last executing test programs: 3m38.337880708s ago: executing program 3 (id=109): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001680)={0x46, 0x9, 0x0, 0x7, 0x4, 0x0, [{0x8, 0x6, 0xe5}, {0xf, 0x7fffffff, 0x40000000, '\x00', 0x1000}, {0x800, 0x5, 0xfffffffffffffff6, '\x00', 0x300}, {0x7}]}) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000500)=0xffff0080) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x49811, 0x49851}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) sendto$packet(r2, &(0x7f0000000400)="05", 0x1, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000000)=0x3) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB]) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) r10 = syz_io_uring_setup(0x80002f00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x7f}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x0, 0x0) r14 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r14, &(0x7f0000000e00)='* ', 0x2) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r10, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f00000000c0)=0x1c, 0x80000) 3m37.334594314s ago: executing program 3 (id=117): mount(0x0, 0x0, &(0x7f0000000000)='tracefs\x00', 0x10005, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m36.049519203s ago: executing program 3 (id=122): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) close(0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='./backin', 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r6, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000580)='1\x00', 0x1) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)={0x30, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd181}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r8 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r8], 0x3c}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000180)={0x9, 0x2, 0x1, 0x0, 0x1}) socket$phonet_pipe(0x23, 0x5, 0x2) r10 = socket$inet6(0xa, 0x3, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x518, 0x388, 0x0, 0x1f4, 0x0, 0x0, 0x450, 0x450, 0x450, 0x450, 0x450, 0x6, 0x0, {[{{@ipv6={@local, @private1, [0x0, 0x0, 0xff000000], [0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {0xff}, {}, 0x21}, 0x0, 0xf8, 0x11c, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{}, {}, {0x2, 0x0, 0x7}, 0x800001}}}, {{@uncond, 0x0, 0xa4, 0xcc, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x9}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x42}, @loopback, [0xff, 0xffffffff, 0xff, 0xff], [0xffffff00, 0x0, 0xff000000], '\x00', 'sit0\x00', {0xff}, {0xff}, 0x88, 0x4, 0x2, 0x2}, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x0, 0x40}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x574) setsockopt$sock_int(r10, 0x1, 0xa, &(0x7f0000000080)=0x2, 0x4) 3m35.649268516s ago: executing program 3 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x3f) 3m34.770771138s ago: executing program 3 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x0, 0x181}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = syz_open_dev$vim2m(&(0x7f0000000240), 0xa4d1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) pwritev2(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x73b2abab56ff3d7e) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, r5, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x70}}}}, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x44, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x100}, {0x8}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x10}, {0x8}, {0x8, 0x0, 0xfffffff9}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x8}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2}]}, 0x74}}, 0x48008) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_usbip_server_init(0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000300), 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket(0x29, 0x5, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2400000002030101000051f6ab342580a9480000000000000000000408000540000000000800034000000001"], 0x24}, 0x1, 0x0, 0x0, 0x8092}, 0x48000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x119, 0x9, 0x0, 0x33) r10 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev/kmsg\x00', 0x1, 0x16) lseek(r10, 0xfffffffffffffeff, 0x4) 3m34.408780282s ago: executing program 3 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x100000000000035) tkill(r4, 0x12) ptrace(0x4206, r4) syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca23, 0x10000, 0xfffffff7, 0x212}, &(0x7f0000000100), &(0x7f0000ff4000), &(0x7f0000000000)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c7f3f4be5c6e9e79cc7b3392204e11537000000020601080000000000000000000000000d0003006c6973743a736574000000001d0005000000000005000100a0000000050a0400000000000900020073797a32000000001400078008000640002f81000800174000000000c1052535bd99fdc744ca3b719d6178c84dda0392674461ce6df580217cde040780f6d20a535b0f6640604199f0a2b9ff05a71962ae29c964b8638285c594808ce75850e045baf8188ded"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 3m34.3042512s ago: executing program 32 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x100000000000035) tkill(r4, 0x12) ptrace(0x4206, r4) syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca23, 0x10000, 0xfffffff7, 0x212}, &(0x7f0000000100), &(0x7f0000ff4000), &(0x7f0000000000)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c7f3f4be5c6e9e79cc7b3392204e11537000000020601080000000000000000000000000d0003006c6973743a736574000000001d0005000000000005000100a0000000050a0400000000000900020073797a32000000001400078008000640002f81000800174000000000c1052535bd99fdc744ca3b719d6178c84dda0392674461ce6df580217cde040780f6d20a535b0f6640604199f0a2b9ff05a71962ae29c964b8638285c594808ce75850e045baf8188ded"], 0x5c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000740)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 16.884837324s ago: executing program 0 (id=1288): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r7, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept4(r7, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a80)={r9, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r10, 0x0) pipe(&(0x7f0000000080)) 16.470433372s ago: executing program 0 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x81000) sendmsg$NL80211_CMD_GET_SCAN(r0, 0x0, 0x4004804) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x2, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5de6af0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xf83cb676ac42ebc1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) chmod(&(0x7f0000000100)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x8) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0}, 0x4fd}], 0x1, 0x20, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lremovexattr(0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2275, &(0x7f00000018c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000000c0)='vivid.0', 0x7) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 16.214917219s ago: executing program 4 (id=1295): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x81000) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe, 0x45}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4004804) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0x2, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000170000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f5de6af0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xfffffffffffffffd, {0x0, 0xf83cb676ac42ebc1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) chmod(&(0x7f0000000100)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x8) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000007bc0)=[{{0x0, 0x0, 0x0}, 0x4fd}], 0x1, 0x20, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lremovexattr(0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2275, &(0x7f00000018c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r7, &(0x7f00000000c0)='vivid.0', 0x7) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 15.691222303s ago: executing program 0 (id=1298): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x1, 0x800, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='team_slave_1\x00') mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)={0x0, 0x2}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x75, 0x0, 0x1, [@nested={0x4, 0x80}, @typed={0x8, 0x117, 0x0, 0x0, @fd}, @generic="27ca574f23"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x4008af13, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x1, 0x20, "af133b2042387b28a0e1d7fd1b856f300ba7634365012814f804890b85a26128"}) write(r1, &(0x7f0000000040)="2a3a6d6f643ae80f3d011fcb6d14bd7b9067981a73a85c4b5d7afa863d7f9078070e122a225fba9d87798b2183eab56111506a7626a539f908da1b98eddf8057", 0x40) 15.559440299s ago: executing program 0 (id=1301): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r7, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a80)={r10, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0x0) pipe(&(0x7f0000000080)) 15.370410521s ago: executing program 4 (id=1302): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fe5bdf253e0000000e0001006e657464657673696d000000280002006e657464657673696d3000001c0082007263655f6d61635f69735f6d756c746963617374000500830001000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x200088a0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 15.240926432s ago: executing program 0 (id=1303): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) gettid() r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd700004000000050000000600011c05004000e8080900020000000800bf63666a47c5c20115ee2c392ea70b00"/72], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 14.921325203s ago: executing program 0 (id=1305): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @loopback, @multicast, @private=0x2}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500", @ANYRES32], 0x1c}}, 0x40000) chdir(0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$nci(r0, 0x0, 0x0) 14.849698508s ago: executing program 33 (id=1305): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @loopback, @multicast, @private=0x2}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="19020000000000000000000000000000850000002a000000180100002020702500000000002020207b1af9ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000950000000000000070723abb634de14affc5548455969e909e1b69731498c502f11a1aa6f6a17a6580c33c80ae77af37063fac6347a1fbceb5fd37dae3e51888e2ec070ef8c986356b5192b87386ad30a200f925099a8756bd76e827cbb34924cab9b322000cda4309"], &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000000000000500", @ANYRES32], 0x1c}}, 0x40000) chdir(0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x9000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read$nci(r0, 0x0, 0x0) 14.02024553s ago: executing program 4 (id=1310): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x1, 0x800, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='team_slave_1\x00') mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)={0x0, 0x2}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x75, 0x0, 0x1, [@nested={0x4, 0x80}, @typed={0x8, 0x117, 0x0, 0x0, @fd}, @generic="27ca574f23"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x4008af13, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x1, 0x20, "af133b2042387b28a0e1d7fd1b856f300ba7634365012814f804890b85a26128"}) write(r1, &(0x7f0000000040)="2a3a6d6f643ae80f3d011fcb6d14bd7b9067981a73a85c4b5d7afa863d7f9078070e122a225fba9d87798b2183eab56111506a7626a539f908da1b98eddf8057", 0x40) 13.6608224s ago: executing program 4 (id=1312): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r7, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept4(r7, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a80)={r9, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r10, 0x0) pipe(&(0x7f0000000080)) 13.510350337s ago: executing program 1 (id=1313): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000180)={0x3, 0x0, 0x3, {0x2, @raw_data="f73067ab987e18d64946d83360f164e54932c924173c426d4ac79c43b40c2ac934d22c1987eddb8a666aeaae4dfa8c90556dc1279800f0736e2a50633825a708305eef6461778c24c350e1a78c725ce4c2424a6f7e02b0fa381e684acae36e68e58a894e115f8a4045f23b211285a8a1fd3791cc236c039742d415a449ca6b1e4ad546bba1deea715b44879185e26c63317efeb12de77aeaa78ba3965a16946836a688610f4e299919775d2cfed4172d42aafdb8e74d88bb4627e7dd9c5e0d4cbf85423d52a3e7d3"}, 0x8001}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x405, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r5, 0x0, 0x4004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x14, 0x3b, 0x301, 0xa70bd1d, 