last executing test programs: 41.084083136s ago: executing program 1 (id=988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000300)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x3e) 41.013936086s ago: executing program 1 (id=989): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x5, 0x1, 0xa5, 0xf, 0xc, 0x4, 0x9b, 0xffffffffffff8001}, &(0x7f00000002c0)={0x7, 0xf, 0xaa1a, 0x603, 0x10000, 0x1, 0x4, 0x8}, &(0x7f0000000380)={0x7f, 0x0, 0x100, 0x1, 0x5, 0x3, 0x5, 0x7}, &(0x7f00000004c0)={r0, r1+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x9, 0x2]}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0640, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 40.066964187s ago: executing program 1 (id=994): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="04040a0000000000005467920034db81e7abdddc259aee6063e57dfee0dab3"], 0xd) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000240)={0x3a, 0x29, 0xe, 0x0, 0xb, 0x4f, 0x5, 0xe8}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 39.313983908s ago: executing program 1 (id=997): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() setpgid(r1, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800000003"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x20001438) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x1d, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') bind$alg(r3, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffff49}}, './file0\x00'}) fcntl$lock(r7, 0x24, &(0x7f00000000c0)={0x2, 0x3}) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r8, 0x8955, &(0x7f00000004c0)={{0x2, 0x0, @broadcast}, {0x0, @random="9f444415c302"}, 0xffffff5f, {0x2, 0x20, @broadcast}}) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x2d, 0x1}, 0x10}], 0x1}, 0x0) 39.22404648s ago: executing program 1 (id=998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="40000000090601020000000000000000020000000900020073797a3000000000050001000700000018000780060004404e2100000c00018028000140ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="bc0000000001010400000000000000000a0000004c0001800c00028005000100000000002c000180140003000000000000000000000000000000000014000400ff010000000000000000000000000001060003400000000006000340000300003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c000280050001000000000008000740000000001800068014000400a0010000000000000000000000000001"], 0xbc}}, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000940)={0x2d71e, 0x0, 0x0, 0x7ffe, 0x0, "00ff7f0a0a0080000000000000000000000010"}) unshare(0x62040200) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 38.885833232s ago: executing program 1 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0xeeee0000, 0xeeee0000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x6000, 0xc, 0x0, 0x7, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xe, 0xfe}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x20}, {0x100000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x1401b2, 0x0, 0xf801, 0x0, [0x0, 0x7, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[], 0x74}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000001600), 0x1}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000300)={r6, 0xfd9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f0000000000)={0xdddd1000, 0x4000}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 38.824495654s ago: executing program 32 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0xeeee0000, 0xeeee0000, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x2000, 0x6000, 0xc, 0x0, 0x7, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xe, 0xfe}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x20}, {0x100000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x1401b2, 0x0, 0xf801, 0x0, [0x0, 0x7, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[], 0x74}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000001600), 0x1}, 0x38) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000300)={r6, 0xfd9e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r10, 0xc040aed5, &(0x7f0000000000)={0xdddd1000, 0x4000}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 5.313420567s ago: executing program 2 (id=1202): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x5, 0x1, 0xa5, 0xf, 0xc, 0x4, 0x9b, 0xffffffffffff8001}, &(0x7f00000002c0)={0x7, 0xf, 0xaa1a, 0x603, 0x10000, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000004c0)={r0, r1+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x9, 0x2]}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0640, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 4.443205645s ago: executing program 3 (id=1216): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010100040000000000002b00000008000300def43109c7655ec1cab3d6078b240f9c41eab8e2d55d9d7ff5f0179d244071d2b50aa3ceecc04d8c0fbd864d0c9b58cb739af926a5d3436697099e14055ed48ff2bb40041b4b4fcb275d8041f46988ff142fb641cf0bb2d8a6e5891115b408c82849ffe382d18353e4757b2ede6d963bffa0b1d05121baeac4b901f6f6a0aaed7696ca503d1d21e021ab6f", @ANYRES32=r4, @ANYBLOB="04004600040051800a0034000101010101010000080026006c090000"], 0x38}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 4.440692377s ago: executing program 2 (id=1217): socket$l2tp(0x2, 0x2, 0x73) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550f, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@deltfilter={0x2c, 0x2d, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0xffe0}, {0xc, 0xc}, {0x4, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xb7, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c800}, 0x50) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800868c8cdad25143b03ec8d131fb0c981c000000000100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') openat$khugepaged_scan(0xffffff9c, &(0x7f0000000280), 0x1, 0x0) r8 = syz_open_procfs(r0, &(0x7f0000000180)='net/ip6_mr_vif\x00') read$FUSE(r8, 0x0, 0x0) 3.684293166s ago: executing program 0 (id=1218): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000240)={0x5, 0x1, 0xa5, 0xf, 0xc, 0x4, 0x9b, 0xffffffffffff8001}, &(0x7f00000002c0)={0x7, 0xf, 0xaa1a, 0x603, 0x10000, 0x1, 0x4, 0x8}, 0x0, &(0x7f00000004c0)={r0, r1+60000000}, &(0x7f0000000540)={&(0x7f0000000500)={[0x9, 0x2]}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0640, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 3.077831269s ago: executing program 2 (id=1219): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020300020c18000000000000000000000200080008000000fd00000000000000030006000000000002000000ac1e0001000000000000000002000100000000000000060300000020030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) 3.004171836s ago: executing program 2 (id=1220): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0xb, [{}, {}, {0x0, 0xfffffffc}, {0x4, 0x400000}, {}, {0x0, 0x1}, {}, {0x0, 0x7}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x105, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) write$binfmt_misc(r1, &(0x7f00000000c0), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) 2.773743389s ago: executing program 0 (id=1225): io_setup(0xffff3cf7, &(0x7f0000000080)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010a0000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket$inet6(0xa, 0x6, 0x0) io_submit(r0, 0x1, &(0x7f0000000e40)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 2.713874753s ago: executing program 0 (id=1226): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a400)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9a7e5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c64e2645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734b5ecaf5e82983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1b8abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fa421a39943513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b70fa8eae6fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff19427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c94c114d3c4c35eed4d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5d18f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}, {0x3}, {0x0, 0x9}}}}}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0xfffffffffffffff5, 0x0, {{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}}}, 0x0, &(0x7f0000000000)={0x130}}) 2.713423439s ago: executing program 0 (id=1227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000680)={0x20, &(0x7f0000000240)=[{0x5, 0x7f, 0xc, 0x400000}, {0xb00, 0x9, 0x82}]}) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r6, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0x1}, 0xffffff88) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000", 0x23) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) write$char_usb(r7, &(0x7f00000008c0)='-0', 0x2) r8 = syz_open_dev$vim2m(&(0x7f0000000380), 0x8000a, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r8, 0xc044560f, &(0x7f00000001c0)=@mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2063569a"}, 0x401}) 2.527671818s ago: executing program 3 (id=1229): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {0x0, 0x2}]}]}}, 0x0, 0x36, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x1f) 2.484128901s ago: executing program 3 (id=1230): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r3, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd, 0x0, 0xfffffffc}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x2, 0x20000000, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'ip6gre0\x00', 0x0}) 2.403941018s ago: executing program 4 (id=1232): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged_recursive\x00', 0x26e1, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000a00)=0x4, 0x4) bind$llc(r4, &(0x7f0000000040), 0x10) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="0c00000001000083"], 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000005c0)=""/99, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e23, 0x0, @private2, 0x7}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa010024000000f200119078000000000000001000004e20001090780200000000000000"], 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12, @void, @value}, 0x90) 2.313523664s ago: executing program 4 (id=1233): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioperm(0x7, 0x101, 0x3) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x2f9, 0x543, &(0x7f0000000040)="b90103600040f060009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 2.17272783s ago: executing program 4 (id=1234): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b705"], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r5, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) 1.66344508s ago: executing program 0 (id=1235): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) futex_waitv(&(0x7f0000000a00)=[{0xd, &(0x7f0000000000)=0xb, 0x82}, {0xffffffffffff90e9, &(0x7f0000000040)=0x8432, 0x2}, {0x8, &(0x7f0000000080)=0x4, 0x82}, {0x8, &(0x7f00000000c0)=0x6c, 0x82}, {0x2, &(0x7f0000000100)=0x7, 0x2}, {0x8, &(0x7f0000000140)=0x9, 0x2}, {0x6, &(0x7f0000000180)=0x6, 0x82}, {0x2000000000000, &(0x7f00000001c0)=0x34ee11e2, 0x2}, {0xffffffffffffffff, &(0x7f0000000200)=0x9, 0x82}, {0x8, &(0x7f0000000240)=0x8000, 0x886822a14facd68b}, {0x3, &(0x7f0000000280)=0x433, 0x82}, {0x100000000007, &(0x7f0000000300), 0x82}, {0x5, &(0x7f0000000340)=0x3, 0x82}, {0x5, &(0x7f0000000380)=0x5, 0x2}, {0x4, &(0x7f00000003c0)=0xe, 0x2}, {0x10001, &(0x7f0000000400)=0x3ff, 0x2}, {0x7fffffffffffffff, &(0x7f0000000440)=0x100, 0x82}, {0x6, &(0x7f0000000480)=0x4, 0x82}, {0xffffffffffffffff, &(0x7f00000004c0)=0x80, 0x82}, {0x0, &(0x7f0000000500)=0x2, 0x82}, {0x2, &(0x7f0000001700)=0x3, 0x82}, {0x80000001, &(0x7f0000000580)=0xe, 0x82}, {0x9757, &(0x7f00000016c0)=0x5, 0x2}, {0x951a, &(0x7f0000000600)=0x2, 0x2}, {0xc9, &(0x7f0000000640)=0x10, 0x2}, {0x1, &(0x7f0000000680)=0x3, 0x2}, {0xa56, &(0x7f00000006c0)=0x6, 0x2}, {0x5, &(0x7f0000000700)=0xaa84, 0x82}, {0x6, &(0x7f0000000740)=0x3, 0x82}, {0x4, &(0x7f0000000780)=0xff, 0x2}, {0xfffffffffffffffd, &(0x7f0000000800)=0x5, 0x82}, {0x309f, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0xffff, &(0x7f0000000900)=0x3, 0x2}, {0x8, &(0x7f0000001680)=0x5, 0x2}, {0x5, &(0x7f0000000980)=0x5, 0x3}, {0x4, &(0x7f00000009c0)=0x9, 0x82}], 0x25, 0x0, &(0x7f0000000dc0)={0x77359400}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x58}, 0x98) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(0xffffffffffffffff, 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0x11, &(0x7f00000015c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {{0x6, 0x0, 0xb}, {0x65, 0x0, 0xc}}, [@jmp={0x5, 0x0, 0x4, 0x7, 0x7, 0xffffffffffffffff, 0x8}, @jmp={0x5, 0x1, 0x1, 0x4, 0x0, 0x1, 0x4}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000013c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r8, 0x20, &(0x7f0000001540)={&(0x7f0000001400)=""/11, 0xb, 0x0, &(0x7f0000001440)=""/211, 0xd3}}, 0x10) getsockopt$bt_hci(r7, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) sendmmsg$inet6(r6, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, 0x0, 0x28}}], 0x1, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r10], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r0) r11 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000c80), 0x100, 0x0) ioctl$FBIOBLANK(r11, 0x4611, 0x1) 1.661919524s ago: executing program 2 (id=1236): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0xa}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) clock_gettime(0x0, &(0x7f0000000480)) pselect6(0x40, &(0x7f0000000240)={0x5, 0x1, 0xa5, 0xf, 0xc, 0x4, 0x9b, 0xffffffffffff8001}, &(0x7f00000002c0)={0x7, 0xf, 0xaa1a, 0x603, 0x10000, 0x1, 0x4, 0x8}, &(0x7f0000000380)={0x7f, 0x0, 0x100, 0x1, 0x5, 0x3, 0x5, 0x7}, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={[0x9, 0x2]}, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x2a0640, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000200)={r3, r3, r3}, &(0x7f0000000040)=""/217, 0xd9, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384-avx\x00'}}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.594159678s ago: executing program 0 (id=1237): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100040000000000002b00000008000300def43109c7655ec1cab3d6078b240f9c41eab8e2d55d9d7ff5f0179d244071d2b50aa3ceecc04d8c0fbd864d0c9b58cb739af926a5d3436697099e14055ed48ff2bb40041b4b4fcb275d8041f46988ff142fb641cf0bb2d8a6e5891115b408c82849ffe382d18353e4757b2ede6d963bffa0b1d05121baeac4b901f6f6a0aaed7696ca503d1d21e021ab6f", @ANYRES32=r4, @ANYBLOB="04004600040051800a0034000101010101010000080026006c090000"], 0x38}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 1.534089883s ago: executing program 3 (id=1238): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000a400)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, '\x00', 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}, {0x3}, {0x0, 0x9}}}}}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0xfffffffffffffff5, 0x0, {{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}}}, 0x0, &(0x7f0000000000)={0x130}}) 1.533670284s ago: executing program 3 (id=1239): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010100040000000000002b00000008000300def43109c7655ec1cab3d6078b240f9c41eab8e2d55d9d7ff5f0179d244071d2b50aa3ceecc04d8c0fbd864d0c9b58cb739af926a5d3436697099e14055ed48ff2bb40041b4b4fcb275d8041f46988ff142fb641cf0bb2d8a6e5891115b408c82849ffe382d18353e4757b2ede6d963bffa0b1d05121baeac4b901f6f6a0aaed7696ca503d1d21e021ab6f", @ANYRES32=r4, @ANYBLOB="04004600040051800a0034000101010101010000080026006c090000"], 0x38}}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 944.073884ms ago: executing program 4 (id=1240): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27031c12590214000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e7a08ffd35ed8371cffb2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x83}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe7059eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) 943.54625ms ago: executing program 4 (id=1241): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'sit0\x00', 0x0}) syz_emit_ethernet(0xe9, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0xb3, 0x3a, 0x0, @dev, @dev, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x7, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c25"}, {}, {0x0, 0x1, "d429145c793e823829b437"}, {0x0, 0xb, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r3 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r3, 0x1, 0x45d0, 0x1, 0x0, 0x1000000) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000de2100"/28], 0x48) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) io_submit(r9, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3e, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x58ef}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @generic={0x9, 0x5, 0x0, 0x8001, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @generic={0xf1, 0x0, 0x4, 0xfe5b, 