfx___sys_bpf+0x10/0x10 [ 425.311617][T13626] ? do_futex+0x123/0x350 [ 425.312748][T13626] ? __pfx_do_futex+0x10/0x10 [ 425.313989][T13626] ? xfd_validate_state+0x5d/0x180 [ 425.315367][T13626] ? rcu_is_watching+0x12/0xc0 [ 425.316634][T13626] __ia32_sys_bpf+0x76/0xe0 [ 425.318022][T13626] __do_fast_syscall_32+0x73/0x120 [ 425.319672][T13626] do_fast_syscall_32+0x32/0x80 [ 425.320994][T13626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.322661][T13626] RIP: 0023:0xf743e579 [ 425.323739][T13626] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 425.328649][T13626] RSP: 002b:00000000f510557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 425.331264][T13626] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0 [ 425.333278][T13626] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.335547][T13626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.337585][T13626] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 425.339541][T13626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.341478][T13626] [ 425.342291][T13626] [ 425.343041][T13626] The buggy address belongs to the virtual mapping at [ 425.343041][T13626] [ffffc9000303f000, ffffc90003061000) created by: [ 425.343041][T13626] kvrealloc_noprof+0xfc/0x150 [ 425.348683][T13626] [ 425.349503][T13626] The buggy address belongs to the physical page: [ 425.351506][T13626] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88806f7da000 pfn:0x6f7da [ 425.354368][T13626] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 425.356786][T13626] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 425.358973][T13626] raw: ffff88806f7da000 0000000000000000 00000001ffffffff 0000000000000000 [ 425.361641][T13626] page dumped because: kasan: bad access detected [ 425.363882][T13626] page_owner tracks the page as allocated [ 425.365842][T13626] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 13626, tgid 13618 (syz.2.1922), ts 425246926918, free_ts 424935648740 [ 425.371610][T13626] post_alloc_hook+0x2d1/0x350 [ 425.373253][T13626] get_page_from_freelist+0xfce/0x2f80 [ 425.374949][T13626] __alloc_pages_noprof+0x6a6/0x25a0 [ 425.376385][T13626] alloc_pages_mpol_noprof+0x2c9/0x610 [ 425.377860][T13626] __vmalloc_node_range_noprof+0x724/0x1530 [ 425.379415][T13626] __kvmalloc_node_noprof+0x14f/0x1a0 [ 425.381178][T13626] kvrealloc_noprof+0xfc/0x150 [ 425.382646][T13626] push_insn_history+0x2ac/0x690 [ 425.384249][T13626] do_check_common+0xb78/0xd540 [ 425.385857][T13626] bpf_check+0x77c2/0xc9b0 [ 425.387384][T13626] bpf_prog_load+0xe3f/0x2670 [ 425.389033][T13626] __sys_bpf+0x5677/0x57a0 [ 425.390625][T13626] __ia32_sys_bpf+0x76/0xe0 [ 425.392241][T13626] __do_fast_syscall_32+0x73/0x120 [ 425.394023][T13626] do_fast_syscall_32+0x32/0x80 [ 425.395625][T13626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.397325][T13626] page last free pid 11156 tgid 11156 stack trace: [ 425.399572][T13626] free_unref_page+0x661/0x1080 [ 425.401284][T13626] rcu_core+0x79d/0x14d0 [ 425.402695][T13626] handle_softirqs+0x213/0x8f0 [ 425.404325][T13626] __irq_exit_rcu+0x109/0x170 [ 425.405912][T13626] irq_exit_rcu+0x9/0x30 [ 425.407430][T13626] sysvec_call_function+0xa4/0xc0 [ 425.409213][T13626] asm_sysvec_call_function+0x1a/0x20 [ 425.411126][T13626] [ 425.412027][T13626] Memory state around the buggy address: [ 425.414074][T13626] ffffc9000305ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 425.416860][T13626] ffffc9000305ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 425.419698][T13626] >ffffc9000305f000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 425.422362][T13626] ^ [ 425.423827][T13626] ffffc9000305f080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 425.426413][T13626] ffffc9000305f100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 425.428518][T13626] ================================================================== [ 425.430926][T13626] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 425.432999][T13626] CPU: 2 UID: 0 PID: 13626 Comm: syz.2.1922 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 425.436061][T13626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 425.439672][T13626] Call Trace: [ 425.440840][T13626] [ 425.441954][T13626] dump_stack_lvl+0x3d/0x1f0 [ 425.443748][T13626] panic+0x71d/0x800 [ 425.445406][T13626] ? __pfx_panic+0x10/0x10 [ 425.446961][T13626] ? preempt_schedule_thunk+0x1a/0x30 [ 425.448822][T13626] ? preempt_schedule_common+0x44/0xc0 [ 