0x25dfdbff, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r7) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGRAWPHYS(r8, 0x80404805, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000018000000", @ANYRES32=r9, @ANYBLOB="00000000000000f0a91500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) write$P9_RSTATFS(r2, &(0x7f0000005f40)={0x43, 0x9, 0x1, {0x4, 0x8, 0x9107, 0xfffb, 0xc, 0x0, 0x5, 0x9, 0x1000005}}, 0x43) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) 13.029934208s ago: executing program 4 (id=1314): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010101, 0x4908, 0x0, 0x1}}, 0x44) r1 = socket$inet(0x2, 0x1, 0x6) connect(r1, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000540), 0x8) write$cgroup_devices(r2, &(0x7f0000000500)={'b', ' *:* ', 'rwm\x00'}, 0xa) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x6, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r6, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r10, 0x4) r11 = openat$dlm_control(0xffffff9c, &(0x7f0000000600), 0x800, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x1, &(0x7f0000000340)=@raw=[@call={0x85, 0x0, 0x0, 0x65}], &(0x7f0000000380)='GPL\x00', 0x3, 0xad, &(0x7f00000003c0)=""/173, 0x41000, 0x13, '\x00', r8, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x10, 0x9, 0x6}, 0x10, r10, r11}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r7}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x14, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) 11.150480057s ago: executing program 1 (id=1318): r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES8=r1], 0x7c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYBLOB="625e4e5618618de16a76a44f0dfcb340d166c848a8ef0f00b62fa56ccbc7f1f726050d9ebaf2006f8487f7b33f9dc1e84d963746b9ee4097ff664785ecbe360d9f467f31f2128f96da20c078b1d8fb6b40a5ea54f0199d47478ff349f86adfc620141b31f5", @ANYRES32=r0, @ANYRES8=r2, @ANYBLOB="cbe08b784ff4e33b3c5039400b3d9829a0f90a7e5e5ce1a4910d93da9de81662df9af5c4c485cca13a7c2c001575fd03a0eab1e9265528c2088bed12e0f9c6b34fd8df9dd4187fe2a6152bece6b13239dd0c961520dfec283bcc80926fbb14d29ad6b6daca40584dd3a3cbc1468513107e4272b5b5b13b1f40996a717316db62e17797d38c24e525f9174ef05d8b514e875bb9cc0cb6c514463ae68090b74ce1b4c7dc99628e4b1f104400d227a22d5fddd31eee836bcecf1f145b2b429a42186c0783462f1fd19fa6f0c31ebc26853fa9c49c3cad4c6f5525f446c11f05c5733e4f7ce4c4bf32cba549f7f955a971d8b96aad91"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0xffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0601, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x8, 0x54903) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r6], 0x24}}, 0x4040) syz_open_dev$mtd(&(0x7f0000000480), 0xfffffffa, 0x23a002) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000002c0)) 11.150059851s ago: executing program 4 (id=1319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) syz_emit_vhci(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x800) sendto$packet(r6, &(0x7f0000000a40)="d8b8f5a2289fedded39f79c78869a3cda57dc252f75ff3c104a126ad48adce8f0e98a950a526353fa8d1f1f8066b53786aca597ae0c003fd21a6587ac5520045", 0x40, 0x24008805, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 11.149878568s ago: executing program 34 (id=1319): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) syz_emit_vhci(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x800) sendto$packet(r6, &(0x7f0000000a40)="d8b8f5a2289fedded39f79c78869a3cda57dc252f75ff3c104a126ad48adce8f0e98a950a526353fa8d1f1f8066b53786aca597ae0c003fd21a6587ac5520045", 0x40, 0x24008805, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 11.149684185s ago: executing program 1 (id=1320): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x4e8, 0x3e4, 0x524, 0x114, 0x114, 0x3e4, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@mcast2, @empty, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty, 0x4e22}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x544) syz_emit_vhci(0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r6 = accept4(r5, 0x0, 0x0, 0x800) sendto$packet(r6, &(0x7f0000000a40)="d8b8f5a2289fedded39f79c78869a3cda57dc252f75ff3c104a126ad48adce8f0e98a950a526353fa8d1f1f8066b53786aca597ae0c003fd21a6587ac5520045", 0x40, 0x24008805, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 9.995901988s ago: executing program 1 (id=1325): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r7, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept4(r7, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a80)={r9, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r10, 0x0) pipe(&(0x7f0000000080)) 9.498192376s ago: executing program 1 (id=1327): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r7, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) accept4(r7, &(0x7f0000000280)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000340)=0x80, 0x80800) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a80)={r10, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0x0) pipe(&(0x7f0000000080)) 9.040650206s ago: executing program 1 (id=1328): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fe5bdf253e0000000e0001006e657464657673696d000000280002006e657464657673696d3000001c0082007263655f6d61635f69735f6d756c746963617374000500830001000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x200088a0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 8.966391818s ago: executing program 35 (id=1328): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fe5bdf253e0000000e0001006e657464657673696d000000280002006e657464657673696d3000001c0082007263655f6d61635f69735f6d756c746963617374000500830001000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x200088a0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) 6.970768823s ago: executing program 2 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000240)={0x4, 0x1, 0x1e, 0x22, 0x100, &(0x7f0000001100)="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"}) (fail_nth: 1) 6.061010147s ago: executing program 2 (id=1337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="14000200200100"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001a0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c0000001800010606000000000000000a000000030001000000000008000f00e8030000080004"], 0x2c}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, &(0x7f0000000900)="001122334455", 0x6, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (fail_nth: 1) 5.887666738s ago: executing program 2 (id=1338): add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000300)="0fbc0c33530bde30697af232e6c80b41a26c09", 0x13, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'erspan0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x80, 0x8, 0x64a6, 0xfffffffd, {{0xb, 0x4, 0x2, 0x2d, 0x2c, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@generic={0x94, 0xa, "3ca36cd1bd7341bd"}, @ssrr={0x89, 0xb, 0xc2, [@remote, @local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x57, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x18}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) setreuid(0xee00, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000004c0), 0x1200004, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xf000, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x13) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7f03) unshare(0x6a040000) mmap(&(0x7f00002ff000/0x1000)=nil, 0x1000, 0x2000004, 0xe7ee32aa24a8b8f2, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.721051758s ago: executing program 5 (id=1341): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x20000880) 5.122229239s ago: executing program 5 (id=1342): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="380100002100010000000000010000000000000000000000000000000000b12d450b00000000000000000000000000bb00000000000000000000000000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000640101000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000002e33020000000000000a000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc0200"/225], 0x138}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='measure #', 0x9) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newtfilter={0x34, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) recvfrom(r0, &(0x7f00000005c0)=""/82, 0x52, 0x40000040, &(0x7f0000000640)=@un=@file={0x0, './security/ima/policy\x00'}, 0x80) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 4.779536875s ago: executing program 5 (id=1343): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) request_key(&(0x7f0000000280)='big_key\x00', 0x0, 0x0, 0xffffffffffffffff) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee01, 0x1000) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x40a02}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x44}}, 0x40800) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) r6 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000100)={0x0, 0x0, 0x40}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="bafefb03d0685c", 0x7}, {&(0x7f0000000300)="8f2ce3290e7140f91694111c099300fdc984ffd65af6df65a60c7f860a05023f85be5ce7ed6fecd847b5431e72a64f538a0bf4cf3990f64be3d70a67d2db7a9c895765c1149fbb6c36775b762b2b", 0x4e}, {&(0x7f00000003c0)="a758990c4ad10f3e175ee1f161", 0xd}, {&(0x7f0000000400)="fbe1a60bf04606755d4c952ddb176109079f66f3d192b7ec37d1d85350071223ce08b90d5b", 0x25}], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.97260654s ago: executing program 7 (id=1329): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000180)={0x3, 0x0, 0x3, {0x2, @raw_data="f73067ab987e18d64946d83360f164e54932c924173c426d4ac79c43b40c2ac934d22c1987eddb8a666aeaae4dfa8c90556dc1279800f0736e2a50633825a708305eef6461778c24c350e1a78c725ce4c2424a6f7e02b0fa381e684acae36e68e58a894e115f8a4045f23b211285a8a1fd3791cc236c039742d415a449ca6b1e4ad546bba1deea715b44879185e26c63317efeb12de77aeaa78ba3965a16946836a688610f4e299919775d2cfed4172d42aafdb8e74d88bb4627e7dd9c5e0d4cbf85423d52a3e7d3"}, 0x8001}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x11}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x3}, &(0x7f0000000040)=[0x0], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) 2.81358248s ago: executing program 5 (id=1348): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x19, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x1b8, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x2}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc4f}, @TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf9, 0xe, 0x1, 0x5, 0x1, 0x1, 0x10000, 0x4}}, {0xc, 0x2, [0x101, 0x8, 0x1, 0x7fff]}}, {{0x1c, 0x1, {0x80, 0x8, 0x8, 0x8, 0x2, 0x0, 0x2, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x1, 0x6, 0x0, 0x9, 0x1, 0x7, 0x4, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0xa8, 0x3, 0x1, 0x8, 0x0, 0xc5, 0x4, 0x6}}, {0x10, 0x2, [0x10, 0xa, 0x0, 0x7, 0x3, 0xfff]}}, {{0x1c, 0x1, {0xd, 0x7, 0xffff, 0x6, 0x3, 0x92, 0x7, 0x8}}, {0x14, 0x2, [0x8001, 0x8, 0xe960, 0x101, 0x9, 0x0, 0xb, 0x7]}}, {{0x1c, 0x1, {0x40, 0x1, 0x9, 0x7, 0x0, 0x1, 0x6a, 0x3}}, {0xa, 0x2, [0x1, 0x1, 0x6]}}, {{0x1c, 0x1, {0x1, 0x2, 0xff, 0x7, 0x2, 0x1, 0x3, 0x5}}, {0xe, 0x2, [0x3b0e, 0xa3, 0x6, 0x3, 0x7fff]}}, {{0x1c, 0x1, {0x6, 0x6, 0x0, 0x9, 0x1, 0xfffffff7, 0x9, 0x1}}, {0x6, 0x2, [0x401]}}, {{0x1c, 0x1, {0x4, 0xa1, 0x4, 0x100, 0x2, 0x10, 0x40, 0x6}}, {0x10, 0x2, [0x51, 0x800, 0xf, 0x1000, 0x5, 0x6]}}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r4, 0x1, 0x2, 0x6, @local}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r9 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00j'], 0x20}}, 0x0) syz_usb_connect$uac1(0x6, 0x71, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003000000085a1d0101400001020304000000010100000a2401000000020102090401000001020000090401030101"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) ioctl$BTRFS_IOC_ENCODED_READ(r10, 0x80789440, &(0x7f0000000a80)={&(0x7f0000000a40)=[{&(0x7f0000000440)="5b8e1f101e3bc51a6cd16e66ca63174faa77ec31b91ad3992a028085b7b8a1e2242c566b1f266b03dad31460387df99594686dc397bf5de7e2105a16ed3a4ac753df1e1f6946ed26b67cb4b02113f923555db81d50deb7c52a9bff1bdaa0e81975ed6e94ab44d89f57e10583407048dda5e9f3504a4dde4335a0c073da547fcb1ed501fea23955bb3b1e21c2c99092c0a71fe850c7c110d4afca6403f6fd5785", 0xa0}, {&(0x7f0000000500)}, {&(0x7f0000000800)="1924d369c3c15d5f31e86199438523c9a8a0583d56c48c130070bc1504963a1f7fbffc377d48ec583e1711c020473881fdd21e51039ee2aa4df63741f7335af6967d851281796aec53df72db81c7a5200d0c890bb04755ec10b82bae13db7373fac16b873236a0494e6f71e846227a2e2de8475ab28141d7af86a51ed2abc183cdcf253cbde79b316b9523178025ec6a7d07f8c9c9cd4b951096f3b504ee42fc36fbb2fcef4c13378bf0984ad912bb65a0822aa4b390a696bdb9fae564", 