0x7fffffff}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = memfd_create(&(0x7f00000005c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x2) write(r10, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r10, 0x0) dup3(r6, r10, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, r6, 0x0) r11 = userfaultfd(0x80001) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000100)) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000055000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="060001"], 0x38}, 0x1, 0xf00}, 0x0) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r11, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 764.308641ms ago: executing program 2 (id=1242): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000b705000008000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x4, 0x2, 0x13, 0x2}, {0x0, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0x1}, 0xffffff88) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x7f, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00230000000086dd60f2a40000492f00fe880000000000000000000000000001fe8000000000000000000000000000aa342088be0005000054812cbd3b00000800000086dd430588be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 713.856894ms ago: executing program 4 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x10, 0x32}, 0x2, @in=@multicast1}}, 0xe4) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{0xfffffffc}, {}, {0x0, 0x3}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) r4 = dup(r3) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000400101267000"/24]) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setregid(0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000380)=""/231, 0xe7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 0s ago: executing program 3 (id=1244): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x32315258, 0x0, 0xb, [{}, {}, {0x0, 0xfffffffc}, {0x4, 0x400000}, {}, {0x0, 0x1}, {}, {0x0, 0x7}]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x105, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0xc000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) write$binfmt_misc(r1, &(0x7f00000000c0), 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) kernel console output (not intermixed with test programs): 3.442283][ T8171] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 133.832724][ T8187] syz.1.600[8187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 134.099349][ T8194] syzkaller1: entered promiscuous mode [ 134.105562][ T8194] syzkaller1: entered allmulticast mode [ 134.108888][ T8194] FAULT_INJECTION: forcing a failure. [ 134.108888][ T8194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.113546][ T8194] CPU: 3 UID: 0 PID: 8194 Comm: syz.0.603 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 134.117179][ T8194] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 134.120523][ T8194] Call Trace: [ 134.121421][ T8194] [ 134.122253][ T8194] dump_stack_lvl+0x16c/0x1f0 [ 134.123558][ T8194] should_fail_ex+0x497/0x5b0 [ 134.124830][ T8194] _copy_from_iter+0x29b/0x1400 [ 134.126180][ T8194] ? _copy_from_iter+0x159/0x1400 [ 134.127500][ T8194] ? __pfx__copy_from_iter+0x10/0x10 [ 134.128921][ T8194] ? __pfx__copy_from_iter+0x10/0x10 [ 134.130359][ T8194] ? __virt_addr_valid+0x1a4/0x590 [ 134.131731][ T8194] copy_page_from_iter+0xa5/0x120 [ 134.133075][ T8194] skb_copy_datagram_from_iter+0x29b/0x710 [ 134.134709][ T8194] tun_get_user+0x197f/0x3e30 [ 134.136071][ T8194] ? __pfx_tun_get_user+0x10/0x10 [ 134.137372][ T8194] ? find_held_lock+0x2d/0x110 [ 134.138699][ T8194] ? __pfx_lock_release+0x10/0x10 [ 134.140079][ T8194] tun_chr_write_iter+0xdc/0x210 [ 134.141365][ T8194] vfs_write+0x5ae/0x1150 [ 134.142574][ T8194] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 134.144053][ T8194] ? __pfx_vfs_write+0x10/0x10 [ 134.145360][ T8194] ? __fget_files+0x40/0x3a0 [ 134.146643][ T8194] ksys_write+0x12b/0x250 [ 134.147741][ T8194] ? __pfx_ksys_write+0x10/0x10 [ 134.149065][ T8194] __do_fast_syscall_32+0x73/0x120 [ 134.150510][ T8194] do_fast_syscall_32+0x32/0x80 [ 134.151776][ T8194] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.153497][ T8194] RIP: 0023:0xf7f86579 [ 134.154633][ T8194] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 134.159647][ T8194] RSP: 002b:00000000f510657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 134.161896][ T8194] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 134.164001][ T8194] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 134.166159][ T8194] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.168269][ T8194] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 134.170498][ T8194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.172560][ T8194] [ 134.207254][ T8196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.604'. [ 134.265719][ T8202] syzkaller1: entered promiscuous mode [ 134.268486][ T8202] syzkaller1: entered allmulticast mode [ 134.405823][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.3.609'. [ 134.506265][ T8212] sp0: Synchronizing with TNC [ 134.522833][ T8212] trusted_key: encrypted_key: insufficient parameters specified [ 134.640706][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.642275][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.643821][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.645327][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.646892][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.648566][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.650057][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.651540][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.653017][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.654496][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.656021][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.657516][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.659085][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.660585][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.662074][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.663563][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.665061][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.667084][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.668921][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.670510][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.671989][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.673455][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.674947][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.676558][ T8215] befs: Unknown parameter 'b±Fs µÚì' [ 134.789307][ T8223] netlink: 44 bytes leftover after parsing attributes in process `syz.1.612'. [ 134.857920][ T8233] netlink: 'syz.1.616': attribute type 1 has an invalid length. [ 134.859997][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 135.394236][ T8236] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input40 [ 135.848990][ T8244] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input41 [ 136.035129][ T8247] bpf_get_probe_write_proto: 2 callbacks suppressed [ 136.035158][ T8247] syz.1.619[8247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.037219][ T8247] syz.1.619[8247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.040301][ T8247] syz.1.619[8247] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 136.450653][ T8251] FAULT_INJECTION: forcing a failure. [ 136.450653][ T8251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.457712][ T8251] CPU: 3 UID: 0 PID: 8251 Comm: syz.3.621 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 136.461445][ T8251] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 136.465165][ T8251] Call Trace: [ 136.466403][ T8251] [ 136.467468][ T8251] dump_stack_lvl+0x16c/0x1f0 [ 136.469189][ T8251] should_fail_ex+0x497/0x5b0 [ 136.471032][ T8251] _copy_from_user+0x2e/0xd0 [ 136.472797][ T8251] kstrtouint_from_user+0xd7/0x1c0 [ 136.474698][ T8251] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 136.476797][ T8251] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 136.478873][ T8251] proc_fail_nth_write+0x84/0x250 [ 136.480739][ T8251] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.482444][ T8251] ? ksys_write+0x12b/0x250 [ 136.483664][ T8251] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 136.485175][ T8251] vfs_write+0x24c/0x1150 [ 136.486329][ T8251] ? __fget_files+0x1fc/0x3a0 [ 136.487649][ T8251] ? __pfx___mutex_lock+0x10/0x10 [ 136.489004][ T8251] ? __pfx_vfs_write+0x10/0x10 [ 136.490278][ T8251] ? __fget_files+0x206/0x3a0 [ 136.491553][ T8251] ksys_write+0x12b/0x250 [ 136.492715][ T8251] ? __pfx_ksys_write+0x10/0x10 [ 136.494022][ T8251] __do_fast_syscall_32+0x73/0x120 [ 136.495420][ T8251] do_fast_syscall_32+0x32/0x80 [ 136.496725][ T8251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.498409][ T8251] RIP: 0023:0xf748e579 [ 136.499492][ T8251] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 136.504594][ T8251] RSP: 002b:00000000f51765b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 136.506976][ T8251] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5176620 [ 136.509069][ T8251] RDX: 0000000000000001 RSI: 00000000f7480ff4 RDI: 0000000000000000 [ 136.511373][ T8251] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 136.513928][ T8251] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 136.516725][ T8251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.519707][ T8251] [ 136.613045][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 136.617362][ T8257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.624'. [ 136.621148][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 136.673058][ T8263] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 136.677708][ T8263] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 136.809365][ T8270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.812685][ T8270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.817500][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.629'. [ 136.882565][ T8275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input42 [ 137.508285][ T8283] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.525576][ T8283] netlink: 'syz.3.633': attribute type 10 has an invalid length. [ 137.835156][ T8292] syzkaller1: entered promiscuous mode [ 137.837942][ T8292] syzkaller1: entered allmulticast mode [ 138.460594][ T8303] syz.0.638[8303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.460770][ T8303] syz.0.638[8303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.463836][ T8303] syz.0.638[8303] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 138.522533][ T8305] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.527922][ T8305] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.530205][ T8305] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.532338][ T8305] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.536192][ T8305] vxlan0: entered promiscuous mode [ 138.538947][ T8305] vxlan0: entered allmulticast mode [ 138.542566][ T8305] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.544820][ T8305] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.547169][ T8305] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.549391][ T8305] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.669185][ T8312] macvlan0: mtu less than device minimum [ 138.671904][ T8312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'. [ 139.063229][ T8317] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input43 [ 139.321713][ T8326] syzkaller1: entered promiscuous mode [ 139.323672][ T8326] syzkaller1: entered allmulticast mode [ 139.715054][ T8335] 9pnet_fd: Insufficient options for proto=fd [ 139.958396][ T8337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.972766][ T8337] netlink: 'syz.2.648': attribute type 10 has an invalid length. [ 140.235072][ T8344] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input44 [ 140.926213][ T8355] syz.0.652[8355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.928926][ T8355] syz.0.652[8355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.937274][ T8355] syz.0.652[8355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.420972][ T8362] macvlan0: mtu less than device minimum [ 141.709766][ T8371] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input45 [ 141.715665][ T8373] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 141.836569][ T8378] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 142.303445][ T8384] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input46 [ 142.920759][ T8396] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.923086][ T8396] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.925340][ T8396] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.927935][ T8396] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.930588][ T8396] vxlan0: entered promiscuous mode [ 142.932042][ T8396] vxlan0: entered allmulticast mode [ 142.935177][ T8396] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.937621][ T8396] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.939810][ T8396] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.942267][ T8396] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.170181][ T8404] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input47 [ 143.371112][ T8408] syz.3.665[8408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.371183][ T8408] syz.3.665[8408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.374462][ T8408] syz.3.665[8408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.027371][ T8411] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input48 [ 144.097611][ T8414] syzkaller1: entered promiscuous mode [ 144.099092][ T8414] syzkaller1: entered allmulticast mode [ 144.682716][ T8435] FAULT_INJECTION: forcing a failure. [ 144.682716][ T8435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.686168][ T8435] CPU: 3 UID: 0 PID: 8435 Comm: syz.2.677 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 144.689186][ T8435] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 144.692205][ T8435] Call Trace: [ 144.693354][ T8435] [ 144.694371][ T8435] dump_stack_lvl+0x16c/0x1f0 [ 144.695991][ T8435] should_fail_ex+0x497/0x5b0 [ 144.697732][ T8435] _copy_from_user+0x2e/0xd0 [ 144.699441][ T8435] smc_setsockopt+0x308/0xc00 [ 144.700770][ T8435] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 144.702306][ T8435] ? __pfx_smc_setsockopt+0x10/0x10 [ 144.703671][ T8435] ? __pfx_smc_setsockopt+0x10/0x10 [ 144.705025][ T8435] do_sock_setsockopt+0x222/0x480 [ 144.706330][ T8435] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 144.707751][ T8435] ? lock_acquire+0x2f/0xb0 [ 144.708938][ T8435] __sys_setsockopt+0x1a0/0x230 [ 144.710225][ T8435] __ia32_sys_setsockopt+0xbc/0x160 [ 144.711534][ T8435] ? lockdep_hardirqs_on+0x7c/0x110 [ 144.712863][ T8435] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 144.714557][ T8435] __do_fast_syscall_32+0x73/0x120 [ 144.715869][ T8435] do_fast_syscall_32+0x32/0x80 [ 144.717074][ T8435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 144.718629][ T8435] RIP: 0023:0xf748e579 [ 144.719652][ T8437] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input49 [ 144.719654][ T8435] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 144.719666][ T8435] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 000000000000016e [ 144.729260][ T8435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 144.731413][ T8435] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0000000000000278 [ 144.733325][ T8435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 144.735274][ T8435] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 144.737154][ T8435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 144.739168][ T8435] [ 145.164238][ T8439] syz.0.676[8439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.164317][ T8439] syz.0.676[8439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.199136][ T8439] syz.0.676[8439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.392301][ T8446] syzkaller1: entered promiscuous mode [ 145.397218][ T8446] syzkaller1: entered allmulticast mode [ 145.523104][ T39] audit: type=1326 audit(1732973979.513:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.529068][ T39] audit: type=1326 audit(1732973979.513:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.534840][ T39] audit: type=1326 audit(1732973979.513:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.540369][ T39] audit: type=1326 audit(1732973979.513:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.545759][ T39] audit: type=1326 audit(1732973979.523:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.550987][ T39] audit: type=1326 audit(1732973979.523:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.556190][ T39] audit: type=1326 audit(1732973979.523:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.561397][ T39] audit: type=1326 audit(1732973979.543:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.566945][ T39] audit: type=1326 audit(1732973979.553:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.572126][ T39] audit: type=1326 audit(1732973979.553:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8449 comm="syz.1.680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747e579 code=0x7ffc0000 [ 145.779303][ T8458] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input50 [ 146.303667][ T8466] openvswitch: netlink: Missing key (keys=40, expected=100) [ 146.884521][ T8484] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input51 [ 147.174585][ T8490] syz.2.690[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.174650][ T8490] syz.2.690[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.178860][ T8490] syz.2.690[8490] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.595525][ T8498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.619381][ T8501] netlink: 20 bytes leftover after parsing attributes in process `syz.0.693'. [ 147.692145][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'. [ 147.704965][ T8510] netlink: 'syz.1.692': attribute type 10 has an invalid length. [ 148.056495][ T1018] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.164987][ T8522] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input52 [ 148.206065][ T1018] usb 5-1: Using ep0 maxpacket: 8 [ 148.210115][ T1018] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 148.213643][ T1018] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 148.216581][ T1018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.226443][ T1018] usb 5-1: config 0 descriptor?? [ 148.431986][ T1018] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 148.548048][ T8532] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input53 [ 148.638072][ T6611] usb 5-1: USB disconnect, device number 6 [ 148.640072][ C2] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 149.639884][ T8549] syz.2.704[8549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.640067][ T8549] syz.2.704[8549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.643070][ T8549] syz.2.704[8549] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.877464][ T8551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.961092][ T8554] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 150.415036][ T8565] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input54 [ 150.881663][ T8577] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input55 [ 151.138588][ T8584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.714'. [ 151.189666][ T8588] syzkaller1: entered promiscuous mode [ 151.192656][ T8588] syzkaller1: entered allmulticast mode [ 151.526489][ T8596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 151.553373][ T8598] syz.3.716[8598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.553566][ T8598] syz.3.716[8598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.556789][ T8598] syz.3.716[8598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.798508][ T8604] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input56 [ 151.824714][ T8602] netlink: 'syz.1.718': attribute type 10 has an invalid length. [ 152.281141][ T8614] kvm: kvm [8613]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4ce00000012 [ 152.284658][ T8614] kvm: kvm [8613]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4ce00000812 [ 152.638115][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz.1.724'. [ 152.706518][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 152.824965][ T8639] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input57 [ 152.877433][ T8637] kvm: kvm [8636]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4ce00000012 [ 153.059689][ T8643] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input58 [ 153.431659][ T8655] syz.2.731[8655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.431854][ T8655] syz.2.731[8655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.435023][ T8655] syz.2.731[8655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.265583][ T8679] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input59 [ 154.438841][ T8687] netlink: 'syz.1.741': attribute type 2 has an invalid length. [ 154.440798][ T8687] netlink: 'syz.1.741': attribute type 9 has an invalid length. [ 154.441959][ T8684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 154.445489][ T8687] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.741'. [ 154.557834][ T8693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input60 [ 154.774011][ T8701] macvlan0: mtu less than device minimum [ 155.979406][ T8718] syz.3.749[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.979631][ T8718] syz.3.749[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.984119][ T8718] syz.3.749[8718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.045871][ T8719] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input61 [ 156.216101][ T8725] FAULT_INJECTION: forcing a failure. [ 156.216101][ T8725] name failslab, interval 1, probability 0, space 0, times 0 [ 156.219420][ T8725] CPU: 0 UID: 0 PID: 8725 Comm: syz.2.752 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 156.221741][ T8725] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 156.224280][ T8725] Call Trace: [ 156.225093][ T8725] [ 156.225996][ T8725] dump_stack_lvl+0x16c/0x1f0 [ 156.227486][ T8725] should_fail_ex+0x497/0x5b0 [ 156.228933][ T8725] ? fs_reclaim_acquire+0xae/0x150 [ 156.230504][ T8725] should_failslab+0xc2/0x120 [ 156.231939][ T8725] __kmalloc_noprof+0xce/0x4f0 [ 156.233403][ T8725] ? copy_splice_read+0x1a8/0xb90 [ 156.234954][ T8725] copy_splice_read+0x1a8/0xb90 [ 156.236451][ T8725] ? __pfx_copy_splice_read+0x10/0x10 [ 156.238091][ T8725] ? __pfx_copy_splice_read+0x10/0x10 [ 156.239728][ T8725] do_splice_read+0x282/0x370 [ 156.241172][ T8725] splice_direct_to_actor+0x2a4/0xa40 [ 156.242843][ T8725] ? __pfx_direct_splice_actor+0x10/0x10 [ 156.244551][ T8725] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 156.246383][ T8725] ? __fget_files+0x1fc/0x3a0 [ 156.247838][ T8725] do_splice_direct+0x178/0x250 [ 156.249460][ T8725] ? __pfx_do_splice_direct+0x10/0x10 [ 156.251149][ T8725] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 156.252947][ T8725] ? bpf_lsm_file_permission+0x9/0x10 [ 156.254593][ T8725] ? security_file_permission+0x71/0x210 [ 156.256312][ T8725] do_sendfile+0xaed/0xe30 [ 156.257681][ T8725] ? __pfx_do_sendfile+0x10/0x10 [ 156.259222][ T8725] ? __fget_files+0x206/0x3a0 [ 156.260701][ T8725] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 156.262452][ T8725] ? ksys_write+0x1ba/0x250 [ 156.263838][ T8725] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 156.265755][ T8725] __do_fast_syscall_32+0x73/0x120 [ 156.267282][ T8725] do_fast_syscall_32+0x32/0x80 [ 156.268779][ T8725] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 156.270701][ T8725] RIP: 0023:0xf748e579 [ 156.271954][ T8725] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 156.276482][ T8725] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 156.278430][ T8725] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 156.280280][ T8725] RDX: 0000000000000000 RSI: 0000000000023893 RDI: 0000000000000000 [ 156.282123][ T8725] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 156.283997][ T8725] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 156.285866][ T8725] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 156.287976][ T8725] [ 156.446338][ T1487] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.599468][ T1487] usb 5-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 156.602700][ T1487] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.605263][ T1487] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.611793][ T1487] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.614396][ T1487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.616680][ T1487] usb 5-1: Product: syz [ 156.617783][ T1487] usb 5-1: Manufacturer: syz [ 156.619030][ T1487] usb 5-1: SerialNumber: syz [ 156.787879][ T8730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.754'. [ 156.828116][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 156.830804][ T8723] bridge0: port 3(vxlan0) entered disabled state [ 156.834352][ T8723] bridge_slave_1: left allmulticast mode [ 156.838654][ T8723] bridge_slave_1: left promiscuous mode [ 156.840816][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.848703][ T8723] bridge_slave_0: left allmulticast mode [ 156.850845][ T8723] bridge_slave_0: left promiscuous mode [ 156.853125][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.943041][ T8735] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input62 [ 157.037633][ T1487] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 157.039727][ T1487] cdc_ncm 5-1:1.0: bind() failure [ 157.052825][ T1487] usb 5-1: USB disconnect, device number 7 [ 157.068254][ T8740] macvlan0: mtu less than device minimum [ 157.365551][ T8742] syzkaller0: entered promiscuous mode [ 157.367020][ T8742] syzkaller0: entered allmulticast mode [ 157.539441][ T8746] overlayfs: missing 'lowerdir' [ 157.743009][ T8750] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input63 [ 157.921795][ T834] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 157.988948][ T8759] syz.3.760[8759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.989001][ T8759] syz.3.760[8759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.992161][ T8759] syz.3.760[8759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.066477][ T834] usb 5-1: Using ep0 maxpacket: 8 [ 158.072285][ T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.074429][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.079346][ T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.082521][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.085991][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.089805][ T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.091890][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.094910][ T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.098296][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.101291][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.105049][ T834] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 158.107048][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 158.109920][ T834] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 158.113023][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 158.116167][ T834] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 158.121281][ T834] usb 5-1: string descriptor 0 read error: -22 [ 158.122957][ T834] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 158.125571][ T834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.138243][ T834] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 158.410903][ T834] usb 5-1: USB disconnect, device number 8 [ 158.780546][ T8768] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.783767][ T8768] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.789297][ T8768] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.792344][ T8768] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.795528][ T8768] vxlan0: entered promiscuous mode [ 158.797590][ T8768] vxlan0: entered allmulticast mode [ 158.800559][ T8768] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.802877][ T8768] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.805158][ T8768] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.807856][ T8768] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.830361][ T8769] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 158.931272][ T8775] xt_hashlimit: Unknown mode mask 90, kernel too old? [ 158.954830][ T8779] syzkaller1: entered promiscuous mode [ 158.956820][ T8779] syzkaller1: entered allmulticast mode [ 158.989992][ T8781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input64 [ 159.102488][ T8785] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input65 [ 159.205361][ T8790] macvlan0: mtu less than device minimum [ 159.568353][ T8795] syz.2.771[8795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.568532][ T8795] syz.2.771[8795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.572574][ T8795] syz.2.771[8795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.890835][ T8804] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.896080][ T8804] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.898348][ T8804] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.900619][ T8804] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.902977][ T8804] vxlan0: entered promiscuous mode [ 159.904384][ T8804] vxlan0: entered allmulticast mode [ 159.912328][ T8804] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.914699][ T8804] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.917268][ T8804] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.919554][ T8804] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 160.041391][ T8812] syz.1.773[8812] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 160.100854][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 160.107796][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.776'. [ 160.110634][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.776'. [ 160.113014][ T8815] netlink: 56 bytes leftover after parsing attributes in process `syz.3.776'. [ 160.115638][ T8815] netlink: 24 bytes leftover after parsing attributes in process `syz.3.776'. [ 160.494583][ T8818] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input66 [ 160.520567][ T8821] syzkaller1: entered promiscuous mode [ 160.523393][ T8821] syzkaller1: entered allmulticast mode [ 160.765094][ T8825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.780'. [ 160.913426][ T8836] macvlan0: mtu less than device minimum [ 160.996053][ T8835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input67 [ 161.946286][ T8853] bpf_get_probe_write_proto: 2 callbacks suppressed [ 161.946314][ T8853] syz.1.786[8853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.948206][ T8853] syz.1.786[8853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.951304][ T8853] syz.1.786[8853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.083370][ T8857] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.196717][ T8864] netlink: 'syz.3.787': attribute type 10 has an invalid length. [ 162.523755][ T8872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.791'. [ 162.633712][ T8878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input68 [ 163.618473][ T8899] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input69 [ 163.621681][ T8900] FAULT_INJECTION: forcing a failure. [ 163.621681][ T8900] name failslab, interval 1, probability 0, space 0, times 0 [ 163.625724][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.0.799 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 163.628406][ T8900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.631194][ T8900] Call Trace: [ 163.632083][ T8900] [ 163.632872][ T8900] dump_stack_lvl+0x16c/0x1f0 [ 163.634115][ T8900] should_fail_ex+0x497/0x5b0 [ 163.635398][ T8900] ? fs_reclaim_acquire+0xae/0x150 [ 163.636740][ T8900] should_failslab+0xc2/0x120 [ 163.637981][ T8900] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 163.639394][ T8900] ? security_file_alloc+0x34/0x2b0 [ 163.640755][ T8900] security_file_alloc+0x34/0x2b0 [ 163.642071][ T8900] init_file+0x93/0x480 [ 163.643173][ T8900] alloc_empty_file+0x91/0x1e0 [ 163.644440][ T8900] path_openat+0xe1/0x2d60 [ 163.645691][ T8900] ? hlock_class+0x4e/0x130 [ 163.646906][ T8900] ? __lock_acquire+0x15a9/0x3c40 [ 163.648427][ T8900] ? __pfx_path_openat+0x10/0x10 [ 163.649739][ T8900] ? __pfx___lock_acquire+0x10/0x10 [ 163.651123][ T8900] ? lock_acquire.part.0+0x11b/0x380 [ 163.652505][ T8900] ? find_held_lock+0x2d/0x110 [ 163.653777][ T8900] do_filp_open+0x20c/0x470 [ 163.654999][ T8900] ? __pfx_do_filp_open+0x10/0x10 [ 163.656338][ T8900] ? find_held_lock+0x2d/0x110 [ 163.657612][ T8900] ? _raw_spin_unlock+0x28/0x50 [ 163.658908][ T8900] ? alloc_fd+0x41f/0x760 [ 163.660056][ T8900] do_sys_openat2+0x17a/0x1e0 [ 163.661296][ T8900] ? __pfx_do_sys_openat2+0x10/0x10 [ 163.662691][ T8900] ? __fget_files+0x206/0x3a0 [ 163.663950][ T8900] __ia32_sys_creat+0xcc/0x120 [ 163.665273][ T8900] ? __pfx___ia32_sys_creat+0x10/0x10 [ 163.666680][ T8900] ? __pfx_ksys_write+0x10/0x10 [ 163.667954][ T8900] ? syscall_enter_from_user_mode_prepare+0x68/0xe0 [ 163.669653][ T8900] ? lockdep_hardirqs_on+0x7c/0x110 [ 163.671047][ T8900] __do_fast_syscall_32+0x73/0x120 [ 163.672385][ T8900] do_fast_syscall_32+0x32/0x80 [ 163.673662][ T8900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.675432][ T8900] RIP: 0023:0xf7f86579 [ 163.676498][ T8900] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 163.681490][ T8900] RSP: 002b:00000000f50e557c EFLAGS: 00000292 ORIG_RAX: 0000000000000008 [ 