425.450726][T13626] check_panic_on_warn+0xab/0xb0 [ 425.452465][T13626] end_report+0x117/0x180 [ 425.454144][T13626] kasan_report+0xe9/0x110 [ 425.455894][T13626] ? push_insn_history+0x615/0x690 [ 425.457961][T13626] ? push_insn_history+0x615/0x690 [ 425.459721][T13626] push_insn_history+0x615/0x690 [ 425.461475][T13626] do_check_common+0xb78/0xd540 [ 425.463169][T13626] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.465143][T13626] ? __pfx_do_check_common+0x10/0x10 [ 425.467290][T13626] ? kvfree+0x47/0x50 [ 425.468837][T13626] ? check_cfg+0x403/0x840 [ 425.470382][T13626] bpf_check+0x77c2/0xc9b0 [ 425.471925][T13626] ? hlock_class+0x4e/0x130 [ 425.473596][T13626] ? __pfx_bpf_check+0x10/0x10 [ 425.475302][T13626] ? find_held_lock+0x2d/0x110 [ 425.477031][T13626] ? bpf_prog_load+0xd45/0x2670 [ 425.478364][T13626] ? __pfx_lock_release+0x10/0x10 [ 425.479697][T13626] ? trace_lock_acquire+0x146/0x1e0 [ 425.481094][T13626] ? bpf_prog_load+0xd45/0x2670 [ 425.482535][T13626] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.484081][T13626] ? read_tsc+0x9/0x20 [ 425.485163][T13626] ? ktime_get_with_offset+0x20f/0x3a0 [ 425.486749][T13626] ? bpf_obj_name_cpy+0x156/0x1b0 [ 425.488107][T13626] bpf_prog_load+0xe3f/0x2670 [ 425.489436][T13626] ? __pfx_bpf_prog_load+0x10/0x10 [ 425.491209][T13626] ? find_held_lock+0x2d/0x110 [ 425.492882][T13626] ? __might_fault+0x13b/0x190 [ 425.494571][T13626] ? __might_fault+0xe3/0x190 [ 425.496230][T13626] __sys_bpf+0x5677/0x57a0 [ 425.497806][T13626] ? __pfx___sys_bpf+0x10/0x10 [ 425.499461][T13626] ? do_futex+0x123/0x350 [ 425.500945][T13626] ? __pfx_do_futex+0x10/0x10 [ 425.502595][T13626] ? xfd_validate_state+0x5d/0x180 [ 425.504454][T13626] ? rcu_is_watching+0x12/0xc0 [ 425.506189][T13626] __ia32_sys_bpf+0x76/0xe0 [ 425.507819][T13626] __do_fast_syscall_32+0x73/0x120 [ 425.509646][T13626] do_fast_syscall_32+0x32/0x80 [ 425.511026][T13626] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 425.512752][T13626] RIP: 0023:0xf743e579 [ 425.513874][T13626] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 425.518999][T13626] RSP: 002b:00000000f510557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 425.521416][T13626] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0 [ 425.523599][T13626] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.525832][T13626] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 425.528524][T13626] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 425.531245][T13626] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 425.533922][T13626] [ 425.535643][T13626] Kernel Offset: disabled [ 425.537118][T13626] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:47:18 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffff88802b437f68 RCX=ffffffff816af4e9 RDX=1ffff11005686fed RSI=ffffffff8bd164e0 RDI=ffffffff8da3bba0 RBP=0000000000000000 RSP=ffffc9000e407618 R8 =0000000000000000 R9 =fffffbfff207cb52 R10=ffffffff903e5a97 R11=0000000000000001 R12=ffff888049ec2a58 R13=ffff88807edfef00 R14=0000000000000246 R15=ffffc9000e407898 RIP=ffffffff8173c83c RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000fff74028 CR3=00000000596a2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000020c1857 RBX=0000000000000001 RCX=ffffffff8b207c99 RDX=0000000000000000 RSI=ffffffff8b6cd780 RDI=ffffffff8bd16560 RBP=ffffed10039df910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cefc880 R14=ffffffff903e5a90 R15=0000000000000000 RIP=ffffffff8b20907f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020029000 CR3=0000000053054000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8509bf05 RDI=ffffffff9a8a1240 RBP=ffffffff9a8a1200 RSP=ffffc90006f7eff8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303963666657 R12=0000000000000000 R13=000000000000005d R14=ffffffff8509bea0 R15=0000000000000000 RIP=ffffffff8509bf2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f50e3c00 CR3=00000000596a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000046 RBX=1ffff92000209f49 RCX=00000000bb919903 RDX=0000000000000001 RSI=ffffffff8b6cda80 RDI=ffffffff8bd16560 RBP=0000000000000200 RSP=ffffc9000104fa40 R8 =0000000000000000 R9 =fffffbfff2d7e398 R10=ffffffff96bf1cc7 R11=0000000000000002 R12=0000000000000000 R13=ffffffff8dfbaf40 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff816b0515 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020030000 CR3=00000000596a0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000