0xbd}, {&(0x7f00000008c0)="7bf47d9cf9f4348c6c3389872d9cb31793420c8b4483c2f6ce35e34d868a9871dcfec9ff4448b561eed9358831c73f112a7cecc1896cb22846b87fb9ffe763e05610691f7ab9be88205b69c8d915120751c534548ec390e9a73ffa52b86a59bfa40a7f3817b32d61fa94cd50d8af59b4771d0ae33a652eb0a7ab11022509ff947e22e367c55155cf6071fbea08c182e058e2eff7e9fb75b16f956b14e28d8269099eb70d52fe1832082b63ec7e57046d419d31a5f350cf80f8a6edb79f3d5874d3d2aa0295f197fb942b781a6bfd203c78698e95a12ffa2181797c970b11780600c165f8cfbe92e3602b9d161e99d0df61cb15ee0faf00c2", 0xf8}, {&(0x7f00000009c0)="b85bf84d80800c53980a7ef4bde66731e7161eb3a992a5f7fd21b0add66f9060dff34cc31e1b6d1521ec7c01bc8b629e51101e49f558be0e23153282ff2842b853a89b0d2d38e1f8a072ab80ab4b9b1538d650c51ba581ac683b555aa6a29648d75d845aeba7a8a73ad7cf34d8c64d29eea203b83803d9ab40abf208ad2c", 0x7e}], 0x5, 0x4, 0x0, 0xffffffffffffffff, 0x100000001, 0xe23, 0x2, 0x1}) sendmsg$can_raw(r9, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r8}, 0x10, &(0x7f0000000340)={&(0x7f0000000200)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "817ba97dfcab7b12"}, 0x10}, 0x1, 0x0, 0x0, 0x20008090}, 0x20004800) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000208010800000000000000000a0000013c00048008000140000000010800014000000006080001400000000008000140000000040800014d0000000508000140000000060800014000002b48050003003a0000000900010073797a3000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24009004}, 0x60840) 2.791397578s ago: executing program 2 (id=1349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="380100002100010000000000010000000000000000000000000000000000b12d450b00000000000000000000000000bb00000000000000000000000000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000640101000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000002e33020000000000000a000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc0200"/225], 0x138}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='measure #', 0x9) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newtfilter={0x34, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) recvfrom(r0, &(0x7f00000005c0)=""/82, 0x52, 0x40000040, &(0x7f0000000640)=@un=@file={0x0, './security/ima/policy\x00'}, 0x80) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 2.586827929s ago: executing program 7 (id=1350): r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r1, @ANYRES8=r1], 0x7c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000740)=ANY=[@ANYRESHEX, @ANYBLOB="625e4e5618618de16a76a44f0dfcb340d166c848a8ef0f00b62fa56ccbc7f1f726050d9ebaf2006f8487f7b33f9dc1e84d963746b9ee4097ff664785ecbe360d9f467f31f2128f96da20c078b1d8fb6b40a5ea54f0199d47478ff349f86adfc620141b31f5", @ANYRES32=r0, @ANYRES8=r2, @ANYBLOB="cbe08b784ff4e33b3c5039400b3d9829a0f90a7e5e5ce1a4910d93da9de81662df9af5c4c485cca13a7c2c001575fd03a0eab1e9265528c2088bed12e0f9c6b34fd8df9dd4187fe2a6152bece6b13239dd0c961520dfec283bcc80926fbb14d29ad6b6daca40584dd3a3cbc1468513107e4272b5b5b13b1f40996a717316db62e17797d38c24e525f9174ef05d8b514e875bb9cc0cb6c514463ae68090b74ce1b4c7dc99628e4b1f104400d227a22d5fddd31eee836bcecf1f145b2b429a42186c0783462f1fd19fa6f0c31ebc26853fa9c49c3cad4c6f5525f446c11f05c5733e4f7ce4c4bf32cba549f7f955a971d8b96aad91"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x1, &(0x7f0000000200)=0xffffffff) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0601, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x8, 0x54903) r7 = socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8=r6], 0x24}}, 0x4040) syz_open_dev$mtd(&(0x7f0000000480), 0xfffffffa, 0x23a002) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000002c0)) 804.555444ms ago: executing program 2 (id=1351): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000ac0)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x7a}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x4044044) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ftruncate(r7, 0x4a8e) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INTERRUPT(r7, &(0x7f00000028c0)={0x10, 0xfffffffffffffff5}, 0x8e4a) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r9, 0x84009422, &(0x7f0000000e80)={0x0, 0x0, {}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000a80)={r10, 0x4, 0x9}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0x0) pipe(&(0x7f0000000080)) 791.834115ms ago: executing program 6 (id=1352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="200100001200010000020000000000001000b900"], 0x120}], 0x1}, 0x4000800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x20, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x0) pselect6(0x40, &(0x7f0000000000)={0x1, 0xf951, 0x3, 0x7f, 0x72, 0x2, 0x9, 0x9}, &(0x7f0000000100)={0x2000000, 0x1, 0xfff, 0xe6ae, 0x8, 0x0, 0x420, 0x769}, &(0x7f0000000140)={0xff, 0xfffffffffffffffc, 0x7, 0x2, 0xb6a, 0x100000001, 0xfffffffffffffff7, 0xc}, &(0x7f0000000180)={0x77359400}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x8]}, 0x8}) 768.198767ms ago: executing program 7 (id=1353): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x1, 0x800, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)='team_slave_1\x00') mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)={0x0, 0x2}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x1c, 0x1, 0x0, 0x1, [@nested={0x15, 0x75, 0x0, 0x1, [@nested={0x4, 0x80}, @typed={0x8, 0x117, 0x0, 0x0, @fd}, @generic="27ca574f23"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) ioctl$AUTOFS_IOC_PROTOVER(r3, 0x4008af13, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb4}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0xfff1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x1, 0x20, "af133b2042387b28a0e1d7fd1b856f300ba7634365012814f804890b85a26128"}) write(r1, &(0x7f0000000040)="2a3a6d6f643ae80f3d011fcb6d14bd7b9067981a73a85c4b5d7afa863d7f9078070e122a225fba9d87798b2183eab56111506a7626a539f908da1b98eddf8057", 0x40) 628.777209ms ago: executing program 6 (id=1354): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) write$P9_RVERSION(r0, &(0x7f0000000180)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) 627.392397ms ago: executing program 7 (id=1355): r0 = socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newtaction={0x204, 0x30, 0x1, 0x0, 0x0, {}, [{0x1f0, 0x1, [@m_mpls={0xb0, 0x12, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x104, 0x1, 0x4, 0x800}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x40ac3}, @TCA_MPLS_TTL={0x5, 0x7, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1b}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8d6fe}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88ca}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4190, 0x4, 0x0, 0x5, 0x9}, 0x1}}]}, {0x21, 0x6, "b7be011f6fa20bd828b0b394493b348d959afe54cef603ea7ec3b7e312"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x13c, 0x15, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x200, 0x1, 0x3, 0x40}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfffffe00, 0x6, 0x9ea0, 0xaa}, 0x2}}]}, {0xd0, 0x6, "6095349c4967caf792a9e99d4af275ab47f3edb166597d3e04246d543240ee62e682e0a24940d5823dbf99fbafb8d4e7f21a3d9db706066dcb797917b907cc0445ce3a1ac7ed54dba2b4b266a6726a137b57d10971a73cfc4e38ba2b9dabc7fa29dc15e70f2b73195a217a1178ea52d0c17a786127a987f99c18edd1c8f4f26481b65648529de782253d32c98b42271c9dd23abf48e06586a6bd69b07480c5a1d4342d24b68ad54a3fbfa6775ee94d7e431388e2f65b8787de7b9dcbaa5446d250090f12e64b30eb9df252e2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0xfffffffb) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd06, &(0x7f0000000540)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79706f6f6c") ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4544f0fffcff30c000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1e, &(0x7f0000000300)=""/30, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x4, 0xb, 0x902c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f000000c340)={0xa802100, 0x0, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) r6 = dup(0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000040)={&(0x7f0000001b80)=[{0x8, 0x5410, 0x0, 0x0}], 0x1}) setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, &(0x7f0000000180)=0x1, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) 520.71496ms ago: executing program 6 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0) 469.908358ms ago: executing program 6 (id=1357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}}, 0x0) (fail_nth: 1) 381.209072ms ago: executing program 6 (id=1358): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f0000000180)={0x3, 0x0, 0x3, {0x2, @raw_data="f73067ab987e18d64946d83360f164e54932c924173c426d4ac79c43b40c2ac934d22c1987eddb8a666aeaae4dfa8c90556dc1279800f0736e2a50633825a708305eef6461778c24c350e1a78c725ce4c2424a6f7e02b0fa381e684acae36e68e58a894e115f8a4045f23b211285a8a1fd3791cc236c039742d415a449ca6b1e4ad546bba1deea715b44879185e26c63317efeb12de77aeaa78ba3965a16946836a688610f4e299919775d2cfed4172d42aafdb8e74d88bb4627e7dd9c5e0d4cbf85423d52a3e7d3"}, 0x8001}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x11}, 0x94) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) listns(&(0x7f0000000000)={0x20, 0x0, 0x3}, &(0x7f0000000040)=[0x0], 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$binder(0x0, &(0x7f00000021c0)='.\x00', &(0x7f0000002200), 0x1200850, &(0x7f0000002240)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) 180.98564ms ago: executing program 5 (id=1359): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="380100002100010000000000010000000000000000000000000000000000b12d450b00000000000000000000000000bb00000000000000000000000000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ac1e0001000000000000000000000000e0000002000000000000000000000000640101000000000000000000000000006c0100000635000002000200000000000000000000000000000000000a010100000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000002e33020000000000000a000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000fc0200"/225], 0x138}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='measure #', 0x9) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)=@newtfilter={0x34, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) recvfrom(r0, &(0x7f00000005c0)=""/82, 0x52, 0x40000040, &(0x7f0000000640)=@un=@file={0x0, './security/ima/policy\x00'}, 0x80) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x4000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x3, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0xe9eb89d253be8b8b, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 100.665964ms ago: executing program 6 (id=1360): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fe5bdf253e0000000e0001006e657464657673696d000000280002006e657464657673696d3000001c0082007263655f6d61635f69735f6d756c746963617374000500830001000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x200088a0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) chdir(0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x339) getsockopt(r0, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002780), 0x2280) fcntl$setstatus(r9, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48) 1.762386ms ago: executing program 2 (id=1361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfff, 0x999, 0x7, 0x800, 0xfff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240408a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 1) 0s ago: executing program 5 (id=1362): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073", @ANYRESOCT=r3], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x80a, 0x1) openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r5 = openat$cuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setstatus(r5, 0x4, 0x4ac00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8982) r9 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r9, 0x40046109, 0x0) ioctl$CEC_S_MODE(r8, 0x40046109, 0x0) (async) ioctl$CEC_S_MODE(r8, 0x40046109, 0x0) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) ioprio_get$uid(0x3, 0x0) (async) ioprio_get$uid(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) kernel console output (not intermixed with test programs): [ 221.400327][ T61] option 9-1:9.20: device disconnected [ 221.417775][ T42] audit: type=1800 audit(1786380159.589:1076): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=169807 res=0 errno=0 [ 221.667856][ T42] audit: type=1800 audit(1786380159.839:1077): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 221.729761][ T42] audit: type=1800 audit(1786380159.899:1078): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 221.758157][ T42] audit: type=1800 audit(1786380159.919:1079): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170219 res=0 errno=0 [ 221.773942][ T42] audit: type=1800 audit(1786380159.949:1080): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 221.805335][ T42] audit: type=1800 audit(1786380159.959:1081): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 221.981529][ T5744] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 222.222958][ T42] audit: type=1400 audit(1786380160.369:1082): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9445 comm="syz.0.985" [ 222.506481][ T9456] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 222.508594][ T9456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.512048][ T9456] vhci_hcd vhci_hcd.0: Device attached [ 222.749032][ T9457] vhci_hcd: connection closed [ 222.833808][ T5814] vhci_hcd vhci_hcd.2: stop threads [ 222.838172][ T5814] vhci_hcd vhci_hcd.2: release socket [ 222.842551][ T5884] usb 42-1: SetAddress Request (6) to port 0 [ 222.845608][ T5814] vhci_hcd vhci_hcd.2: disconnect device [ 222.848048][ T5884] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 222.872014][ T5884] usb 42-1: enqueue for inactive port 0 [ 222.895045][ T9460] ima: policy update completed [ 223.427488][ T5884] usb usb42-port1: attempt power cycle [ 223.588099][ T9482] pim6reg: entered allmulticast mode [ 223.602629][ T9484] FAULT_INJECTION: forcing a failure. [ 223.602629][ T9484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.606967][ T9484] CPU: 2 UID: 0 PID: 9484 Comm: syz.0.993 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.606992][ T9484] Tainted: [L]=SOFTLOCKUP [ 223.606997][ T9484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 223.607006][ T9484] Call Trace: [ 223.607011][ T9484] [ 223.607017][ T9484] dump_stack_lvl+0x100/0x190 [ 223.607044][ T9484] should_fail_ex.cold+0x5/0xa [ 223.607065][ T9484] _copy_from_user+0x2e/0xd0 [ 223.607093][ T9484] get_compat_msghdr+0xb3/0x480 [ 223.607120][ T9484] ? __pfx_get_compat_msghdr+0x10/0x10 [ 223.607153][ T9484] ___sys_sendmsg+0x1b6/0x1e0 [ 223.607173][ T9484] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.607203][ T9484] ? find_held_lock+0x2b/0x80 [ 223.607236][ T9484] __sys_sendmsg+0x160/0x210 [ 223.607260][ T9484] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.607289][ T9484] ? __pfx_ksys_write+0x10/0x10 [ 223.607312][ T9484] __do_fast_syscall_32+0xe7/0x970 [ 223.607336][ T9484] ? lockdep_hardirqs_on+0x78/0x100 [ 223.607351][ T9484] do_fast_syscall_32+0x32/0x70 [ 223.607367][ T9484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 223.607382][ T9484] RIP: 0023:0xf70befec [ 223.607411][ T9484] Code: Unable to access opcode bytes at 0xf70befc2. [ 223.607416][ T9484] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 223.607428][ T9484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 223.607434][ T9484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 223.607440][ T9484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.607446][ T9484] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 223.607452][ T9484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.607465][ T9484] [ 223.614767][ T9482] pim6reg: left allmulticast mode [ 224.201811][ T9495] ima: policy update completed [ 224.318197][ T9500] netlink: zone id is out of range [ 224.534443][ T9508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1003'. [ 224.623901][ T5884] usb usb42-port1: unable to enumerate USB device [ 225.007953][ T9503] 9pnet_virtio: no channels available for device syz [ 225.011825][ T9503] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 225.016146][ T9503] overlayfs: overlapping lowerdir path [ 225.356472][ T9519] pim6reg: entered allmulticast mode [ 225.702615][ T9519] pim6reg: left allmulticast mode [ 226.532143][ T42] kauditd_printk_skb: 34 callbacks suppressed [ 226.532157][ T42] audit: type=1800 audit(1786380164.699:1117): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 226.558707][ T42] audit: type=1800 audit(1786380164.719:1118): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 226.615360][ T42] audit: type=1800 audit(1786380164.789:1119): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 226.631502][ T42] audit: type=1800 audit(1786380164.799:1120): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170667 res=0 errno=0 [ 226.675490][ T42] audit: type=1800 audit(1786380164.849:1121): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 226.692889][ T9532] netlink: zone id is out of range [ 226.743916][ T42] audit: type=1807 audit(1786380164.919:1122): action=measure res=1 [ 226.853767][ T9534] ima: policy update completed [ 226.855538][ T42] audit: type=1802 audit(1786380165.029:1123): pid=9534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.4.1007" res=1 errno=0 [ 226.969506][ T42] audit: type=1800 audit(1786380165.139:1124): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 226.982444][ T42] audit: type=1800 audit(1786380165.159:1125): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 226.991995][ T42] audit: type=1800 audit(1786380165.159:1126): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=170680 res=0 errno=0 [ 227.033651][ T9546] pim6reg: entered allmulticast mode [ 227.037173][ T9549] pim6reg: left allmulticast mode [ 227.192574][ T9543] pim6reg: entered allmulticast mode [ 227.194951][ T9550] pim6reg: left allmulticast mode [ 227.952920][ T9527] 9pnet_virtio: no channels available for device syz [ 227.959109][ T9527] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 227.963102][ T9527] overlayfs: overlapping lowerdir path [ 228.404908][ T9568] netlink: zone id is out of range [ 228.900801][ T9579] 9pnet_virtio: no channels available for device syz [ 229.000382][ T9579] 9pnet_virtio: no channels available for device syz [ 229.003808][ T9579] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 229.007787][ T9579] overlayfs: overlapping lowerdir path [ 229.342247][ T9593] FAULT_INJECTION: forcing a failure. [ 229.342247][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.356824][ T9593] CPU: 1 UID: 0 PID: 9593 Comm: syz.2.1028 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.356845][ T9593] Tainted: [L]=SOFTLOCKUP [ 229.356849][ T9593] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.356856][ T9593] Call Trace: [ 229.356860][ T9593] [ 229.356864][ T9593] dump_stack_lvl+0x100/0x190 [ 229.356883][ T9593] should_fail_ex.cold+0x5/0xa [ 229.356896][ T9593] _copy_from_user+0x2e/0xd0 [ 229.356913][ T9593] get_compat_msghdr+0xb3/0x480 [ 229.356932][ T9593] ? __pfx_get_compat_msghdr+0x10/0x10 [ 229.356962][ T9593] ___sys_sendmsg+0x1b6/0x1e0 [ 229.356981][ T9593] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.357009][ T9593] ? find_held_lock+0x2b/0x80 [ 229.357037][ T9593] __sys_sendmsg+0x160/0x210 [ 229.357060][ T9593] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.357089][ T9593] ? __pfx_ksys_write+0x10/0x10 [ 229.357109][ T9593] __do_fast_syscall_32+0xe7/0x970 [ 229.357126][ T9593] ? lockdep_hardirqs_on+0x78/0x100 [ 229.357141][ T9593] do_fast_syscall_32+0x32/0x70 [ 229.357157][ T9593] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 229.357171][ T9593] RIP: 0023:0xf7ff5fec [ 229.357186][ T9593] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 229.357191][ T9593] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 229.357202][ T9593] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000540 [ 229.357208][ T9593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.357214][ T9593] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.357220][ T9593] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.357226][ T9593] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.357238][ T9593] [ 229.482413][ T9598] netlink: zone id is out of range [ 229.545397][ T9601] FAULT_INJECTION: forcing a failure. [ 229.545397][ T9601] name failslab, interval 1, probability 0, space 0, times 0 [ 229.549783][ T9601] CPU: 3 UID: 0 PID: 9601 Comm: syz.0.1032 Tainted: G L syzkaller #0 PREEMPT(full) [ 229.549802][ T9601] Tainted: [L]=SOFTLOCKUP [ 229.549806][ T9601] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 229.549812][ T9601] Call Trace: [ 229.549816][ T9601] [ 229.549821][ T9601] dump_stack_lvl+0x100/0x190 [ 229.549841][ T9601] should_fail_ex.cold+0x5/0xa [ 229.549854][ T9601] should_failslab+0xc2/0x120 [ 229.549870][ T9601] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 229.549884][ T9601] ? __alloc_skb+0x5b7/0x710 [ 229.549899][ T9601] ? __alloc_skb+0x140/0x710 [ 229.549915][ T9601] __alloc_skb+0x140/0x710 [ 229.549928][ T9601] ? __alloc_skb+0x5b7/0x710 [ 229.549941][ T9601] ? __pfx___alloc_skb+0x10/0x10 [ 229.549956][ T9601] ? find_held_lock+0x2b/0x80 [ 229.549971][ T9601] alloc_skb_with_frags+0xdd/0x760 [ 229.549988][ T9601] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 229.550006][ T9601] ? kernel_text_address+0x8d/0x100 [ 229.550024][ T9601] sock_alloc_send_pskb+0x801/0x980 [ 229.550042][ T9601] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 229.550055][ T9601] ? _parse_integer_limit+0x1ac/0x220 [ 229.550074][ T9601] tun_get_user+0x904/0x3c20 [ 229.550093][ T9601] ? __pfx_tun_get_user+0x10/0x10 [ 229.550106][ T9601] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 229.550122][ T9601] ? find_held_lock+0x2b/0x80 [ 229.550134][ T9601] ? tun_get+0x191/0x370 [ 229.550144][ T9601] ? tun_get+0x191/0x370 [ 229.550158][ T9601] tun_chr_write_iter+0xdc/0x200 [ 229.550172][ T9601] vfs_write+0x6ac/0x1050 [ 229.550182][ T9601] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 229.550196][ T9601] ? __pfx_vfs_write+0x10/0x10 [ 229.550205][ T9601] ? find_held_lock+0x2b/0x80 [ 229.550226][ T9601] ksys_write+0x12a/0x250 [ 229.550236][ T9601] ? __pfx_ksys_write+0x10/0x10 [ 229.550249][ T9601] do_int80_emulation+0x14b/0x720 [ 229.550267][ T9601] asm_int80_emulation+0x1a/0x20 [ 229.550278][ T9601] RIP: 0023:0xf71f74eb [ 229.550287][ T9601] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 229.550298][ T9601] RSP: 002b:00000000f54ad44c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 229.550309][ T9601] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080001140 [ 229.550316][ T9601] RDX: 0000000000001019 RSI: 0000000000000000 RDI: 0000000000000000 [ 229.550322][ T9601] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 229.550329][ T9601] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 229.550339][ T9601] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 229.550352][ T9601] [ 229.892001][ T9606] ima: policy update completed [ 230.406732][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1039'. [ 230.740906][ T9626] netlink: zone id is out of range [ 230.889389][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1043'. [ 230.893805][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 231.144403][ T9639] ima: policy update completed [ 231.379868][ T5744] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 231.636997][ T9657] pim6reg: entered allmulticast mode [ 231.672893][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 231.672906][ T42] audit: type=1800 audit(1786380169.839:1171): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 231.727580][ T9657] pim6reg: left allmulticast mode [ 231.759951][ T42] audit: type=1800 audit(1786380169.919:1172): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171312 res=0 errno=0 [ 231.852879][ T42] audit: type=1800 audit(1786380170.029:1173): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=171322 res=0 errno=0 [ 231.965361][ T42] audit: type=1800 audit(1786380170.139:1174): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 232.001933][ T9661] netlink: zone id is out of range [ 232.031892][ T42] audit: type=1800 audit(1786380170.199:1175): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 232.570131][ T42] audit: type=1800 audit(1786380170.739:1176): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 232.659757][ T9668] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1053'. [ 232.853233][ T9673] ima: policy update completed [ 233.046401][ T42] audit: type=1800 audit(1786380170.819:1177): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 233.052609][ T42] audit: type=1800 audit(1786380170.869:1178): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 233.059163][ T42] audit: type=1800 audit(1786380170.899:1179): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 233.066680][ T42] audit: type=1807 audit(1786380170.919:1180): action=measure res=1 [ 233.189321][ T9693] pim6reg: entered allmulticast mode [ 233.198528][ T9693] pim6reg: left allmulticast mode [ 234.365983][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1064'. [ 234.450869][ T5744] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 234.784122][ T9718] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 234.786935][ T9718] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 234.790990][ T9718] vhci_hcd vhci_hcd.0: Device attached [ 235.028752][ T9719] vhci_hcd: connection closed [ 235.029242][ T5814] vhci_hcd vhci_hcd.2: stop threads [ 235.034885][ T5814] vhci_hcd vhci_hcd.2: release socket [ 235.037300][ T5814] vhci_hcd vhci_hcd.2: disconnect device [ 235.071784][ T40] usb 42-1: enqueue for inactive port 0 [ 235.316602][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1074'. [ 235.536607][ T9730] 9pnet_virtio: no channels available for device syz [ 235.539848][ T9730] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 235.543914][ T9730] overlayfs: overlapping lowerdir path [ 236.158946][ T40] usb usb42-port1: attempt power cycle [ 236.310393][ T9748] FAULT_INJECTION: forcing a failure. [ 236.310393][ T9748] name failslab, interval 1, probability 0, space 0, times 0 [ 236.314867][ T9748] CPU: 0 UID: 0 PID: 9748 Comm: syz.1.1078 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.314886][ T9748] Tainted: [L]=SOFTLOCKUP [ 236.314889][ T9748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.314896][ T9748] Call Trace: [ 236.314900][ T9748] [ 236.314905][ T9748] dump_stack_lvl+0x100/0x190 [ 236.314922][ T9748] should_fail_ex.cold+0x5/0xa [ 236.314935][ T9748] should_failslab+0xc2/0x120 [ 236.314957][ T9748] __kmalloc_noprof+0xfc/0x820 [ 236.314970][ T9748] ? rcu_is_watching+0x12/0xc0 [ 236.314985][ T9748] ? tomoyo_realpath_from_path+0xb6/0x690 [ 236.315004][ T9748] tomoyo_realpath_from_path+0xb6/0x690 [ 236.315022][ T9748] tomoyo_path_number_perm+0x23c/0x580 [ 236.315036][ T9748] ? tomoyo_path_number_perm+0x22e/0x580 [ 236.315050][ T9748] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.315064][ T9748] ? get_pid_task+0x106/0x250 [ 236.315089][ T9748] ? find_held_lock+0x2b/0x80 [ 236.315103][ T9748] ? __fget_files+0x215/0x3d0 [ 236.315113][ T9748] ? hook_file_ioctl_common+0x140/0x440 [ 236.315127][ T9748] ? __fget_files+0x215/0x3d0 [ 236.315139][ T9748] ? __fget_files+0x21f/0x3d0 [ 236.315151][ T9748] security_file_ioctl_compat+0xd3/0x230 [ 236.315166][ T9748] __ia32_compat_sys_ioctl+0xc2/0x360 [ 236.315183][ T9748] __do_fast_syscall_32+0xe7/0x970 [ 236.315200][ T9748] ? lockdep_hardirqs_on+0x78/0x100 [ 236.315215][ T9748] do_fast_syscall_32+0x32/0x70 [ 236.315232][ T9748] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.315246][ T9748] RIP: 0023:0xf70aefec [ 236.315260][ T9748] Code: Unable to access opcode bytes at 0xf70aefc2. [ 236.315265][ T9748] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 236.315277][ T9748] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045201 [ 236.315283][ T9748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.315289][ T9748] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.315295][ T9748] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 236.315302][ T9748] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.315315][ T9748] [ 236.315319][ T9748] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.541228][ T9760] 9p: Bad value for 'version' [ 236.643029][ T9758] wg2 speed is unknown, defaulting to 1000 [ 236.699625][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 236.699639][ T42] audit: type=1800 audit(1786380174.869:1213): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 236.740876][ T40] usb usb42-port1: unable to enumerate USB device [ 236.831968][ T42] audit: type=1800 audit(1786380174.879:1214): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172533 res=0 errno=0 [ 236.840100][ T42] audit: type=1400 audit(1786380174.999:1215): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9762 comm="syz.0.1082" [ 236.847106][ T42] audit: type=1804 audit(1786380175.009:1216): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1082" name="/newroot/proc/mdstat" dev="proc" ino=4026532009 res=1 errno=0 [ 236.905368][ T42] audit: type=1800 audit(1786380175.079:1217): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172599 res=0 errno=0 [ 236.965195][ T42] audit: type=1800 audit(1786380175.139:1218): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172618 res=0 errno=0 [ 236.982798][ T42] audit: type=1800 audit(1786380175.149:1219): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=172628 res=0 errno=0 [ 237.069174][ T9780] pim6reg: entered allmulticast mode [ 237.102669][ T42] audit: type=1800 audit(1786380175.279:1220): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22680 res=0 errno=0 [ 237.117918][ T42] audit: type=1800 audit(1786380175.289:1221): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=22680 res=0 errno=0 [ 237.193230][ T9780] pim6reg: left allmulticast mode [ 237.383331][ T42] audit: type=1800 audit(1786380175.559:1222): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 237.542881][ T9789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 238.125527][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1088'. [ 238.617999][ T9803] 9p: Bad value for 'version' [ 239.134189][ T9816] pim6reg: entered allmulticast mode [ 239.265481][ T9810] pim6reg: left allmulticast mode [ 239.905984][ T9831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'. [ 240.806920][ T9839] 9pnet_virtio: no channels available for device syz [ 240.810344][ T9839] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 240.814776][ T9839] overlayfs: overlapping lowerdir path [ 241.346875][ T9853] pim6reg: entered allmulticast mode [ 241.349350][ T9855] pim6reg: left allmulticast mode [ 244.138108][ T42] kauditd_printk_skb: 27 callbacks suppressed [ 244.138124][ T42] audit: type=1800 audit(1786380182.309:1250): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 244.162832][ T42] audit: type=1800 audit(1786380182.339:1251): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 244.174534][ T9859] netlink: zone id is out of range [ 244.183126][ T42] audit: type=1800 audit(1786380182.359:1252): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 244.333150][ T42] audit: type=1800 audit(1786380182.509:1253): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 244.452624][ T42] audit: type=1400 audit(1786380182.629:1254): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=9861 comm="syz.2.1106" [ 244.458016][ T42] audit: type=1804 audit(1786380182.629:1255): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1106" name="/newroot/proc/mdstat" dev="proc" ino=4026532009 res=1 errno=0 [ 244.801574][ T61] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 244.931446][ T61] usb 9-1: device descriptor read/64, error -71 [ 244.984254][ T42] audit: type=1326 audit(1786380183.159:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 244.992692][ T42] audit: type=1326 audit(1786380183.159:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 245.001145][ T42] audit: type=1326 audit(1786380183.169:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 245.010545][ T42] audit: type=1326 audit(1786380183.169:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1105" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70aefec code=0x7ffc0000 [ 245.198982][ T61] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 245.870632][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1112'. [ 246.231451][ T61] usb 9-1: device descriptor read/64, error -71 [ 246.343640][ T61] usb usb9-port1: attempt power cycle [ 246.737547][ T61] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 246.789457][ T61] usb 9-1: device descriptor read/8, error -71 [ 247.042714][ T61] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 247.086036][ T61] usb 9-1: device descriptor read/8, error -71 [ 247.209094][ T61] usb usb9-port1: unable to enumerate USB device [ 247.456599][ T9904] i2c i2c-0: new_device: Instantiated device rt1711h at 0x4e [ 247.585654][ T9911] netlink: zone id is out of range [ 248.063445][ T9938] pim6reg: entered allmulticast mode [ 248.339021][ T9938] pim6reg: left allmulticast mode [ 248.653341][ T9935] 9pnet_virtio: no channels available for device syz [ 248.810294][ T9935] 9pnet_virtio: no channels available for device syz [ 249.176234][ T9947] 9pnet_virtio: no channels available for device syz [ 249.197188][ T9946] 9pnet_virtio: no channels available for device syz [ 249.208433][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 249.208447][ T42] audit: type=1800 audit(1786380187.379:1299): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 249.241936][ T9953] netlink: zone id is out of range [ 249.270837][ T9947] 9pnet_virtio: no channels available for device syz [ 249.276228][ T9947] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 249.281822][ T9947] overlayfs: overlapping lowerdir path [ 249.327795][ T42] audit: type=1800 audit(1786380187.499:1300): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 249.336106][ T42] audit: type=1800 audit(1786380187.499:1301): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177593 res=0 errno=0 [ 249.377519][ T42] audit: type=1800 audit(1786380187.549:1302): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 249.403472][ T42] audit: type=1800 audit(1786380187.569:1303): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 249.454378][ T42] audit: type=1800 audit(1786380187.629:1304): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 249.471033][ T9962] FAULT_INJECTION: forcing a failure. [ 249.471033][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 249.476443][ T9962] CPU: 3 UID: 0 PID: 9962 Comm: syz.2.1134 Tainted: G L syzkaller #0 PREEMPT(full) [ 249.476474][ T9962] Tainted: [L]=SOFTLOCKUP [ 249.476480][ T9962] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 249.476492][ T9962] Call Trace: [ 249.476499][ T9962] [ 249.476506][ T9962] dump_stack_lvl+0x100/0x190 [ 249.476532][ T9962] should_fail_ex.cold+0x5/0xa [ 249.476554][ T9962] should_failslab+0xc2/0x120 [ 249.476606][ T9962] __kmalloc_noprof+0xfc/0x820 [ 249.476629][ T9962] ? rcu_is_watching+0x12/0xc0 [ 249.476652][ T9962] ? tomoyo_realpath_from_path+0xb6/0x690 [ 249.476686][ T9962] tomoyo_realpath_from_path+0xb6/0x690 [ 249.476718][ T9962] tomoyo_path_number_perm+0x23c/0x580 [ 249.476740][ T9962] ? tomoyo_path_number_perm+0x22e/0x580 [ 249.476763][ T9962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 249.476785][ T9962] ? get_pid_task+0x106/0x250 [ 249.476830][ T9962] ? find_held_lock+0x2b/0x80 [ 249.476851][ T9962] ? __fget_files+0x215/0x3d0 [ 249.476865][ T9962] ? hook_file_ioctl_common+0x140/0x440 [ 249.476884][ T9962] ? __fget_files+0x215/0x3d0 [ 249.476903][ T9962] ? __fget_files+0x21f/0x3d0 [ 249.476921][ T9962] security_file_ioctl_compat+0xd3/0x230 [ 249.476946][ T9962] __ia32_compat_sys_ioctl+0xc2/0x360 [ 249.476972][ T9962] __do_fast_syscall_32+0xe7/0x970 [ 249.476998][ T9962] ? lockdep_hardirqs_on+0x78/0x100 [ 249.477022][ T9962] do_fast_syscall_32+0x32/0x70 [ 249.477045][ T9962] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.477067][ T9962] RIP: 0023:0xf7ff5fec [ 249.477089][ T9962] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 249.477096][ T9962] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 249.477113][ T9962] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000041045508 [ 249.477124][ T9962] RDX: 0000000080000540 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.477133][ T9962] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 249.477144][ T9962] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 249.477153][ T9962] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 249.477174][ T9962] [ 249.477182][ T9962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.582877][ T42] audit: type=1800 audit(1786380187.759:1305): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 249.596000][ T42] audit: type=1800 audit(1786380187.769:1306): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177612 res=0 errno=0 [ 249.602274][ T42] audit: type=1800 audit(1786380187.769:1307): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177622 res=0 errno=0 [ 249.609800][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1130'. [ 249.723561][ T42] audit: type=1800 audit(1786380187.899:1308): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 249.834963][ T9979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1135'. [ 249.858413][ T9972] pim6reg: entered allmulticast mode [ 249.924224][ T9972] pim6reg: left allmulticast mode [ 251.337419][ T9992] netlink: zone id is out of range [ 251.394731][ T9994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 251.618254][T10012] pim6reg: entered allmulticast mode [ 251.667305][T10012] pim6reg: left allmulticast mode [ 252.387143][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1148'. [ 252.538716][T10016] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 