163.683522][ T8900] RAX: ffffffffffffffda RBX: 0000000020000180 RCX: 0000000000000000 [ 163.685627][ T8900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.687691][ T8900] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.689734][ T8900] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 163.691803][ T8900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.693854][ T8900] [ 163.701305][ T5931] udevd[5931]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 163.705289][ T8902] netlink: 20 bytes leftover after parsing attributes in process `syz.1.800'. [ 164.627985][ T8923] syz.2.801[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.628177][ T8923] syz.2.801[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.631288][ T8923] syz.2.801[8923] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.460806][ T8932] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input70 [ 165.965385][ T8942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input71 [ 166.090615][ T8948] macvlan0: mtu less than device minimum [ 166.312274][ T8951] netlink: 20 bytes leftover after parsing attributes in process `syz.0.812'. [ 166.711079][ T8967] syz.0.814[8967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.711275][ T8967] syz.0.814[8967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.714443][ T8967] syz.0.814[8967] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.349746][ T8977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 167.395473][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.820'. [ 167.436242][ T8983] netlink: 'syz.3.819': attribute type 10 has an invalid length. [ 167.806066][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 168.217752][ T9000] FAULT_INJECTION: forcing a failure. [ 168.217752][ T9000] name failslab, interval 1, probability 0, space 0, times 0 [ 168.221184][ T9000] CPU: 2 UID: 0 PID: 9000 Comm: syz.1.824 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 168.223791][ T9000] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 168.226616][ T9000] Call Trace: [ 168.227506][ T9000] [ 168.228294][ T9000] dump_stack_lvl+0x16c/0x1f0 [ 168.229568][ T9000] should_fail_ex+0x497/0x5b0 [ 168.230812][ T9000] ? fs_reclaim_acquire+0xae/0x150 [ 168.232157][ T9000] should_failslab+0xc2/0x120 [ 168.233426][ T9000] __kmalloc_noprof+0xce/0x4f0 [ 168.234769][ T9000] ? kvm_dev_ioctl+0x12bc/0x1aa0 [ 168.236072][ T9000] kvm_dev_ioctl+0x12bc/0x1aa0 [ 168.237333][ T9000] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 168.238705][ T9000] ? __fget_files+0x206/0x3a0 [ 168.239991][ T9000] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 168.241364][ T9000] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 168.242763][ T9000] __do_fast_syscall_32+0x73/0x120 [ 168.244109][ T9000] do_fast_syscall_32+0x32/0x80 [ 168.245424][ T9000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.247086][ T9000] RIP: 0023:0xf747e579 [ 168.248152][ T9000] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 168.253116][ T9000] RSP: 002b:00000000f514557c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 168.255268][ T9000] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000ae01 [ 168.257329][ T9000] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.259539][ T9000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.261593][ T9000] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 168.263698][ T9000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.265804][ T9000] [ 168.680097][ T9020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.834291][ T9023] netlink: 'syz.0.831': attribute type 10 has an invalid length. [ 168.985123][ T9026] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input72 [ 169.096045][ T5943] Bluetooth: hci1: command tx timeout [ 169.709961][ T9037] FAULT_INJECTION: forcing a failure. [ 169.709961][ T9037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.714231][ T9037] CPU: 0 UID: 0 PID: 9037 Comm: syz.3.836 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 169.716918][ T9037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 169.719661][ T9037] Call Trace: [ 169.720527][ T9037] [ 169.721297][ T9037] dump_stack_lvl+0x16c/0x1f0 [ 169.722536][ T9037] should_fail_ex+0x497/0x5b0 [ 169.723740][ T9037] _copy_to_user+0x32/0xd0 [ 169.724943][ T9037] msr_read+0x14f/0x250 [ 169.726018][ T9037] ? __pfx_msr_read+0x10/0x10 [ 169.727197][ T9037] ? bpf_lsm_file_permission+0x9/0x10 [ 169.728535][ T9037] ? security_file_permission+0x71/0x210 [ 169.729982][ T9037] ? __pfx_msr_read+0x10/0x10 [ 169.731164][ T9037] vfs_read+0x1df/0xbe0 [ 169.732200][ T9037] ? __fget_files+0x1fc/0x3a0 [ 169.733441][ T9037] ? __pfx_lock_release+0x10/0x10 [ 169.734744][ T9037] ? __pfx_vfs_read+0x10/0x10 [ 169.735966][ T9037] ? lock_acquire+0x2f/0xb0 [ 169.737342][ T9037] ? __fget_files+0x40/0x3a0 [ 169.738708][ T9037] ? __fget_files+0x206/0x3a0 [ 169.739956][ T9037] ksys_read+0x12b/0x250 [ 169.741078][ T9037] ? __pfx_ksys_read+0x10/0x10 [ 169.742351][ T9037] __do_fast_syscall_32+0x73/0x120 [ 169.743702][ T9037] do_fast_syscall_32+0x32/0x80 [ 169.744969][ T9037] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 169.746581][ T9037] RIP: 0023:0xf748e579 [ 169.747639][ T9037] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 169.752618][ T9037] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000003 [ 169.754759][ T9037] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020019680 [ 169.756789][ T9037] RDX: 0000000000018ff8 RSI: 0000000000000000 RDI: 0000000000000000 [ 169.758821][ T9037] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 169.760846][ T9037] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 169.762875][ T9037] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 169.764869][ T9037] [ 169.775818][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.834'. [ 169.840618][ T9033] nfs: Unknown parameter 'noa”mÙ>' [ 169.855246][ T9052] netlink: 68 bytes leftover after parsing attributes in process `syz.0.839'. [ 169.916512][ T9055] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.033880][ T9060] netlink: 'syz.2.840': attribute type 10 has an invalid length. [ 170.414391][ T9067] macvlan0: mtu less than device minimum [ 170.417035][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 170.599335][ T9073] 9pnet_fd: Insufficient options for proto=fd [ 170.707536][ T9077] 9pnet_fd: Insufficient options for proto=fd [ 171.176459][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 171.292554][ T9087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 171.384621][ T9094] netlink: 'syz.0.848': attribute type 10 has an invalid length. [ 172.166726][ T9107] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 172.729708][ T9131] syz.3.859[9131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.729893][ T9131] syz.3.859[9131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.733090][ T9131] syz.3.859[9131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.320575][ T9143] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.411839][ T9146] netlink: 'syz.2.862': attribute type 10 has an invalid length. [ 173.534182][ T9149] FAULT_INJECTION: forcing a failure. [ 173.534182][ T9149] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.537508][ T9149] CPU: 1 UID: 0 PID: 9149 Comm: syz.3.863 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 173.539813][ T9149] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 173.542203][ T9149] Call Trace: [ 173.542971][ T9149] [ 173.543650][ T9149] dump_stack_lvl+0x16c/0x1f0 [ 173.544743][ T9149] should_fail_ex+0x497/0x5b0 [ 173.545819][ T9149] _copy_to_user+0x32/0xd0 [ 173.546856][ T9149] simple_read_from_buffer+0xd0/0x160 [ 173.548070][ T9149] proc_fail_nth_read+0x198/0x270 [ 173.549216][ T9149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.550528][ T9149] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.551946][ T9149] vfs_read+0x1df/0xbe0 [ 173.553047][ T9149] ? __fget_files+0x1fc/0x3a0 [ 173.554305][ T9149] ? __pfx___mutex_lock+0x10/0x10 [ 173.555625][ T9149] ? __pfx_vfs_read+0x10/0x10 [ 173.556875][ T9149] ? __fget_files+0x206/0x3a0 [ 173.558134][ T9149] ksys_read+0x12b/0x250 [ 173.559252][ T9149] ? __pfx_ksys_read+0x10/0x10 [ 173.560518][ T9149] __do_fast_syscall_32+0x73/0x120 [ 173.561860][ T9149] do_fast_syscall_32+0x32/0x80 [ 173.563146][ T9149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.564880][ T9149] RIP: 0023:0xf748e579 [ 173.565954][ T9149] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 173.570964][ T9149] RSP: 002b:00000000f51555b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 173.573119][ T9149] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f5155620 [ 173.575173][ T9149] RDX: 000000000000000f RSI: 00000000f7480ff4 RDI: 0000000000000000 [ 173.577215][ T9149] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 173.579267][ T9149] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 173.581308][ T9149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.583365][ T9149] [ 174.205872][ T9161] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.293211][ T9168] netlink: 596 bytes leftover after parsing attributes in process `syz.1.869'. [ 174.300225][ T9168] netlink: 'syz.1.869': attribute type 4 has an invalid length. [ 174.549581][ T9173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input73 [ 174.823001][ T9179] syz.2.871[9179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.823186][ T9179] syz.2.871[9179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.826390][ T9179] syz.2.871[9179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.294035][ T9186] macvlan0: mtu less than device minimum [ 175.301314][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 175.758131][ T9192] random: crng reseeded on system resumption [ 175.918684][ T9195] syz.2.874[9195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.918965][ T9195] syz.2.874[9195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.922151][ T9195] syz.2.874[9195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.958047][ T9194] afs: Unknown parameter 'Š>Ø' [ 176.208158][ T9199] xt_hashlimit: Unknown mode mask 1D8, kernel too old? [ 176.258986][ T9205] syzkaller1: entered promiscuous mode [ 176.260486][ T9205] syzkaller1: entered allmulticast mode [ 176.263469][ T9205] FAULT_INJECTION: forcing a failure. [ 176.263469][ T9205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.267046][ T9205] CPU: 1 UID: 0 PID: 9205 Comm: syz.0.880 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 176.269538][ T9205] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 176.272150][ T9205] Call Trace: [ 176.273012][ T9205] [ 176.273795][ T9205] dump_stack_lvl+0x16c/0x1f0 [ 176.275041][ T9205] should_fail_ex+0x497/0x5b0 [ 176.276276][ T9205] _copy_from_iter+0x29b/0x1400 [ 176.277550][ T9205] ? _copy_from_iter+0x159/0x1400 [ 176.278883][ T9205] ? __pfx__copy_from_iter+0x10/0x10 [ 176.280264][ T9205] ? __pfx__copy_from_iter+0x10/0x10 [ 176.281676][ T9205] ? __virt_addr_valid+0x1a4/0x590 [ 176.283022][ T9205] copy_page_from_iter+0xa5/0x120 [ 176.284332][ T9205] skb_copy_datagram_from_iter+0x29b/0x710 [ 176.285940][ T9205] tun_get_user+0x197f/0x3e30 [ 176.287197][ T9205] ? __pfx_tun_get_user+0x10/0x10 [ 176.288506][ T9205] ? find_held_lock+0x2d/0x110 [ 176.289756][ T9205] ? __pfx_lock_release+0x10/0x10 [ 176.291122][ T9205] tun_chr_write_iter+0xdc/0x210 [ 176.292411][ T9205] vfs_write+0x5ae/0x1150 [ 176.293539][ T9205] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 176.294979][ T9205] ? __pfx_vfs_write+0x10/0x10 [ 176.296275][ T9205] ? __fget_files+0x40/0x3a0 [ 176.297487][ T9205] ksys_write+0x12b/0x250 [ 176.298616][ T9205] ? __pfx_ksys_write+0x10/0x10 [ 176.299902][ T9205] __do_fast_syscall_32+0x73/0x120 [ 176.301274][ T9205] do_fast_syscall_32+0x32/0x80 [ 176.302555][ T9205] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.304199][ T9205] RIP: 0023:0xf7f86579 [ 176.305312][ T9205] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 176.310052][ T9205] RSP: 002b:00000000f510657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 176.312210][ T9205] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 176.314259][ T9205] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 176.316391][ T9205] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.318464][ T9205] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 176.320523][ T9205] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.322558][ T9205] [ 176.660656][ T9218] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.747407][ T9221] netlink: 'syz.2.883': attribute type 10 has an invalid length. [ 176.940116][ T9223] syz.0.882[9223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 177.046739][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.884'. [ 177.094148][ T9229] netlink: 'syz.3.885': attribute type 1 has an invalid length. [ 177.096855][ T9229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 177.218680][ T9234] netlink: 64 bytes leftover after parsing attributes in process `syz.3.887'. [ 177.225161][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'. [ 177.592322][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.1.893'. [ 177.880759][ T9259] netlink: 44 bytes leftover after parsing attributes in process `syz.0.894'. [ 178.273411][ T9264] 9pnet_fd: Insufficient options for proto=fd [ 178.354575][ T9268] Cannot find set identified by id 0 to match [ 178.376422][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 178.392367][ T9270] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.484726][ T9274] netlink: 'syz.1.898': attribute type 10 has an invalid length. [ 178.836546][ T832] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 178.944434][ T9289] gretap1: entered allmulticast mode [ 178.996704][ T832] usb 8-1: Using ep0 maxpacket: 16 [ 179.004187][ T832] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 179.007582][ T832] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 179.010360][ T832] usb 8-1: Product: syz [ 179.014181][ T832] usb 8-1: Manufacturer: syz [ 179.015879][ T832] usb 8-1: SerialNumber: syz [ 179.026434][ T9291] team0: Port device bond0 removed [ 179.034099][ T9291] bond0: (slave bond_slave_0): Releasing backup interface [ 179.037243][ T832] usb 8-1: config 0 descriptor?? [ 179.047361][ T9291] bond0: (slave bond_slave_1): Releasing backup interface [ 179.069073][ T9291] team0: Port device team_slave_0 removed [ 179.077133][ T9291] team0: Port device team_slave_1 removed [ 179.079125][ T9291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.081157][ T9291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.084081][ T9291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.086926][ T9291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.298636][ T9297] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 179.592814][ T9301] input: syz0 as /devices/virtual/input/input74 [ 179.674384][ T9304] netlink: 20 bytes leftover after parsing attributes in process `syz.2.906'. [ 179.793168][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.798174][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.807174][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.909'. [ 179.810427][ T9310] bridge0: port 3(vxlan0) entered disabled state [ 179.813887][ T9310] bridge_slave_1: left allmulticast mode [ 179.815902][ T9310] bridge_slave_1: left promiscuous mode [ 179.818298][ T9310] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.824126][ T9310] bridge_slave_0: left allmulticast mode [ 179.826917][ T9310] bridge_slave_0: left promiscuous mode [ 179.829051][ T9310] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.446056][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 180.452888][ T39] kauditd_printk_skb: 5 callbacks suppressed [ 180.452896][ T39] audit: type=1326 audit(1732974014.443:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 180.462049][ T39] audit: type=1326 audit(1732974014.443:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9311 comm="syz.2.910" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 181.043124][ T9321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 181.116842][ T9324] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 181.121153][ T9324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.124815][ T9324] team0: Port device bond0 added [ 181.369620][ T6008] usb 8-1: USB disconnect, device number 6 [ 181.479178][ T9329] syzkaller1: entered promiscuous mode [ 181.481037][ T9329] syzkaller1: entered allmulticast mode [ 181.497255][ T9333] can: request_module (can-proto-5) failed. [ 182.256960][ T9346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'. [ 182.359450][ T9360] netlink: 750 bytes leftover after parsing attributes in process `syz.3.924'. [ 182.753167][ T9381] Process accounting resumed [ 182.973971][ T9387] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 183.017096][ T9393] netlink: 'syz.3.934': attribute type 2 has an invalid length. [ 183.019416][ T9393] netlink: 'syz.3.934': attribute type 9 has an invalid length. [ 183.021377][ T9393] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.934'. [ 183.379280][ T9407] bpf_get_probe_write_proto: 5 callbacks suppressed [ 183.379297][ T9407] syz.0.937[9407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.381864][ T9407] syz.0.937[9407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.406238][ T9407] syz.0.937[9407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.440070][ T9409] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.445299][ T9409] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.448056][ T9409] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.450508][ T9409] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.452852][ T9409] vxlan0: entered promiscuous mode [ 183.454182][ T9409] vxlan0: entered allmulticast mode [ 183.461447][ T9409] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.463893][ T9409] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.466346][ T9409] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.468576][ T9409] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 183.492917][ T9411] FAULT_INJECTION: forcing a failure. [ 183.492917][ T9411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.498000][ T9411] CPU: 1 UID: 0 PID: 9411 Comm: syz.2.941 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 183.501574][ T9411] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 183.505264][ T9411] Call Trace: [ 183.506470][ T9411] [ 183.507520][ T9411] dump_stack_lvl+0x16c/0x1f0 [ 183.509196][ T9411] should_fail_ex+0x497/0x5b0 [ 183.510859][ T9411] ? fs_reclaim_acquire+0xae/0x150 [ 183.512665][ T9411] should_fail_alloc_page+0xe7/0x130 [ 183.514539][ T9411] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 183.516743][ T9411] __alloc_pages_noprof+0x190/0x25b0 [ 183.518873][ T9411] ? stack_trace_save+0x95/0xd0 [ 183.520603][ T9411] ? __pfx_stack_trace_save+0x10/0x10 [ 183.522500][ T9411] ? stack_depot_save_flags+0x28/0x900 [ 183.524446][ T9411] ? __pfx_udp_sendmsg+0x10/0x10 [ 183.526223][ T9411] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 183.528232][ T9411] ? kasan_save_stack+0x33/0x60 [ 183.529938][ T9411] ? __kasan_kmalloc+0xaa/0xb0 [ 183.531656][ T9411] ? __kmalloc_noprof+0x21a/0x4f0 [ 183.533429][ T9411] ? copy_splice_read+0x1a8/0xb90 [ 183.535222][ T9411] ? do_splice_read+0x282/0x370 [ 183.536941][ T9411] ? splice_direct_to_actor+0x2a4/0xa40 [ 183.538893][ T9411] ? do_splice_direct+0x178/0x250 [ 183.540658][ T9411] ? do_sendfile+0xaed/0xe30 [ 183.542327][ T9411] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 183.544274][ T9411] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 183.546413][ T9411] ? trace_kmalloc+0x2d/0xd0 [ 183.548085][ T9411] ? __kmalloc_noprof+0x23b/0x4f0 [ 183.549867][ T9411] ? copy_splice_read+0x1a8/0xb90 [ 183.551627][ T9411] copy_splice_read+0x1e3/0xb90 [ 183.553327][ T9411] ? __pfx_copy_splice_read+0x10/0x10 [ 183.555217][ T9411] ? __pfx_copy_splice_read+0x10/0x10 [ 183.557091][ T9411] do_splice_read+0x282/0x370 [ 183.558773][ T9411] splice_direct_to_actor+0x2a4/0xa40 [ 183.560659][ T9411] ? __pfx_direct_splice_actor+0x10/0x10 [ 183.562648][ T9411] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 183.564763][ T9411] ? __fget_files+0x1fc/0x3a0 [ 183.566429][ T9411] do_splice_direct+0x178/0x250 [ 183.568159][ T9411] ? __pfx_do_splice_direct+0x10/0x10 [ 183.570078][ T9411] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 183.572173][ T9411] ? bpf_lsm_file_permission+0x9/0x10 [ 183.574059][ T9411] ? security_file_permission+0x71/0x210 [ 183.576053][ T9411] do_sendfile+0xaed/0xe30 [ 183.577664][ T9411] ? __pfx_do_sendfile+0x10/0x10 [ 183.579423][ T9411] ? __fget_files+0x206/0x3a0 [ 183.581107][ T9411] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 183.583120][ T9411] ? ksys_write+0x1ba/0x250 [ 183.584745][ T9411] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 183.586955][ T9411] __do_fast_syscall_32+0x73/0x120 [ 183.588759][ T9411] do_fast_syscall_32+0x32/0x80 [ 183.590387][ T9411] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 183.592566][ T9411] RIP: 0023:0xf748e579 [ 183.594012][ T9411] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 183.600637][ T9411] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 183.603358][ T9411] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 183.606011][ T9411] RDX: 0000000000000000 RSI: 0000000000023893 RDI: 0000000000000000 [ 183.608760][ T9411] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.611438][ T9411] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 183.614054][ T9411] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.616832][ T9411] [ 183.665752][ T9417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.942'. [ 183.668470][ T9414] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input75 [ 183.680222][ T9417] netlink: 'syz.2.942': attribute type 21 has an invalid length. [ 183.682325][ T9417] netlink: 'syz.2.942': attribute type 1 has an invalid length. [ 183.684366][ T9417] netlink: 'syz.2.942': attribute type 2 has an invalid length. [ 183.694011][ T9417] netlink: 9062 bytes leftover after parsing attributes in process `syz.2.942'. [ 183.702607][ T9417] netlink: 48 bytes leftover after parsing attributes in process `syz.2.942'. [ 183.905089][ T9422] ata1.00: invalid cdb length 6 [ 184.296825][ T9429] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input76 [ 184.523586][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.946'. [ 184.674745][ T9437] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.677026][ T9437] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.679051][ T9437] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.681175][ T9437] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.684273][ T9437] vxlan0: entered promiscuous mode [ 184.686068][ T9437] vxlan0: entered allmulticast mode [ 184.691877][ T9437] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.694275][ T9437] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.697357][ T9437] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.699654][ T9437] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.853361][ T9444] syzkaller1: entered promiscuous mode [ 184.854864][ T9444] syzkaller1: entered allmulticast mode [ 184.992045][ T9446] xt_CT: No such helper "pptp" [ 185.072865][ T9449] kvm: kvm [9448]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4ce00000012 [ 185.075883][ T9449] kvm: kvm [9448]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4ce00000812 [ 185.539017][ T9457] syz.1.952[9457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.539256][ T9457] syz.1.952[9457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.542290][ T9457] syz.1.952[9457] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 185.812837][ T9459] syzkaller1: entered promiscuous mode [ 185.819820][ T9459] syzkaller1: entered allmulticast mode [ 185.976254][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 186.014369][ T9462] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input77 [ 186.952567][ T9473] ata1.00: invalid command format 189 [ 187.347773][ T832] raw-gadget.1 gadget.1: failed to queue reset event [ 187.416046][ T832] raw-gadget.1 gadget.1: failed to queue resume event [ 187.476677][ T832] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 187.479628][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 187.482177][ T832] raw-gadget.1 gadget.1: failed to queue reset event [ 187.540485][ T9487] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 187.546546][ T832] raw-gadget.1 gadget.1: failed to queue resume event [ 187.616498][ T832] usb 6-1: device descriptor read/64, error -32 [ 187.625330][ T9492] netlink: 'syz.1.961': attribute type 10 has an invalid length. [ 187.726080][ T832] raw-gadget.1 gadget.1: failed to queue suspend event [ 187.729353][ T832] raw-gadget.1 gadget.1: failed to queue reset event [ 187.796043][ T832] raw-gadget.1 gadget.1: failed to queue resume event [ 187.798870][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.964'. [ 187.856776][ T832] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 187.860407][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 187.863257][ T832] raw-gadget.1 gadget.1: failed to queue reset event [ 187.910010][ T9503] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input79 [ 187.941456][ T832] raw-gadget.1 gadget.1: failed to queue resume event [ 187.996875][ T832] usb 6-1: device descriptor read/64, error -32 [ 188.056799][ T9508] wireguard0: entered promiscuous mode [ 188.058411][ T9508] wireguard0: entered allmulticast mode [ 188.419250][ T832] raw-gadget.1 gadget.1: failed to queue suspend event [ 188.426273][ T832] usb usb6-port1: attempt power cycle [ 188.427692][ T832] raw-gadget.1 gadget.1: failed to queue disconnect event [ 188.432969][ T832] raw-gadget.1 gadget.1: failed to queue reset event [ 188.496423][ T832] raw-gadget.1 gadget.1: failed to queue resume event [ 188.499728][ T832] raw-gadget.1 gadget.1: failed to queue reset event [ 188.746100][ T9526] syz.1.969[9526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.746151][ T9526] syz.1.969[9526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.754732][ T9526] syz.1.969[9526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.945751][ T832] raw-gadget.1 gadget.1: failed to queue resume event [ 189.006152][ T832] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 189.026264][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 189.029595][ T832] usb 6-1: device descriptor read/8, error -32 [ 189.157000][ T832] raw-gadget.1 gadget.1: failed to queue suspend event [ 189.159750][ T832] raw-gadget.1 gadget.1: failed to queue reset event [ 189.164750][ T9530] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 189.208024][ T39] audit: type=1326 audit(1732974023.203:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.215433][ T39] audit: type=1326 audit(1732974023.203:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.222823][ T39] audit: type=1326 audit(1732974023.203:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.230243][ T39] audit: type=1326 audit(1732974023.203:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.237701][ T39] audit: type=1326 audit(1732974023.203:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.238916][ T832] raw-gadget.1 gadget.1: failed to queue resume event [ 189.243764][ T39] audit: type=1326 audit(1732974023.203:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.251595][ T39] audit: type=1326 audit(1732974023.203:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.257197][ T39] audit: type=1326 audit(1732974023.203:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.262851][ T39] audit: type=1326 audit(1732974023.203:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.268399][ T39] audit: type=1326 audit(1732974023.203:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9531 comm="syz.2.973" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 189.316160][ T832] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 189.336287][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 189.339225][ T832] usb 6-1: device descriptor read/8, error -32 [ 189.456464][ T832] raw-gadget.1 gadget.1: failed to queue suspend event [ 189.459458][ T832] usb usb6-port1: unable to enumerate USB device [ 189.543437][ T9543] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.659438][ T9548] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 189.961620][ T9555] tmpfs: Unknown parameter 'hUÔúJlwayâ' [ 191.473031][ T9579] syzkaller1: entered promiscuous mode [ 191.474591][ T9579] syzkaller1: entered allmulticast mode [ 191.852549][ T9587] netlink: 100 bytes leftover after parsing attributes in process `syz.3.990'. [ 192.301079][ T9599] syz.0.993[9599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.301439][ T9599] syz.0.993[9599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.306004][ T9599] syz.0.993[9599] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.217896][ T9612] macvlan0: mtu less than device minimum [ 193.226824][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'. [ 193.570511][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.572858][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.606855][ T7779] raw-gadget.1 gadget.1: failed to queue disconnect event [ 193.943631][ T5943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.949574][ T5943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.952392][ T5943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.955369][ T5943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.960928][ T5943] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 193.963725][ T5943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.107697][ T9621] chnl_net:caif_netlink_parms(): no params data found [ 194.186630][ T9621] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.189064][ T9621] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.191023][ T9621] bridge_slave_0: entered allmulticast mode [ 194.193254][ T9621] bridge_slave_0: entered promiscuous mode [ 194.195870][ T9621] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.198589][ T9621] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.200785][ T9621] bridge_slave_1: entered allmulticast mode [ 194.202851][ T9621] bridge_slave_1: entered promiscuous mode [ 194.231465][ T9621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.237701][ T9621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.253724][ T9632] macvlan0: mtu less than device minimum [ 194.259993][ T9632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 194.270174][ T9621] team0: Port device team_slave_0 added [ 194.278162][ T9621] team0: Port device team_slave_1 added [ 194.329815][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.332242][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.340233][ T9621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.344575][ T9621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.347903][ T9621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.355802][ T9621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.419734][ T9621] hsr_slave_0: entered promiscuous mode [ 194.429766][ T9621] hsr_slave_1: entered promiscuous mode [ 194.431614][ T9621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.433508][ T9621] Cannot create hsr debugfs directory [ 194.727617][ T9643] syz.2.1003[9643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.727667][ T9643] syz.2.1003[9643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.730678][ T9643] syz.2.1003[9643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.784070][ T9641] syz.3.1004[9641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.791615][ T9641] syz.3.1004[9641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.796139][ T9641] syz.3.1004[9641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.970850][ T9621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.978456][ T9621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.981952][ T9621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.985383][ T9621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.021552][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.029351][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.035448][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.037241][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.044862][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.046776][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.131562][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.249501][ T9621] veth0_vlan: entered promiscuous mode [ 195.256465][ T9621] veth1_vlan: entered promiscuous mode [ 195.274111][ T9621] veth0_macvtap: entered promiscuous mode [ 195.280782][ T9621] veth1_macvtap: entered promiscuous mode [ 195.289612][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.292219][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.294643][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.297774][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.300441][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.303134][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.306650][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.309980][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.312881][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.315775][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.327302][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.330463][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.333754][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.342241][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.349056][ T9621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.351506][ T9621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.353740][ T9621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.356120][ T9621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.387223][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.389582][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.400635][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.402787][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.545501][ T9666] Illegal XDP return value 4294967274 on prog (id 301) dev N/A, expect packet loss! [ 195.583363][ T9670] syzkaller1: entered promiscuous mode [ 195.584841][ T9670] syzkaller1: entered allmulticast mode [ 195.587544][ T9670] FAULT_INJECTION: forcing a failure. [ 195.587544][ T9670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.591020][ T9670] CPU: 3 UID: 0 PID: 9670 Comm: syz.3.1009 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 195.593670][ T9670] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 195.596463][ T9670] Call Trace: [ 195.597469][ T9670] [ 195.598279][ T9670] dump_stack_lvl+0x16c/0x1f0 [ 195.599549][ T9670] should_fail_ex+0x497/0x5b0 [ 195.600801][ T9670] _copy_from_iter+0x29b/0x1400 [ 195.602075][ T9670] ? _copy_from_iter+0x159/0x1400 [ 195.603407][ T9670] ? __pfx__copy_from_iter+0x10/0x10 [ 195.604826][ T9670] ? __pfx__copy_from_iter+0x10/0x10 [ 195.606245][ T9670] ? __virt_addr_valid+0x1a4/0x590 [ 195.607615][ T9670] copy_page_from_iter+0xa5/0x120 [ 195.608956][ T9670] skb_copy_datagram_from_iter+0x29b/0x710 [ 195.610499][ T9670] tun_get_user+0x197f/0x3e30 [ 195.611692][ T9670] ? __pfx_tun_get_user+0x10/0x10 [ 195.612943][ T9670] ? find_held_lock+0x2d/0x110 [ 195.614231][ T9670] ? __pfx_lock_release+0x10/0x10 [ 195.615571][ T9670] tun_chr_write_iter+0xdc/0x210 [ 195.616895][ T9670] vfs_write+0x5ae/0x1150 [ 195.618058][ T9670] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 195.619537][ T9670] ? __pfx_vfs_write+0x10/0x10 [ 195.620813][ T9670] ? __fget_files+0x40/0x3a0 [ 195.622038][ T9670] ksys_write+0x12b/0x250 [ 195.623163][ T9670] ? __pfx_ksys_write+0x10/0x10 [ 195.624439][ T9670] __do_fast_syscall_32+0x73/0x120 [ 195.625800][ T9670] do_fast_syscall_32+0x32/0x80 [ 195.627096][ T9670] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.628775][ T9670] RIP: 0023:0xf748e579 [ 195.629888][ T9670] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 195.634952][ T9670] RSP: 002b:00000000f517657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 195.637023][ T9670] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 195.639417][ T9670] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 195.641484][ T9670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.643425][ T9670] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 195.645616][ T9670] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.648144][ T9670] [ 195.709812][ T9672] syzkaller1: entered promiscuous mode [ 195.712132][ T9672] syzkaller1: entered allmulticast mode [ 195.932748][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1013'. [ 196.046085][ T66] Bluetooth: hci2: command tx timeout [ 196.287282][ T9697] syz.3.1015[9697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.287362][ T9697] syz.3.1015[9697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.291446][ T9697] syz.3.1015[9697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.980017][ T9708] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input80 [ 197.284810][ T9720] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.126133][ T66] Bluetooth: hci2: command tx timeout [ 198.136466][ T9727] syz.4.1023[9727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.515621][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1028'. [ 199.992572][ T9762] bpf_get_probe_write_proto: 2 callbacks suppressed [ 199.992585][ T9762] syz.4.1029[9762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.995063][ T9762] syz.4.1029[9762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.998738][ T9762] syz.4.1029[9762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.254983][ T66] Bluetooth: hci2: command tx timeout [ 200.347869][ T9774] syzkaller1: entered promiscuous mode [ 200.349474][ T9774] syzkaller1: entered allmulticast mode [ 200.437115][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1035'. [ 200.816285][ T9785] syz.3.1036[9785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.816339][ T9785] syz.3.1036[9785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.832249][ T9785] syz.3.1036[9785] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.013029][ T9784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input81 [ 201.844605][ T9794] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.847097][ T9794] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.849344][ T9794] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.851726][ T9794] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.853889][ T9794] vxlan0: entered promiscuous mode [ 201.855269][ T9794] vxlan0: entered allmulticast mode [ 201.860849][ T9794] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.863118][ T9794] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.865533][ T9794] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.867933][ T9794] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.030641][ T9798] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.032924][ T9798] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.036223][ T9798] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.036255][ T9798] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.036800][ T9798] vxlan0: entered promiscuous mode [ 202.044160][ T9798] vxlan0: entered allmulticast mode [ 202.051018][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 202.056526][ T9798] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.058902][ T9798] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.061126][ T9798] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.063491][ T9798] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.297484][ T66] Bluetooth: hci2: command tx timeout [ 202.410509][ T9809] syzkaller0: entered promiscuous mode [ 202.412265][ T9809] syzkaller0: entered allmulticast mode [ 202.820842][ T9814] syz.3.1045[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.820924][ T9814] syz.3.1045[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.825089][ T9814] syz.3.1045[9814] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.430625][ T9828] syz.4.1048[9828] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 203.661167][ T9831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input82 [ 204.016401][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 204.380855][ T9849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1055'. [ 204.891573][ T9858] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1056'. [ 206.508106][ T9873] xt_hashlimit: Unknown mode mask 340, kernel too old? [ 207.120332][ T9915] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input83 [ 207.123998][ T9916] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1067'. [ 207.366075][ T1018] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 207.463167][ T9925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1069'. [ 207.519759][ T1018] usb 9-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 207.523274][ T1018] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.528858][ T1018] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.536873][ T1018] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 207.539840][ T1018] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.545770][ T1018] usb 9-1: Product: syz [ 207.547315][ T1018] usb 9-1: Manufacturer: syz [ 207.548832][ T1018] usb 9-1: SerialNumber: syz [ 207.764494][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 207.767032][ T9916] bridge_slave_1: left allmulticast mode [ 207.768565][ T9916] bridge_slave_1: left promiscuous mode [ 207.770163][ T9916] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.773873][ T9916] bridge_slave_0: left allmulticast mode [ 207.775390][ T9916] bridge_slave_0: left promiscuous mode [ 207.777176][ T9916] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.965989][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 208.070724][ T1018] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 208.072502][ T1018] cdc_ncm 9-1:1.0: bind() failure [ 208.076260][ T1018] usb 9-1: USB disconnect, device number 2 [ 208.214535][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1073'. [ 208.501500][ T9941] bpf_get_probe_write_proto: 5 callbacks suppressed [ 208.501511][ T9941] syz.3.1074[9941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.503238][ T9941] syz.3.1074[9941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.506612][ T9941] syz.3.1074[9941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.532558][ T9945] FAULT_INJECTION: forcing a failure. [ 208.532558][ T9945] name failslab, interval 1, probability 0, space 0, times 0 [ 208.538987][ T9945] CPU: 0 UID: 0 PID: 9945 Comm: syz.4.1075 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 208.541573][ T9945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.544200][ T9945] Call Trace: [ 208.545084][ T9945] [ 208.545881][ T9945] dump_stack_lvl+0x16c/0x1f0 [ 208.547136][ T9945] should_fail_ex+0x497/0x5b0 [ 208.548410][ T9945] ? fs_reclaim_acquire+0xae/0x150 [ 208.549799][ T9945] should_failslab+0xc2/0x120 [ 208.551061][ T9945] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 208.552410][ T9945] ? __pfx_mark_lock+0x10/0x10 [ 208.553611][ T9945] ? __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 208.555127][ T9945] __kvm_mmu_topup_memory_cache+0x18f/0x600 [ 208.556653][ T9945] mmu_topup_memory_caches+0x22/0xd0 [ 208.558054][ T9945] kvm_mmu_load+0xda/0x21f0 [ 208.559276][ T9945] ? mark_held_locks+0x9f/0xe0 [ 208.560526][ T9945] ? kvm_apic_has_interrupt+0xb6/0x190 [ 208.561939][ T9945] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 208.563461][ T9945] ? kvm_guest_time_update+0x780/0xeb0 [ 208.564894][ T9945] ? clear_pending_if_disabled+0xa9/0x210 [ 208.566386][ T9945] ? __pfx_kvm_mmu_load+0x10/0x10 [ 208.567691][ T9945] ? kvm_cpu_has_injectable_intr+0x9b/0x1a0 [ 208.569240][ T9945] ? kvm_check_and_inject_events+0x725/0x12e0 [ 208.570840][ T9945] vcpu_run+0x2e2e/0x4c00 [ 208.571999][ T9945] ? __pfx_vmx_vcpu_load_vmcs+0x10/0x10 [ 208.573423][ T9945] ? __pfx_vcpu_run+0x10/0x10 [ 208.574647][ T9945] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 208.576092][ T9945] ? rcu_is_watching+0x12/0xc0 [ 208.577338][ T9945] ? trace_lock_acquire+0x14e/0x1f0 [ 208.578743][ T9945] ? __local_bh_enable_ip+0xa4/0x120 [ 208.580153][ T9945] ? lockdep_hardirqs_on+0x7c/0x110 [ 208.581489][ T9945] ? kvm_arch_vcpu_ioctl_run+0x150/0x1740 [ 208.582970][ T9945] ? lock_acquire+0x2f/0xb0 [ 208.584149][ T9945] ? kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 208.585642][ T9945] kvm_arch_vcpu_ioctl_run+0x44a/0x1740 [ 208.587109][ T9945] kvm_vcpu_ioctl+0x6ce/0x1520 [ 208.588339][ T9945] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 208.589763][ T9945] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 208.591104][ T9945] ? tomoyo_path_number_perm+0x190/0x5b0 [ 208.592566][ T9945] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 208.594135][ T9945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 208.595713][ T9945] ? do_vfs_ioctl+0x513/0x1950 [ 208.596968][ T9945] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 208.598288][ T9945] ? __pfx_lock_release+0x10/0x10 [ 208.599606][ T9945] ? trace_lock_acquire+0x14e/0x1f0 [ 208.600970][ T9945] kvm_vcpu_compat_ioctl+0x210/0x3f0 [ 208.602340][ T9945] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 208.603856][ T9945] ? __fget_files+0x206/0x3a0 [ 208.605137][ T9945] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 208.606668][ T9945] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 208.608015][ T9945] __do_fast_syscall_32+0x73/0x120 [ 208.609385][ T9945] do_fast_syscall_32+0x32/0x80 [ 208.610703][ T9945] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 208.612337][ T9945] RIP: 0023:0xf742e579 [ 208.613414][ T9945] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 208.618336][ T9945] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 208.620535][ T9945] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 208.622662][ T9945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.624770][ T9945] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 208.626737][ T9945] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 208.628674][ T9945] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 208.630649][ T9945] [ 209.909698][ T9980] 9pnet: Could not find request transport: f [ 210.006006][ T35] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 210.016574][ T9982] FAULT_INJECTION: forcing a failure. [ 210.016574][ T9982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.036037][ T9982] CPU: 3 UID: 0 PID: 9982 Comm: syz.4.1086 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 210.038763][ T9982] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 210.041525][ T9982] Call Trace: [ 210.042431][ T9982] [ 210.043211][ T9982] dump_stack_lvl+0x16c/0x1f0 [ 210.044464][ T9982] should_fail_ex+0x497/0x5b0 [ 210.045714][ T9982] _copy_from_user+0x2e/0xd0 [ 210.046934][ T9982] io_uring_setup+0xab/0x3230 [ 210.048175][ T9982] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 210.049744][ T9982] ? __pfx_io_uring_setup+0x10/0x10 [ 210.051105][ T9982] ? __fget_files+0x206/0x3a0 [ 210.052353][ T9982] ? ksys_write+0x1ba/0x250 [ 210.053545][ T9982] ? __pfx_ksys_write+0x10/0x10 [ 210.054828][ T9982] __ia32_sys_io_uring_setup+0x97/0x140 [ 210.056622][ T9982] __do_fast_syscall_32+0x73/0x120 [ 210.058492][ T9982] do_fast_syscall_32+0x32/0x80 [ 210.060264][ T9982] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.061951][ T9982] RIP: 0023:0xf742e579 [ 210.063000][ T9982] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 210.067926][ T9982] RSP: 002b:00000000f50f552c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 210.070085][ T9982] RAX: ffffffffffffffda RBX: 0000000000006165 RCX: 0000000020000300 [ 210.072122][ T9982] RDX: 00000000f726f5e4 RSI: 0000000000000001 RDI: 00000000f50f558c [ 210.074178][ T9982] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000000000000 [ 210.076638][ T9982] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 210.079497][ T9982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.081570][ T9982] [ 210.127118][ T9985] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1087'. [ 210.176380][ T35] usb 5-1: Using ep0 maxpacket: 16 [ 210.183100][ T35] usb 5-1: config 1 interface 0 altsetting 92 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 210.187382][ T35] usb 5-1: config 1 interface 0 altsetting 92 endpoint 0x81 has invalid maxpacket 58588, setting to 1024 [ 210.190390][ T35] usb 5-1: config 1 interface 0 altsetting 92 endpoint 0x2 has an invalid bInterval 184, changing to 11 [ 210.193117][ T35] usb 5-1: config 1 interface 0 has no altsetting 0 [ 210.196974][ T35] usb 5-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.40 [ 210.199562][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.201937][ T35] usb 5-1: Product: à°‰ [ 210.203077][ T35] usb 5-1: Manufacturer: Ѓ [ 210.204353][ T35] usb 5-1: SerialNumber: 뽲딎㇂뜬é댉★꒥蠒贤ä§é™†î€­é—ƒè’†î«®Ó­ã–櫰朻᧸︜æ€ì±¿ëš„à·á¡³íš³å©«ì¿¥ã„½é³Ÿà»†ã¬£ [ 210.211461][ T9973] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 210.415104][ T9973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.419793][ T9974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.419846][ T9973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.422043][ T9974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.446958][ T35] usbhid 5-1:1.0: can't add hid device: -71 [ 210.449322][ T35] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 210.456039][ T35] usb 5-1: USB disconnect, device number 9 [ 210.609228][ T9988] syz.2.1088[9988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.609333][ T9988] syz.2.1088[9988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.613318][ T9988] syz.2.1088[9988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.055313][T10011] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1094'. [ 211.065400][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 211.070695][ T39] kauditd_printk_skb: 43 callbacks suppressed [ 211.070707][ T39] audit: type=1800 audit(1732974045.063:76): pid=10014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1095" name="bus" dev="9p" ino=36837533 res=0 errno=0 [ 211.086152][ T5943] Bluetooth: hci1: command 0x0406 tx timeout [ 211.891934][ T39] audit: type=1326 audit(1732974045.883:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.2.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 211.903091][ T39] audit: type=1326 audit(1732974045.883:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.2.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 211.909914][ T39] audit: type=1326 audit(1732974045.883:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.2.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 211.917762][ T39] audit: type=1326 audit(1732974045.883:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.2.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 211.925537][ T39] audit: type=1326 audit(1732974045.883:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10027 comm="syz.2.1099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 211.993329][T10034] tmpfs: Unknown parameter 'hUÔúJlwayâ' [ 212.542803][T10027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.682022][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.683536][T10042] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.684554][ T5983] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 212.697834][ T5983] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 213.162844][ T5943] Bluetooth: hci2: command 0x0405 tx timeout [ 213.659621][T10067] input: syz0 as /devices/virtual/input/input84 [ 213.797588][T10072] syzkaller1: entered promiscuous mode [ 213.800067][T10072] syzkaller1: entered allmulticast mode [ 213.803414][T10072] FAULT_INJECTION: forcing a failure. [ 213.803414][T10072] name failslab, interval 1, probability 0, space 0, times 0 [ 213.808185][T10072] CPU: 0 UID: 0 PID: 10072 Comm: syz.4.1110 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 213.811907][T10072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 213.814708][T10072] Call Trace: [ 213.815584][T10072] [ 213.816357][T10072] dump_stack_lvl+0x16c/0x1f0 [ 213.817588][T10072] should_fail_ex+0x497/0x5b0 [ 213.818846][T10072] ? fs_reclaim_acquire+0xae/0x150 [ 213.820245][T10072] should_failslab+0xc2/0x120 [ 213.821500][T10072] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 213.823304][T10072] ? __alloc_skb+0x2b3/0x380 [ 213.825070][T10072] ? __pfx_mark_lock+0x10/0x10 [ 213.826841][T10072] __alloc_skb+0x2b3/0x380 [ 213.828481][T10072] ? __pfx___alloc_skb+0x10/0x10 [ 213.830290][T10072] ? find_held_lock+0x2d/0x110 [ 213.832033][T10072] ? __might_fault+0x13b/0x190 [ 213.833758][T10072] alloc_skb_with_frags+0xe4/0x850 [ 213.835614][T10072] ? __might_fault+0xe3/0x190 [ 213.837317][T10072] sock_alloc_send_pskb+0x7f1/0x980 [ 213.839188][T10072] ? _copy_from_iter+0x159/0x1400 [ 213.841014][T10072] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 213.843075][T10072] ? hlock_class+0x4e/0x130 [ 213.844745][T10072] ? __lock_acquire+0xcc5/0x3c40 [ 213.846542][T10072] ? iov_iter_advance+0x7d/0x6c0 [ 213.848349][T10072] tun_get_user+0xd3b/0x3e30 [ 213.850038][T10072] ? __pfx_tun_get_user+0x10/0x10 [ 213.851873][T10072] ? find_held_lock+0x2d/0x110 [ 213.853614][T10072] ? __pfx_lock_release+0x10/0x10 [ 213.855462][T10072] tun_chr_write_iter+0xdc/0x210 [ 213.857248][T10072] vfs_write+0x5ae/0x1150 [ 213.858815][T10072] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 213.860807][T10072] ? __pfx_vfs_write+0x10/0x10 [ 213.862553][T10072] ? __fget_files+0x40/0x3a0 [ 213.864246][T10072] ksys_write+0x12b/0x250 [ 213.865757][T10072] ? __pfx_ksys_write+0x10/0x10 [ 213.867532][T10072] __do_fast_syscall_32+0x73/0x120 [ 213.869298][T10072] do_fast_syscall_32+0x32/0x80 [ 213.871073][T10072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 213.873232][T10072] RIP: 0023:0xf742e579 [ 213.874752][T10072] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 213.881622][T10072] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 213.884706][T10072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000300 [ 213.887585][T10072] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 213.890410][T10072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.893202][T10072] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 213.895909][T10072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.898703][T10072] [ 213.949296][T10074] syzkaller1: entered promiscuous mode [ 213.950902][T10074] syzkaller1: entered allmulticast mode [ 214.215538][T10084] syzkaller1: entered promiscuous mode [ 214.217228][T10084] syzkaller1: entered allmulticast mode [ 214.282837][T10086] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.285136][T10086] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.287678][T10086] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.289971][T10086] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.293437][T10086] vxlan0: entered promiscuous mode [ 214.295407][T10086] vxlan0: entered allmulticast mode [ 214.300756][T10086] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.303148][T10086] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.305453][T10086] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.308214][T10086] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.825697][T10108] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1121'. [ 216.113084][T10111] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 216.115507][T10111] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 216.120528][T10111] vhci_hcd vhci_hcd.0: Device attached [ 216.883979][ T832] vhci_hcd: vhci_device speed not set [ 216.961933][ T832] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 217.239988][T10112] vhci_hcd: connection reset by peer [ 217.241805][ T102] vhci_hcd: stop threads [ 217.242983][ T102] vhci_hcd: release socket [ 217.246351][ T102] vhci_hcd: disconnect device [ 217.345372][T10133] syz.0.1125[10133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.345553][T10133] syz.0.1125[10133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.348878][T10133] syz.0.1125[10133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 217.825179][T10140] macvlan0: mtu less than device minimum [ 217.830630][T10140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1128'. [ 218.277720][T10150] macvlan0: mtu less than device minimum [ 218.279977][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 218.287360][T10150] FAULT_INJECTION: forcing a failure. [ 218.287360][T10150] name failslab, interval 1, probability 0, space 0, times 0 [ 218.290783][T10150] CPU: 0 UID: 0 PID: 10150 Comm: syz.4.1130 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 218.293453][T10150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 218.296221][T10150] Call Trace: [ 218.297086][T10150] [ 218.297888][T10150] dump_stack_lvl+0x16c/0x1f0 [ 218.299154][T10150] should_fail_ex+0x497/0x5b0 [ 218.300445][T10150] ? fs_reclaim_acquire+0xae/0x150 [ 218.301854][T10150] should_failslab+0xc2/0x120 [ 218.303097][T10150] __kmalloc_noprof+0xce/0x4f0 [ 218.304376][T10150] ? tomoyo_encode2+0x100/0x3e0 [ 218.305680][T10150] tomoyo_encode2+0x100/0x3e0 [ 218.306925][T10150] tomoyo_realpath_from_path+0x1a7/0x710 [ 218.308379][T10150] ? tomoyo_path_number_perm+0x235/0x5b0 [ 218.310021][T10150] tomoyo_path_number_perm+0x248/0x5b0 [ 218.311472][T10150] ? tomoyo_path_number_perm+0x235/0x5b0 [ 218.312949][T10150] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 218.314536][T10150] ? __pfx_lock_release+0x10/0x10 [ 218.315853][T10150] ? trace_lock_acquire+0x14e/0x1f0 [ 218.317217][T10150] ? lock_acquire+0x2f/0xb0 [ 218.318413][T10150] ? __fget_files+0x40/0x3a0 [ 218.319670][T10150] ? __fget_files+0x206/0x3a0 [ 218.320904][T10150] security_file_ioctl_compat+0x9b/0x240 [ 218.322377][T10150] __do_compat_sys_ioctl+0x4e/0x2c0 [ 218.323789][T10150] __do_fast_syscall_32+0x73/0x120 [ 218.325144][T10150] do_fast_syscall_32+0x32/0x80 [ 218.326444][T10150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 218.328108][T10150] RIP: 0023:0xf742e579 [ 218.329188][T10150] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 218.334172][T10150] RSP: 002b:00000000f50d457c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 218.336339][T10150] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000005411 [ 218.338425][T10150] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 218.340511][T10150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 218.342574][T10150] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 218.344636][T10150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 218.346742][T10150] [ 218.349112][T10150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 218.410547][T10154] syz.0.1129[10154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.410817][T10154] syz.0.1129[10154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.415228][T10154] syz.0.1129[10154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.729107][T10157] syzkaller1: entered promiscuous mode [ 218.733459][T10157] syzkaller1: entered allmulticast mode [ 219.290032][T10174] syz.2.1135[10174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.290226][T10174] syz.2.1135[10174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.293391][T10174] syz.2.1135[10174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 219.315855][T10176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 219.538166][T10180] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 220.101490][ T39] audit: type=1326 audit(1732974054.093:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.0.1142" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f86579 code=0x0 [ 220.109564][T10190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1140'. [ 220.158524][T10194] netlink: 'syz.4.1144': attribute type 1 has an invalid length. [ 220.160590][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 220.211088][T10197] fuse: Bad value for 'fd' [ 220.308946][T10201] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input85 [ 221.060933][T10208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1147'. [ 221.275039][T10213] syz.0.1148[10213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.600152][ T39] audit: type=1400 audit(1732974055.593:83): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":d/seq" pid=10214 comm="syz.2.1150" [ 221.629394][T10218] cgroup: fork rejected by pids controller in /syz2 [ 222.316193][ T832] vhci_hcd: vhci_device speed not set [ 222.318537][T10640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1152'. [ 222.588454][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1153'. [ 222.937783][T10660] bpf_get_probe_write_proto: 2 callbacks suppressed [ 222.937795][T10660] syz.4.1157[10660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.939843][T10660] syz.4.1157[10660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.943412][T10660] syz.4.1157[10660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.222165][T10667] syz.2.1160[10667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.225327][T10667] syz.2.1160[10667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.228640][T10667] syz.2.1160[10667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.762225][T10669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.767499][T10669] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 223.789677][T10669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 223.791449][T10669] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 223.797941][T10669] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 223.803564][T10669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.805405][T10669] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 223.811502][T10669] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 223.972256][ T39] audit: type=1326 audit(1732974057.963:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 223.977842][ T39] audit: type=1326 audit(1732974057.963:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 223.983228][ T39] audit: type=1326 audit(1732974057.963:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 223.988904][ T39] audit: type=1326 audit(1732974057.963:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 223.994329][ T39] audit: type=1326 audit(1732974057.963:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 224.001457][ T39] audit: type=1326 audit(1732974057.963:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 224.007266][ T39] audit: type=1326 audit(1732974057.963:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 224.013745][ T39] audit: type=1326 audit(1732974057.963:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.2.1168" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 224.140536][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 224.150311][T10693] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 224.193736][T10704] openvswitch: netlink: Missing valid actions attribute. [ 224.196261][T10704] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.826130][ T6008] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 224.989178][ T6008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.992085][ T6008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.994580][ T6008] usb 9-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 224.997191][ T6008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.001244][ T6008] usb 9-1: config 0 descriptor?? [ 225.271170][T10720] netlink: 'syz.4.1176': attribute type 4 has an invalid length. [ 225.285388][T10720] netlink: 'syz.4.1176': attribute type 4 has an invalid length. [ 225.306813][T10720] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1176'. [ 225.539016][T10733] syz.2.1179[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.539293][T10733] syz.2.1179[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.542577][T10733] syz.2.1179[10733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 225.727670][ T5943] Bluetooth: hci1: command 0x0406 tx timeout [ 225.739511][T10737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 225.806070][ T5943] Bluetooth: hci2: command 0x0405 tx timeout [ 225.808135][ T5943] Bluetooth: hci3: command 0x0405 tx timeout [ 225.890149][T10741] fuse: Unknown parameter 'Þuá0x0000000000000005' [ 226.262621][T10761] input: syz0 as /devices/virtual/input/input86 [ 226.270398][T10764] xt_connbytes: Forcing CT accounting to be enabled [ 226.272681][T10764] SET target dimension over the limit! [ 226.310922][T10766] 9pnet: p9_errstr2errno: server reported unknown error i# [ 226.316419][T10766] befs: (nullb0): No write support. Marking filesystem read-only [ 226.319850][T10766] befs: (nullb0): invalid magic header [ 226.322238][T10767] befs: (nullb0): No write support. Marking filesystem read-only [ 226.324577][T10767] befs: (nullb0): invalid magic header [ 226.614229][T10779] syz.0.1195[10779] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.099243][ T6008] usbhid 9-1:0.0: can't add hid device: -71 [ 227.107043][ T6008] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 227.126471][ T6008] usb 9-1: USB disconnect, device number 3 [ 227.500525][T10801] netlink: 'syz.0.1203': attribute type 2 has an invalid length. [ 227.503237][T10801] netlink: 'syz.0.1203': attribute type 9 has an invalid length. [ 227.505643][T10801] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1203'. [ 227.727442][T10808] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.729797][T10808] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.732083][T10808] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.734430][T10808] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.737327][T10808] vxlan0: entered promiscuous mode [ 227.738814][T10808] vxlan0: entered allmulticast mode [ 227.744081][T10808] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.747024][T10808] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.749292][T10808] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.751587][T10808] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 227.795000][T10813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 227.806854][ T66] Bluetooth: hci1: command 0x0406 tx timeout [ 227.886199][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 227.886214][ T5943] Bluetooth: hci2: command 0x0405 tx timeout [ 227.905116][T10828] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1213'. [ 227.908828][T10828] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1213'. [ 227.970197][T10826] kvm: kvm [10825]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4ce00000012 [ 227.973034][T10826] kvm: kvm [10825]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4ce00000812 [ 228.415164][T10845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.418295][T10845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.500128][T10848] No control pipe specified [ 228.545598][T10845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.548687][T10845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.629174][T10845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.632133][T10845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.766924][T10845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.769625][T10845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.858589][T10845] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.860901][T10845] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.876773][T10845] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.879027][T10845] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.888410][T10845] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.892634][T10845] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.904259][T10845] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.908396][T10845] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.624427][T10865] FAULT_INJECTION: forcing a failure. [ 229.624427][T10865] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 229.630314][T10865] CPU: 2 UID: 0 PID: 10865 Comm: syz.4.1222 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 229.633002][T10865] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 229.635863][T10865] Call Trace: [ 229.637015][T10865] [ 229.638070][T10865] dump_stack_lvl+0x16c/0x1f0 [ 229.639717][T10865] should_fail_ex+0x497/0x5b0 [ 229.641356][T10865] ? fs_reclaim_acquire+0xae/0x150 [ 229.643151][T10865] should_fail_alloc_page+0xe7/0x130 [ 229.645033][T10865] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 229.647201][T10865] __alloc_pages_noprof+0x190/0x25b0 [ 229.649066][T10865] ? stack_trace_save+0x95/0xd0 [ 229.650531][T10865] ? __pfx_stack_trace_save+0x10/0x10 [ 229.651919][T10865] ? stack_depot_save_flags+0x28/0x900 [ 229.653727][T10865] ? __pfx_udp_sendmsg+0x10/0x10 [ 229.655460][T10865] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 229.657439][T10865] ? kasan_save_stack+0x33/0x60 [ 229.659182][T10865] ? __kasan_kmalloc+0xaa/0xb0 [ 229.660924][T10865] ? __kmalloc_noprof+0x21a/0x4f0 [ 229.662691][T10865] ? copy_splice_read+0x1a8/0xb90 [ 229.664471][T10865] ? do_splice_read+0x282/0x370 [ 229.666191][T10865] ? splice_direct_to_actor+0x2a4/0xa40 [ 229.667937][T10865] ? do_splice_direct+0x178/0x250 [ 229.669278][T10865] ? do_sendfile+0xaed/0xe30 [ 229.670574][T10865] alloc_pages_bulk_noprof+0x72b/0x10b0 [ 229.672508][T10865] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 229.674613][T10865] ? trace_kmalloc+0x2d/0xd0 [ 229.676231][T10865] ? __kmalloc_noprof+0x23b/0x4f0 [ 229.677995][T10865] ? copy_splice_read+0x1a8/0xb90 [ 229.679768][T10865] copy_splice_read+0x1e3/0xb90 [ 229.681481][T10865] ? __pfx_copy_splice_read+0x10/0x10 [ 229.683360][T10865] ? __pfx_copy_splice_read+0x10/0x10 [ 229.685254][T10865] do_splice_read+0x282/0x370 [ 229.686921][T10865] splice_direct_to_actor+0x2a4/0xa40 [ 229.688783][T10865] ? __pfx_direct_splice_actor+0x10/0x10 [ 229.690746][T10865] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 229.692810][T10865] ? __fget_files+0x1fc/0x3a0 [ 229.692836][T10865] do_splice_direct+0x178/0x250 [ 229.692854][T10865] ? __pfx_do_splice_direct+0x10/0x10 [ 229.692871][T10865] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 229.692889][T10865] ? bpf_lsm_file_permission+0x9/0x10 [ 229.692904][T10865] ? security_file_permission+0x71/0x210 [ 229.692927][T10865] do_sendfile+0xaed/0xe30 [ 229.692948][T10865] ? __pfx_do_sendfile+0x10/0x10 [ 229.692965][T10865] ? __fget_files+0x206/0x3a0 [ 229.692988][T10865] __ia32_compat_sys_sendfile+0x1e7/0x230 [ 229.693008][T10865] ? ksys_write+0x1ba/0x250 [ 229.693025][T10865] ? __pfx___ia32_compat_sys_sendfile+0x10/0x10 [ 229.693053][T10865] __do_fast_syscall_32+0x73/0x120 [ 229.693074][T10865] do_fast_syscall_32+0x32/0x80 [ 229.693092][T10865] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.693114][T10865] RIP: 0023:0xf742e579 [ 229.693128][T10865] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 229.693142][T10865] RSP: 002b:00000000f511657c EFLAGS: 00000292 ORIG_RAX: 00000000000000bb [ 229.693159][T10865] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000003 [ 229.693169][T10865] RDX: 0000000000000000 RSI: 0000000000023893 RDI: 0000000000000000 [ 229.693179][T10865] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.693189][T10865] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 229.693198][T10865] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.693218][T10865] [ 229.953704][T10881] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.956235][T10881] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.958511][T10881] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.960804][T10881] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 229.965385][T10881] vxlan0: entered promiscuous mode [ 229.966937][ T66] Bluetooth: hci2: command 0x0405 tx timeout [ 229.968543][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 229.970478][T10881] vxlan0: entered allmulticast mode [ 229.976976][T10881] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.979411][T10881] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.981697][T10881] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.984072][T10881] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 230.055017][T10882] bpf_get_probe_write_proto: 2 callbacks suppressed [ 230.055033][T10882] syz.0.1227[10882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.057713][T10882] syz.0.1227[10882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.061608][T10882] syz.0.1227[10882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.629503][T10901] syz.4.1234[10901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.632627][T10901] syz.4.1234[10901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.635697][T10901] syz.4.1234[10901] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.940032][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1235'. [ 232.046357][ T5955] Bluetooth: hci2: command 0x0405 tx timeout [ 232.063596][ T39] kauditd_printk_skb: 56 callbacks suppressed [ 232.063625][ T39] audit: type=1326 audit(1732974066.043:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10926 comm="syz.4.1243" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742e579 code=0x0 [ 232.707219][T10928] ================================================================== [ 232.709299][T10928] BUG: KASAN: vmalloc-out-of-bounds in push_insn_history+0x615/0x690 [ 232.711321][T10928] Write of size 4 at addr ffffc900252f9010 by task syz.4.1243/10928 [ 232.714665][T10928] [ 232.715633][T10928] CPU: 3 UID: 0 PID: 10928 Comm: syz.4.1243 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 232.718253][T10928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.720906][T10928] Call Trace: [ 232.721772][T10928] [ 232.722532][T10928] dump_stack_lvl+0x116/0x1f0 [ 232.723725][T10928] print_report+0xc3/0x620 [ 232.724875][T10928] ? __virt_addr_valid+0x5e/0x590 [ 232.726163][T10928] kasan_report+0xd9/0x110 [ 232.727343][T10928] ? push_insn_history+0x615/0x690 [ 232.728684][T10928] ? push_insn_history+0x615/0x690 [ 232.730041][T10928] push_insn_history+0x615/0x690 [ 232.731347][T10928] do_check_common+0xb78/0xd540 [ 232.732633][T10928] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.734006][T10928] ? __pfx_do_check_common+0x10/0x10 [ 232.735396][T10928] ? kvfree+0x47/0x50 [ 232.736460][T10928] ? check_cfg+0x403/0x840 [ 232.737623][T10928] bpf_check+0x77c2/0xc9b0 [ 232.738803][T10928] ? hlock_class+0x4e/0x130 [ 232.740030][T10928] ? __pfx_bpf_check+0x10/0x10 [ 232.741301][T10928] ? find_held_lock+0x2d/0x110 [ 232.742578][T10928] ? bpf_prog_load+0xd45/0x2670 [ 232.743864][T10928] ? __pfx_lock_release+0x10/0x10 [ 232.745199][T10928] ? trace_lock_acquire+0x14e/0x1f0 [ 232.746576][T10928] ? bpf_prog_load+0xd45/0x2670 [ 232.747863][T10928] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.749236][T10928] ? read_tsc+0x9/0x20 [ 232.750329][T10928] ? ktime_get_with_offset+0x20f/0x3a0 [ 232.751768][T10928] ? bpf_obj_name_cpy+0x156/0x1b0 [ 232.753092][T10928] bpf_prog_load+0xe3f/0x2670 [ 232.754345][T10928] ? __pfx_bpf_prog_load+0x10/0x10 [ 232.755695][T10928] ? find_held_lock+0x2d/0x110 [ 232.756964][T10928] ? __might_fault+0x13b/0x190 [ 232.758235][T10928] ? __might_fault+0xe3/0x190 [ 232.759478][T10928] __sys_bpf+0x5677/0x57a0 [ 232.760662][T10928] ? __pfx___sys_bpf+0x10/0x10 [ 232.761936][T10928] ? __pfx___lock_acquire+0x10/0x10 [ 232.763302][T10928] ? do_futex+0x123/0x350 [ 232.764457][T10928] ? __pfx_do_futex+0x10/0x10 [ 232.765714][T10928] ? xfd_validate_state+0x5d/0x180 [ 232.767073][T10928] ? rcu_is_watching+0x12/0xc0 [ 232.768348][T10928] __ia32_sys_bpf+0x76/0xe0 [ 232.769561][T10928] __do_fast_syscall_32+0x73/0x120 [ 232.770914][T10928] do_fast_syscall_32+0x32/0x80 [ 232.772200][T10928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.773866][T10928] RIP: 0023:0xf742e579 [ 232.774942][T10928] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.779960][T10928] RSP: 002b:00000000f50f557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 232.782139][T10928] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0 [ 232.784214][T10928] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.786301][T10928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.788319][T10928] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 232.790389][T10928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.792462][T10928] [ 232.793286][T10928] [ 232.793935][T10928] The buggy address belongs to the virtual mapping at [ 232.793935][T10928] [ffffc900252d9000, ffffc900252fb000) created by: [ 232.793935][T10928] kvrealloc_noprof+0xfc/0x150 [ 232.798500][T10928] [ 232.799131][T10928] The buggy address belongs to the physical page: [ 232.800792][T10928] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x68293 [ 232.803069][T10928] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 232.804958][T10928] raw: 04fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 232.807191][T10928] raw: 0000000000000002 0000000000000000 00000001ffffffff 0000000000000000 [ 232.809411][T10928] page dumped because: kasan: bad access detected [ 232.811080][T10928] page_owner tracks the page as allocated [ 232.812565][T10928] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 10928, tgid 10926 (syz.4.1243), ts 232707072984, free_ts 231636229748 [ 232.817098][T10928] post_alloc_hook+0x2d1/0x350 [ 232.818366][T10928] get_page_from_freelist+0xfce/0x2f80 [ 232.819797][T10928] __alloc_pages_noprof+0x6a6/0x25b0 [ 232.821187][T10928] alloc_pages_mpol_noprof+0x2c9/0x610 [ 232.822634][T10928] __vmalloc_node_range_noprof+0x724/0x1530 [ 232.824199][T10928] __kvmalloc_node_noprof+0x14f/0x1a0 [ 232.825620][T10928] kvrealloc_noprof+0xfc/0x150 [ 232.826875][T10928] push_insn_history+0x2ac/0x690 [ 232.828176][T10928] do_check_common+0xb78/0xd540 [ 232.829462][T10928] bpf_check+0x77c2/0xc9b0 [ 232.830647][T10928] bpf_prog_load+0xe3f/0x2670 [ 232.831878][T10928] __sys_bpf+0x5677/0x57a0 [ 232.833048][T10928] __ia32_sys_bpf+0x76/0xe0 [ 232.834250][T10928] __do_fast_syscall_32+0x73/0x120 [ 232.835598][T10928] do_fast_syscall_32+0x32/0x80 [ 232.836886][T10928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.838554][T10928] page last free pid 1487 tgid 1487 stack trace: [ 232.840201][T10928] free_unref_page+0x661/0x1080 [ 232.841481][T10928] vfree+0x17a/0x890 [ 232.842524][T10928] delayed_vfree_work+0x56/0x70 [ 232.843808][T10928] process_one_work+0x958/0x1b30 [ 232.845166][T10928] worker_thread+0x6c8/0xf00 [ 232.846434][T10928] kthread+0x2c1/0x3a0 [ 232.847695][T10928] ret_from_fork+0x45/0x80 [ 232.848864][T10928] ret_from_fork_asm+0x1a/0x30 [ 232.850135][T10928] [ 232.850770][T10928] Memory state around the buggy address: [ 232.852228][T10928] ffffc900252f8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.854300][T10928] ffffc900252f8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 232.856379][T10928] >ffffc900252f9000: 00 00 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 232.858444][T10928] ^ [ 232.859646][T10928] ffffc900252f9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 232.861718][T10928] ffffc900252f9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 232.863778][T10928] ================================================================== [ 232.868843][T10928] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 232.870775][T10928] CPU: 3 UID: 0 PID: 10928 Comm: syz.4.1243 Not tainted 6.12.0-syzkaller-11677-g2ba9f676d0a2 #0 [ 232.873450][T10928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 232.876314][T10928] Call Trace: [ 232.877194][T10928] [ 232.877998][T10928] dump_stack_lvl+0x3d/0x1f0 [ 232.879209][T10928] panic+0x71d/0x800 [ 232.880243][T10928] ? __pfx_panic+0x10/0x10 [ 232.881412][T10928] ? preempt_schedule_thunk+0x1a/0x30 [ 232.882817][T10928] ? preempt_schedule_common+0x44/0xc0 [ 232.884252][T10928] check_panic_on_warn+0xab/0xb0 [ 232.885525][T10928] end_report+0x117/0x180 [ 232.886657][T10928] kasan_report+0xe9/0x110 [ 232.887824][T10928] ? push_insn_history+0x615/0x690 [ 232.889162][T10928] ? push_insn_history+0x615/0x690 [ 232.890509][T10928] push_insn_history+0x615/0x690 [ 232.891803][T10928] do_check_common+0xb78/0xd540 [ 232.893122][T10928] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.894490][T10928] ? __pfx_do_check_common+0x10/0x10 [ 232.895859][T10928] ? kvfree+0x47/0x50 [ 232.896896][T10928] ? check_cfg+0x403/0x840 [ 232.898062][T10928] bpf_check+0x77c2/0xc9b0 [ 232.899224][T10928] ? hlock_class+0x4e/0x130 [ 232.900414][T10928] ? __pfx_bpf_check+0x10/0x10 [ 232.901676][T10928] ? find_held_lock+0x2d/0x110 [ 232.902926][T10928] ? bpf_prog_load+0xd45/0x2670 [ 232.904222][T10928] ? __pfx_lock_release+0x10/0x10 [ 232.905366][T10928] ? trace_lock_acquire+0x14e/0x1f0 [ 232.906542][T10928] ? bpf_prog_load+0xd45/0x2670 [ 232.907720][T10928] ? lockdep_hardirqs_on+0x7c/0x110 [ 232.909010][T10928] ? read_tsc+0x9/0x20 [ 232.910052][T10928] ? ktime_get_with_offset+0x20f/0x3a0 [ 232.911437][T10928] ? bpf_obj_name_cpy+0x156/0x1b0 [ 232.912694][T10928] bpf_prog_load+0xe3f/0x2670 [ 232.913898][T10928] ? __pfx_bpf_prog_load+0x10/0x10 [ 232.915167][T10928] ? find_held_lock+0x2d/0x110 [ 232.916372][T10928] ? __might_fault+0x13b/0x190 [ 232.917588][T10928] ? __might_fault+0xe3/0x190 [ 232.918775][T10928] __sys_bpf+0x5677/0x57a0 [ 232.919912][T10928] ? __pfx___sys_bpf+0x10/0x10 [ 232.921123][T10928] ? __pfx___lock_acquire+0x10/0x10 [ 232.922410][T10928] ? do_futex+0x123/0x350 [ 232.923537][T10928] ? __pfx_do_futex+0x10/0x10 [ 232.924708][T10928] ? xfd_validate_state+0x5d/0x180 [ 232.926017][T10928] ? rcu_is_watching+0x12/0xc0 [ 232.927257][T10928] __ia32_sys_bpf+0x76/0xe0 [ 232.928397][T10928] __do_fast_syscall_32+0x73/0x120 [ 232.929667][T10928] do_fast_syscall_32+0x32/0x80 [ 232.930868][T10928] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 232.932507][T10928] RIP: 0023:0xf742e579 [ 232.933537][T10928] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 232.938233][T10928] RSP: 002b:00000000f50f557c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 232.940292][T10928] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000200017c0 [ 232.942252][T10928] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 232.944248][T10928] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 232.946260][T10928] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 232.948216][T10928] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 232.950185][T10928] [ 232.951499][T10928] Kernel Offset: disabled [ 232.952590][T10928] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:41:06 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000000 RBX=ffffea00018f6580 RCX=ffffffff81dde39e RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000000007 RBP=ffffea00018f6580 RSP=ffffc900252bf5e8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000003 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff818e0013 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020033000 CR3=000000000db7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000ea4d43 RBX=0000000000000001 RCX=ffffffff8b1a7cc9 RDX=0000000000000000 RSI=ffffffff8b4cd8a0 RDI=ffffffff8bb16820 RBP=ffffed10039de910 RSP=ffffc9000047fe08 R8 =0000000000000001 R9 =ffffed10056a6fed R10=ffff88802b537f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cef4880 R14=ffffffff901d1650 R15=0000000000000000 RIP=ffffffff8b1a90af RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f5132c40 CR3=000000005a608000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b63ed00 RCX=ffffffff816b72ed RDX=1ffff110056c7da2 RSI=0000000000000004 RDI=ffffc900238c76a8 RBP=1ffff92004718ed1 RSP=ffffc900238c76e8 R8 =0000000000000001 R9 =fffff52004718ed5 R10=0000000000000003 R11=0000000000000000 R12=ffff8880229c4880 R13=ffff88802b63ed10 R14=0000000000000002 R15=ffff88802b63ed00 RIP=ffffffff816b738c RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020030000 CR3=000000006617e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8509d1e5 RDI=ffffffff9a66c280 RBP=ffffffff9a66c240 RSP=ffffc90025296ff8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230303963666657 R12=0000000000000000 R13=0000000000000037 R14=ffffffff8509d180 R15=0000000000000000 RIP=ffffffff8509d20f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7481230 CR3=000000006617e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000