252.540830][T10016] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 252.641045][T10016] vhci_hcd vhci_hcd.0: Device attached [ 252.876109][T10019] geneve2: entered allmulticast mode [ 252.911480][ T5884] usb 40-1: SetAddress Request (10) to port 0 [ 252.913530][ T5884] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 253.266462][T10022] vhci_hcd: connection reset by peer [ 253.269854][ T5814] vhci_hcd vhci_hcd.1: stop threads [ 253.273869][ T5814] vhci_hcd vhci_hcd.1: release socket [ 253.277863][T10031] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1149'. [ 253.278524][ T5814] vhci_hcd vhci_hcd.1: disconnect device [ 253.578796][T10037] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 253.580918][T10037] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 253.620040][T10037] vhci_hcd vhci_hcd.0: Device attached [ 253.718287][T10041] netlink: zone id is out of range [ 253.937146][T10047] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1153'. [ 253.947138][T10047] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1153'. [ 253.974406][ T852] usb 38-1: SetAddress Request (6) to port 0 [ 253.996125][ T852] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 254.052575][T10046] ima: policy update completed [ 254.455884][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 254.455902][ T42] audit: type=1800 audit(1786380192.629:1342): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 255.136002][ T42] audit: type=1800 audit(1786380193.309:1343): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 255.279301][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.279382][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.283890][ T42] audit: type=1800 audit(1786380193.449:1344): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178096 res=0 errno=0 [ 255.283941][ T42] audit: type=1800 audit(1786380193.459:1345): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178111 res=0 errno=0 [ 255.288415][ T42] audit: type=1800 audit(1786380193.459:1346): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178108 res=0 errno=0 [ 255.320221][ T42] audit: type=1800 audit(1786380193.499:1347): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178139 res=0 errno=0 [ 255.339985][ T42] audit: type=1800 audit(1786380193.509:1348): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178151 res=0 errno=0 [ 255.351472][ T42] audit: type=1800 audit(1786380193.519:1349): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=178161 res=0 errno=0 [ 255.359691][T10035] geneve2: entered allmulticast mode [ 255.463047][T10059] pim6reg: entered allmulticast mode [ 255.518580][T10059] pim6reg: left allmulticast mode [ 256.194616][T10038] vhci_hcd: connection reset by peer [ 256.206923][ T5814] vhci_hcd vhci_hcd.0: stop threads [ 256.208636][ T5814] vhci_hcd vhci_hcd.0: release socket [ 256.214977][ T5814] vhci_hcd vhci_hcd.0: disconnect device [ 256.246585][ T42] audit: type=1800 audit(1786380194.419:1350): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 256.265499][T10065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 256.383858][ T42] audit: type=1800 audit(1786380194.479:1351): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 257.205927][T10079] netlink: zone id is out of range [ 257.290742][T10082] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1162'. [ 257.294005][T10082] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1162'. [ 257.313587][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1163'. [ 257.454415][T10081] ima: policy update completed [ 257.991854][ T5884] usb 40-1: device descriptor read/8, error -110 [ 258.347447][T10097] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 258.349591][T10097] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.360965][T10097] vhci_hcd vhci_hcd.0: Device attached [ 258.382538][T10103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 258.478789][ T5884] usb usb40-port1: attempt power cycle [ 258.635184][T10110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 258.771797][T10060] usb 46-1: SetAddress Request (2) to port 0 [ 258.824874][T10060] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 259.469773][T10097] geneve2: entered allmulticast mode [ 259.477014][ T852] usb 38-1: device descriptor read/8, error -110 [ 259.487317][ T5884] usb usb40-port1: unable to enumerate USB device [ 259.636559][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 259.636603][ T42] audit: type=1800 audit(1786380197.809:1371): pid=10108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1167" name="unbind" dev="sysfs" ino=52097 res=0 errno=0 [ 259.710533][T10099] vhci_hcd: connection reset by peer [ 259.713421][ T13] vhci_hcd vhci_hcd.4: stop threads [ 259.715833][ T13] vhci_hcd vhci_hcd.4: release socket [ 259.718365][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 259.864685][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1170'. [ 259.877222][ T852] usb usb38-port1: attempt power cycle [ 260.443629][ T42] audit: type=1800 audit(1786380198.619:1372): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 260.462482][ T852] usb usb38-port1: unable to enumerate USB device [ 260.463178][T10121] netlink: zone id is out of range [ 260.525033][ T42] audit: type=1800 audit(1786380198.699:1373): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 260.611428][ T42] audit: type=1800 audit(1786380198.779:1374): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 260.670079][ T42] audit: type=1800 audit(1786380198.839:1375): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 260.695303][T10128] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1174'. [ 260.698546][T10128] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1174'. [ 260.707545][ T42] audit: type=1807 audit(1786380198.879:1376): action=measure res=1 [ 260.794697][ T42] audit: type=1800 audit(1786380198.969:1377): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 260.842583][T10124] 9p: Bad value for 'wfdno' [ 260.973023][T10127] ima: policy update completed [ 260.974993][ T42] audit: type=1802 audit(1786380199.149:1378): pid=10127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.1174" res=1 errno=0 [ 261.020776][T10138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 261.023791][ T42] audit: type=1800 audit(1786380199.199:1379): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 261.377656][ T42] audit: type=1800 audit(1786380199.549:1380): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 261.619084][T10149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1180'. [ 262.237831][T10154] netlink: zone id is out of range [ 262.326563][T10162] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1185'. [ 262.330634][T10162] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1185'. [ 262.561761][T10161] ima: policy update completed [ 263.563298][T10180] FAULT_INJECTION: forcing a failure. [ 263.563298][T10180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.568693][T10180] CPU: 2 UID: 0 PID: 10180 Comm: syz.1.1191 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.568723][T10180] Tainted: [L]=SOFTLOCKUP [ 263.568729][T10180] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.568740][T10180] Call Trace: [ 263.568747][T10180] [ 263.568754][T10180] dump_stack_lvl+0x100/0x190 [ 263.568779][T10180] should_fail_ex.cold+0x5/0xa [ 263.568800][T10180] _copy_from_user+0x2e/0xd0 [ 263.568828][T10180] __sys_bpf+0x2f5/0x4e80 [ 263.568854][T10180] ? __pfx___sys_bpf+0x10/0x10 [ 263.568874][T10180] ? find_held_lock+0x2b/0x80 [ 263.568894][T10180] ? get_pid_task+0xfc/0x250 [ 263.568916][T10180] ? get_pid_task+0xfc/0x250 [ 263.568942][T10180] ? proc_fail_nth_write+0x9f/0x220 [ 263.568968][T10180] ? find_held_lock+0x2b/0x80 [ 263.568994][T10180] ? rcu_read_lock_any_held+0x6a/0xa0 [ 263.569017][T10180] ? find_held_lock+0x2b/0x80 [ 263.569037][T10180] ? ksys_write+0x190/0x250 [ 263.569053][T10180] ? ksys_write+0x190/0x250 [ 263.569087][T10180] ? fput+0x79/0x100 [ 263.569109][T10180] ? __ia32_sys_bpf+0xcc/0x170 [ 263.569125][T10180] __ia32_sys_bpf+0xcc/0x170 [ 263.569144][T10180] ? __do_fast_syscall_32+0x98/0x970 [ 263.569172][T10180] __do_fast_syscall_32+0xe7/0x970 [ 263.569200][T10180] ? lockdep_hardirqs_on+0x78/0x100 [ 263.569224][T10180] do_fast_syscall_32+0x32/0x70 [ 263.569247][T10180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.569269][T10180] RIP: 0023:0xf70aefec [ 263.569290][T10180] Code: Unable to access opcode bytes at 0xf70aefc2. [ 263.569298][T10180] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 263.569315][T10180] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000600 [ 263.569325][T10180] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.569335][T10180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.569345][T10180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.569354][T10180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.569377][T10180] [ 263.693040][T10184] 9p: Bad value for 'wfdno' [ 263.999348][T10060] usb 46-1: device descriptor read/8, error -110 [ 264.023997][T10188] netlink: zone id is out of range [ 264.064401][T10191] loop5: detected capacity change from 0 to 7 [ 264.074815][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.078172][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.082694][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.087026][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.092084][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.094923][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.099249][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.102396][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.107550][ C3] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.110624][ C3] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.113360][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.116577][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.120987][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.123980][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.126671][T10191] ldm_validate_partition_table(): Disk read failed. [ 264.130334][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.133420][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.136745][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.139819][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.143299][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 264.146567][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 264.149245][T10191] Dev loop5: unable to read RDB block 0 [ 264.152385][T10191] loop5: unable to read partition table [ 264.154797][T10191] loop5: partition table beyond EOD, truncated [ 264.157436][T10191] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 264.184393][T10194] wg2 speed is unknown, defaulting to 1000 [ 264.210645][T10196] FAULT_INJECTION: forcing a failure. [ 264.210645][T10196] name failslab, interval 1, probability 0, space 0, times 0 [ 264.215850][T10196] CPU: 1 UID: 0 PID: 10196 Comm: syz.1.1195 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.215878][T10196] Tainted: [L]=SOFTLOCKUP [ 264.215883][T10196] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.215892][T10196] Call Trace: [ 264.215899][T10196] [ 264.215905][T10196] dump_stack_lvl+0x100/0x190 [ 264.215928][T10196] should_fail_ex.cold+0x5/0xa [ 264.215947][T10196] should_failslab+0xc2/0x120 [ 264.215968][T10196] __kmalloc_cache_noprof+0x91/0x6c0 [ 264.215985][T10196] ? madvise_collapse+0x228/0x750 [ 264.216005][T10196] madvise_collapse+0x228/0x750 [ 264.216022][T10196] ? __pfx_madvise_collapse+0x10/0x10 [ 264.216045][T10196] madvise_vma_behavior+0x107c/0x2240 [ 264.216071][T10196] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 264.216100][T10196] ? find_vma_prev+0xd8/0x150 [ 264.216136][T10196] ? __pfx_find_vma_prev+0x10/0x10 [ 264.216168][T10196] madvise_walk_vmas+0x2fe/0xa90 [ 264.216194][T10196] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 264.216222][T10196] madvise_do_behavior+0x1ea/0x510 [ 264.216247][T10196] ? __pfx_madvise_do_behavior+0x10/0x10 [ 264.216270][T10196] ? down_read+0x13b/0x4c0 [ 264.216302][T10196] do_madvise+0x238/0x290 [ 264.216324][T10196] ? __pfx_do_madvise+0x10/0x10 [ 264.216360][T10196] ? fput+0x79/0x100 [ 264.216378][T10196] ? ksys_write+0x1ac/0x250 [ 264.216395][T10196] __ia32_sys_madvise+0xa7/0x110 [ 264.216409][T10196] ? lockdep_hardirqs_on+0x78/0x100 [ 264.216429][T10196] __do_fast_syscall_32+0xe7/0x970 [ 264.216449][T10196] ? lockdep_hardirqs_on+0x78/0x100 [ 264.216471][T10196] do_fast_syscall_32+0x32/0x70 [ 264.216514][T10196] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 264.216534][T10196] RIP: 0023:0xf70aefec [ 264.216553][T10196] Code: Unable to access opcode bytes at 0xf70aefc2. [ 264.216560][T10196] RSP: 002b:00000000f547c50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 264.216577][T10196] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600003 [ 264.216586][T10196] RDX: 0000000000000019 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.216595][T10196] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 264.216603][T10196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.216612][T10196] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 264.216632][T10196] [ 264.351626][T10200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1196'. [ 264.395489][T10060] usb usb46-port1: attempt power cycle [ 264.532523][T10207] pim6reg: entered allmulticast mode [ 264.574850][T10207] pim6reg: left allmulticast mode [ 265.344176][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 265.344350][ T42] audit: type=1800 audit(1786380203.519:1403): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 265.410812][ T42] audit: type=1800 audit(1786380203.529:1404): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 265.614368][ T42] audit: type=1800 audit(1786380203.789:1405): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1198" name="attach" dev="sysfs" ino=36635 res=0 errno=0 [ 265.632401][T10214] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 265.635189][T10214] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 265.642968][T10214] vhci_hcd vhci_hcd.0: Device attached [ 265.782678][T10060] usb usb46-port1: unable to enumerate USB device [ 265.863973][ T42] audit: type=1800 audit(1786380204.039:1406): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 265.951428][ T5884] usb 42-1: SetAddress Request (14) to port 0 [ 265.961339][ T5884] usb 42-1: new SuperSpeed USB device number 14 using vhci_hcd [ 266.015816][T10221] wg2 speed is unknown, defaulting to 1000 [ 266.090825][ T42] audit: type=1800 audit(1786380204.259:1407): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183003 res=0 errno=0 [ 266.105483][ T42] audit: type=1800 audit(1786380204.279:1408): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183022 res=0 errno=0 [ 266.110107][ T42] audit: type=1800 audit(1786380204.279:1409): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183034 res=0 errno=0 [ 266.111510][ T42] audit: type=1800 audit(1786380204.289:1410): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=183046 res=0 errno=0 [ 266.167924][T10213] geneve2: entered allmulticast mode [ 266.430500][T10215] vhci_hcd: connection reset by peer [ 266.432711][ T13] vhci_hcd vhci_hcd.2: stop threads [ 266.435749][ T13] vhci_hcd vhci_hcd.2: release socket [ 266.444643][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 266.469374][ T42] audit: type=1800 audit(1786380204.639:1411): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 266.559857][ T42] audit: type=1800 audit(1786380204.729:1412): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 266.593512][T10231] netlink: zone id is out of range [ 266.819907][T10195] syz.0.1194 (10195): drop_caches: 3 [ 266.933152][T10239] FAULT_INJECTION: forcing a failure. [ 266.933152][T10239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.939768][T10239] CPU: 3 UID: 0 PID: 10239 Comm: syz.0.1205 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.939788][T10239] Tainted: [L]=SOFTLOCKUP [ 266.939792][T10239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.939799][T10239] Call Trace: [ 266.939803][T10239] [ 266.939809][T10239] dump_stack_lvl+0x100/0x190 [ 266.939826][T10239] should_fail_ex.cold+0x5/0xa [ 266.939839][T10239] _copy_from_user+0x2e/0xd0 [ 266.939857][T10239] sctp_getsockopt+0x371a/0x7090 [ 266.939872][T10239] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 266.939888][T10239] ? __lock_acquire+0x49f/0x1a40 [ 266.939899][T10239] ? __pfx_sctp_getsockopt+0x10/0x10 [ 266.939912][T10239] ? _parse_integer_limit+0x1ac/0x220 [ 266.939930][T10239] ? __pfx___might_resched+0x10/0x10 [ 266.939965][T10239] ? aa_sk_perm+0x309/0xaa0 [ 266.939982][T10239] ? __pfx_aa_sk_perm+0x10/0x10 [ 266.939999][T10239] ? aa_sock_opt_perm+0xfe/0x1b0 [ 266.940011][T10239] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 266.940024][T10239] do_sock_getsockopt+0x50a/0x6e0 [ 266.940034][T10239] ? __lock_acquire+0x49f/0x1a40 [ 266.940045][T10239] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 266.940060][T10239] ? find_held_lock+0x2b/0x80 [ 266.940077][T10239] ? __fget_files+0x21f/0x3d0 [ 266.940091][T10239] __sys_getsockopt+0x133/0x1d0 [ 266.940110][T10239] ? __ia32_sys_getsockopt+0xbc/0x160 [ 266.940124][T10239] __ia32_sys_getsockopt+0xbc/0x160 [ 266.940138][T10239] ? __do_fast_syscall_32+0x98/0x970 [ 266.940156][T10239] ? lockdep_hardirqs_on+0x78/0x100 [ 266.940170][T10239] __do_fast_syscall_32+0xe7/0x970 [ 266.940199][T10239] ? lockdep_hardirqs_on+0x78/0x100 [ 266.940215][T10239] do_fast_syscall_32+0x32/0x70 [ 266.940230][T10239] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 266.940244][T10239] RIP: 0023:0xf70befec [ 266.940260][T10239] Code: Unable to access opcode bytes at 0xf70befc2. [ 266.940265][T10239] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 000000000000016d [ 266.940276][T10239] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 266.940282][T10239] RDX: 0000000000000066 RSI: 0000000080000080 RDI: 0000000080000100 [ 266.940288][T10239] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 266.940294][T10239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.940300][T10239] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 266.940313][T10239] [ 267.963065][T10253] pim6reg: entered allmulticast mode [ 267.995621][T10253] pim6reg: left allmulticast mode [ 268.311599][T10261] 9p: Bad value for 'wfdno' [ 269.163089][T10271] netlink: zone id is out of range [ 270.338448][T10290] 9pnet_virtio: no channels available for device syz [ 270.432704][T10290] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 270.472574][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 270.472588][ T42] audit: type=1800 audit(1786380208.649:1435): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 270.500792][ T42] audit: type=1800 audit(1786380208.669:1436): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187425 res=0 errno=0 [ 270.598992][ T42] audit: type=1800 audit(1786380208.769:1437): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187444 res=0 errno=0 [ 270.703240][ T42] audit: type=1800 audit(1786380208.879:1438): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 270.736160][ T42] audit: type=1800 audit(1786380208.899:1439): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 270.755473][ T42] audit: type=1800 audit(1786380208.929:1440): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187490 res=0 errno=0 [ 270.805924][ T42] audit: type=1800 audit(1786380208.979:1441): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=187509 res=0 errno=0 [ 270.822562][ T42] audit: type=1800 audit(1786380208.979:1442): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=187513 res=0 errno=0 [ 270.829479][ T42] audit: type=1800 audit(1786380208.979:1443): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="ifindex" dev="sysfs" ino=187517 res=0 errno=0 [ 270.838976][ T42] audit: type=1800 audit(1786380208.979:1444): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="iflink" dev="sysfs" ino=187516 res=0 errno=0 [ 271.082556][T10308] pim6reg: entered allmulticast mode [ 271.085300][T10309] pim6reg: left allmulticast mode [ 271.111483][ T5884] usb 42-1: device descriptor read/8, error -110 [ 271.174454][T10311] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1224'. [ 271.269808][T10315] FAULT_INJECTION: forcing a failure. [ 271.269808][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 271.299356][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.2.1226 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.299398][T10315] Tainted: [L]=SOFTLOCKUP [ 271.299405][T10315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.299414][T10315] Call Trace: [ 271.299421][T10315] [ 271.299428][T10315] dump_stack_lvl+0x100/0x190 [ 271.299456][T10315] should_fail_ex.cold+0x5/0xa [ 271.299476][T10315] should_failslab+0xc2/0x120 [ 271.299501][T10315] __kmalloc_noprof+0xfc/0x820 [ 271.299522][T10315] ? rcu_is_watching+0x12/0xc0 [ 271.299544][T10315] ? tomoyo_realpath_from_path+0xb6/0x690 [ 271.299578][T10315] tomoyo_realpath_from_path+0xb6/0x690 [ 271.299610][T10315] tomoyo_path_number_perm+0x23c/0x580 [ 271.299632][T10315] ? tomoyo_path_number_perm+0x22e/0x580 [ 271.299655][T10315] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 271.299678][T10315] ? get_pid_task+0x106/0x250 [ 271.299729][T10315] ? find_held_lock+0x2b/0x80 [ 271.299751][T10315] ? __fget_files+0x215/0x3d0 [ 271.299768][T10315] ? hook_file_ioctl_common+0x140/0x440 [ 271.299790][T10315] ? __fget_files+0x215/0x3d0 [ 271.299810][T10315] ? __fget_files+0x21f/0x3d0 [ 271.299831][T10315] security_file_ioctl_compat+0xd3/0x230 [ 271.299855][T10315] __ia32_compat_sys_ioctl+0xc2/0x360 [ 271.299882][T10315] __do_fast_syscall_32+0xe7/0x970 [ 271.299908][T10315] ? lockdep_hardirqs_on+0x78/0x100 [ 271.299933][T10315] do_fast_syscall_32+0x32/0x70 [ 271.299958][T10315] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.299981][T10315] RIP: 0023:0xf7ff5fec [ 271.300002][T10315] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 271.300009][T10315] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 271.300029][T10315] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000008983 [ 271.300040][T10315] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.300050][T10315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.300058][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.300067][T10315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.300091][T10315] [ 271.394673][T10315] ERROR: Out of memory at tomoyo_realpath_from_path. [ 271.502399][ T5884] usb usb42-port1: attempt power cycle [ 271.776753][T10323] netlink: zone id is out of range [ 271.876694][T10328] FAULT_INJECTION: forcing a failure. [ 271.876694][T10328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.880935][T10328] CPU: 0 UID: 0 PID: 10328 Comm: syz.1.1230 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.880954][T10328] Tainted: [L]=SOFTLOCKUP [ 271.880957][T10328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.880964][T10328] Call Trace: [ 271.880969][T10328] [ 271.880973][T10328] dump_stack_lvl+0x100/0x190 [ 271.880991][T10328] should_fail_ex.cold+0x5/0xa [ 271.881003][T10328] _copy_to_user+0x32/0xd0 [ 271.881021][T10328] simple_read_from_buffer+0xcb/0x170 [ 271.881040][T10328] proc_fail_nth_read+0x1af/0x230 [ 271.881057][T10328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.881074][T10328] ? rw_verify_area+0xce/0x6d0 [ 271.881090][T10328] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.881109][T10328] vfs_read+0x1e4/0xb40 [ 271.881121][T10328] ? __pfx_vfs_read+0x10/0x10 [ 271.881129][T10328] ? find_held_lock+0x2b/0x80 [ 271.881144][T10328] ? __fget_files+0x215/0x3d0 [ 271.881157][T10328] ? __fget_files+0x21f/0x3d0 [ 271.881170][T10328] ksys_read+0x12a/0x250 [ 271.881180][T10328] ? __pfx_ksys_read+0x10/0x10 [ 271.881194][T10328] do_int80_emulation+0x14b/0x720 [ 271.881212][T10328] asm_int80_emulation+0x1a/0x20 [ 271.881226][T10328] RIP: 0023:0xf71e74eb [ 271.881247][T10328] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 271.881259][T10328] RSP: 002b:00000000f549d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 271.881271][T10328] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f549d5d0 [ 271.881277][T10328] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 271.881283][T10328] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.881289][T10328] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 271.881295][T10328] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.881308][T10328] [ 272.061996][ T5884] usb usb42-port1: unable to enumerate USB device [ 272.955965][T10344] 9p: Bad value for 'rfdno' [ 273.121777][T10341] 9pnet_virtio: no channels available for device syz [ 273.230496][T10351] FAULT_INJECTION: forcing a failure. [ 273.230496][T10351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.239709][T10351] CPU: 0 UID: 0 PID: 10351 Comm: syz.0.1238 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.239741][T10351] Tainted: [L]=SOFTLOCKUP [ 273.239747][T10351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.239764][T10351] Call Trace: [ 273.239771][T10351] [ 273.239779][T10351] dump_stack_lvl+0x100/0x190 [ 273.239806][T10351] should_fail_ex.cold+0x5/0xa [ 273.239825][T10351] _copy_from_user+0x2e/0xd0 [ 273.239870][T10351] get_compat_msghdr+0xb3/0x480 [ 273.239895][T10351] ? __pfx_get_compat_msghdr+0x10/0x10 [ 273.239932][T10351] ___sys_sendmsg+0x1b6/0x1e0 [ 273.239954][T10351] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.239983][T10351] ? find_held_lock+0x2b/0x80 [ 273.240010][T10351] __sys_sendmsg+0x160/0x210 [ 273.240026][T10351] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.240044][T10351] ? __pfx_ksys_write+0x10/0x10 [ 273.240058][T10351] __do_fast_syscall_32+0xe7/0x970 [ 273.240075][T10351] ? lockdep_hardirqs_on+0x78/0x100 [ 273.240091][T10351] do_fast_syscall_32+0x32/0x70 [ 273.240106][T10351] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.240121][T10351] RIP: 0023:0xf70befec [ 273.240136][T10351] Code: Unable to access opcode bytes at 0xf70befc2. [ 273.240141][T10351] RSP: 002b:00000000f54ad50c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 273.240153][T10351] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 273.240159][T10351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 273.240165][T10351] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.240173][T10351] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 273.240180][T10351] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.240193][T10351] [ 273.290766][T10353] netlink: zone id is out of range [ 273.868816][T10371] pim6reg: entered allmulticast mode [ 273.958594][T10371] pim6reg: left allmulticast mode [ 274.519625][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1247'. [ 274.576672][T10391] netlink: zone id is out of range [ 274.869373][T10399] 9pnet_virtio: no channels available for device syz [ 275.011992][T10404] ima: policy update completed [ 275.470438][T10416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1255'. [ 275.577476][T10418] pim6reg: entered allmulticast mode [ 275.595107][T10417] pim6reg: left allmulticast mode [ 275.760143][T10426] netlink: zone id is out of range [ 275.800957][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 275.800972][ T42] audit: type=1800 audit(1786380213.969:1497): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188674 res=0 errno=0 [ 275.819604][ T42] audit: type=1800 audit(1786380213.989:1498): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188684 res=0 errno=0 [ 275.932806][T10433] pim6reg: entered allmulticast mode [ 276.024763][T10433] pim6reg: left allmulticast mode [ 276.430718][T10437] FAULT_INJECTION: forcing a failure. [ 276.430718][T10437] name failslab, interval 1, probability 0, space 0, times 0 [ 276.434816][T10437] CPU: 3 UID: 0 PID: 10437 Comm: syz.2.1263 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.434834][T10437] Tainted: [L]=SOFTLOCKUP [ 276.434838][T10437] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.434845][T10437] Call Trace: [ 276.434849][T10437] [ 276.434854][T10437] dump_stack_lvl+0x100/0x190 [ 276.434871][T10437] should_fail_ex.cold+0x5/0xa [ 276.434884][T10437] should_failslab+0xc2/0x120 [ 276.434900][T10437] kmem_cache_alloc_noprof+0x91/0x6a0 [ 276.434937][T10437] ? do_getname+0x35/0x390 [ 276.434957][T10437] do_getname+0x35/0x390 [ 276.434971][T10437] do_sys_openat2+0xc7/0x1e0 [ 276.434986][T10437] ? __pfx_do_sys_openat2+0x10/0x10 [ 276.435001][T10437] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.435024][T10437] ? __fget_files+0x21f/0x3d0 [ 276.435042][T10437] __ia32_compat_sys_openat+0x12d/0x210 [ 276.435072][T10437] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 276.435092][T10437] ? ksys_write+0x1ac/0x250 [ 276.435111][T10437] do_int80_emulation+0x14b/0x720 [ 276.435129][T10437] asm_int80_emulation+0x1a/0x20 [ 276.435145][T10437] RIP: 0023:0xf71f74eb [ 276.435154][T10437] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 276.435165][T10437] RSP: 002b:00000000f54b63cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 276.435176][T10437] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54b6490 [ 276.435182][T10437] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 276.435188][T10437] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 276.435194][T10437] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 276.435200][T10437] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 276.435213][T10437] [ 276.741498][ T42] audit: type=1800 audit(1786380214.579:1499): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 276.749617][ T42] audit: type=1804 audit(1786380214.609:1500): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1263" name="/newroot/proc/952/task/953/fail-nth" dev="proc" ino=40871 res=1 errno=0 [ 276.759616][ T42] audit: type=1800 audit(1786380214.709:1501): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 276.766942][ T42] audit: type=1800 audit(1786380214.809:1502): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 276.773598][ T42] audit: type=1800 audit(1786380214.849:1503): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 276.779719][ T42] audit: type=1800 audit(1786380214.899:1504): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 276.786318][ T42] audit: type=1800 audit(1786380214.939:1505): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=188777 res=0 errno=0 [ 276.953907][ T42] audit: type=1800 audit(1786380215.119:1506): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 276.979959][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1268'. [ 277.067818][T10451] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 277.070629][T10451] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 277.092996][T10451] vhci_hcd vhci_hcd.0: Device attached [ 277.187724][T10457] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 277.513719][ T5884] usb 46-1: SetAddress Request (6) to port 0 [ 277.571838][ T5884] usb 46-1: new SuperSpeed USB device number 6 using vhci_hcd [ 277.858073][T10460] geneve3: entered allmulticast mode [ 277.924882][T10452] vhci_hcd: connection reset by peer [ 277.932589][ T13] vhci_hcd vhci_hcd.4: stop threads [ 277.934410][ T13] vhci_hcd vhci_hcd.4: release socket [ 277.936340][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 278.143829][T10465] netlink: zone id is out of range [ 278.347863][T10473] FAULT_INJECTION: forcing a failure. [ 278.347863][T10473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.357141][T10473] CPU: 0 UID: 0 PID: 10473 Comm: syz.1.1273 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.357170][T10473] Tainted: [L]=SOFTLOCKUP [ 278.357177][T10473] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 278.357187][T10473] Call Trace: [ 278.357193][T10473] [ 278.357201][T10473] dump_stack_lvl+0x100/0x190 [ 278.357227][T10473] should_fail_ex.cold+0x5/0xa [ 278.357248][T10473] _copy_from_user+0x2e/0xd0 [ 278.357274][T10473] __sys_bpf+0x2f5/0x4e80 [ 278.357300][T10473] ? __pfx___sys_bpf+0x10/0x10 [ 278.357320][T10473] ? find_held_lock+0x2b/0x80 [ 278.357341][T10473] ? get_pid_task+0xfc/0x250 [ 278.357363][T10473] ? get_pid_task+0xfc/0x250 [ 278.357390][T10473] ? proc_fail_nth_write+0x9f/0x220 [ 278.357413][T10473] ? find_held_lock+0x2b/0x80 [ 278.357439][T10473] ? rcu_read_lock_any_held+0x6a/0xa0 [ 278.357463][T10473] ? find_held_lock+0x2b/0x80 [ 278.357483][T10473] ? ksys_write+0x190/0x250 [ 278.357499][T10473] ? ksys_write+0x190/0x250 [ 278.357529][T10473] ? fput+0x79/0x100 [ 278.357551][T10473] ? __ia32_sys_bpf+0xcc/0x170 [ 278.357569][T10473] __ia32_sys_bpf+0xcc/0x170 [ 278.357588][T10473] ? __do_fast_syscall_32+0x98/0x970 [ 278.357614][T10473] __do_fast_syscall_32+0xe7/0x970 [ 278.357638][T10473] ? lockdep_hardirqs_on+0x78/0x100 [ 278.357661][T10473] do_fast_syscall_32+0x32/0x70 [ 278.357686][T10473] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.357707][T10473] RIP: 0023:0xf70aefec [ 278.357728][T10473] Code: Unable to access opcode bytes at 0xf70aefc2. [ 278.357736][T10473] RSP: 002b:00000000f549d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000165 [ 278.357754][T10473] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800005c0 [ 278.357764][T10473] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.357772][T10473] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.357781][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.357791][T10473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.357813][T10473] [ 278.741502][ T852] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 278.897256][T10487] pim6reg: entered allmulticast mode [ 278.949633][T10487] pim6reg: left allmulticast mode [ 279.143987][T10493] netlink: zone id is out of range [ 279.226535][ T852] usb 7-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 279.695233][ T852] usb 7-1: config index 0 descriptor too short (expected 10276, got 36) [ 279.698722][ T852] usb 7-1: config 109 has too many interfaces: 142, using maximum allowed: 32 [ 279.704911][ T852] usb 7-1: config 109 has 1 interface, different from the descriptor's value: 142 [ 279.711744][ T852] usb 7-1: too many endpoints for config 109 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 279.716980][ T852] usb 7-1: config 109 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 279.722689][ T852] usb 7-1: config 109 interface 0 has no altsetting 0 [ 279.723016][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'. [ 279.725538][ T852] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.805367][T10503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1282'. [ 279.928518][T10500] tmpfs: Unknown parameter 'msmagic' [ 280.231623][T10501] wg2 speed is unknown, defaulting to 1000 [ 280.522437][ T852] usb 7-1: string descriptor 0 read error: -71 [ 280.687171][ T852] usbhid 7-1:109.0: can't add hid device: -71 [ 280.689874][ T852] usbhid 7-1:109.0: probe with driver usbhid failed with error -71 [ 280.697379][ T852] usb 7-1: USB disconnect, device number 7 [ 280.864463][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 280.864477][ T42] audit: type=1800 audit(1786380219.039:1536): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 281.160149][ T42] audit: type=1804 audit(1786380219.329:1537): pid=10514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1285" name="/newroot/214/file0" dev="tmpfs" ino=1214 res=1 errno=0 [ 281.286440][ T42] audit: type=1800 audit(1786380219.459:1538): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 281.293654][T10521] FAULT_INJECTION: forcing a failure. [ 281.293654][T10521] name failslab, interval 1, probability 0, space 0, times 0 [ 281.298263][T10521] CPU: 2 UID: 0 PID: 10521 Comm: syz.0.1286 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.298282][T10521] Tainted: [L]=SOFTLOCKUP [ 281.298286][T10521] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.298293][T10521] Call Trace: [ 281.298298][T10521] [ 281.298302][T10521] dump_stack_lvl+0x100/0x190 [ 281.298321][T10521] should_fail_ex.cold+0x5/0xa [ 281.298333][T10521] should_failslab+0xc2/0x120 [ 281.298350][T10521] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 281.298363][T10521] ? copy_process+0x611/0x8030 [ 281.298378][T10521] ? copy_process+0x69a/0x8030 [ 281.298393][T10521] copy_process+0x69a/0x8030 [ 281.298408][T10521] ? __lock_acquire+0x49f/0x1a40 [ 281.298423][T10521] ? __pfx_copy_process+0x10/0x10 [ 281.298438][T10521] ? get_pid_task+0xfc/0x250 [ 281.298452][T10521] ? get_pid_task+0xfc/0x250 [ 281.298468][T10521] kernel_clone+0x176/0x9d0 [ 281.298480][T10521] ? proc_fail_nth_write+0x9f/0x220 [ 281.298498][T10521] ? __pfx_kernel_clone+0x10/0x10 [ 281.298513][T10521] ? find_held_lock+0x2b/0x80 [ 281.298526][T10521] ? ksys_write+0x190/0x250 [ 281.298536][T10521] ? ksys_write+0x190/0x250 [ 281.298548][T10521] __do_compat_sys_ia32_clone+0xd4/0x120 [ 281.298562][T10521] ? __pfx___do_compat_sys_ia32_clone+0x10/0x10 [ 281.298579][T10521] ? fput+0x79/0x100 [ 281.298592][T10521] ? ksys_write+0x1ac/0x250 [ 281.298601][T10521] ? __pfx_ksys_write+0x10/0x10 [ 281.298614][T10521] __do_fast_syscall_32+0xe7/0x970 [ 281.298630][T10521] ? lockdep_hardirqs_on+0x78/0x100 [ 281.298646][T10521] do_fast_syscall_32+0x32/0x70 [ 281.298662][T10521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.298676][T10521] RIP: 0023:0xf70befec [ 281.298689][T10521] Code: Unable to access opcode bytes at 0xf70befc2. [ 281.298694][T10521] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 281.298705][T10521] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 281.298711][T10521] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.298717][T10521] RBP: 00000000f74b4f80 R08: 0000000000000000 R09: 0000000000000000 [ 281.298723][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.298728][T10521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.298741][T10521] [ 281.309045][ T42] audit: type=1804 audit(1786380219.459:1539): pid=10521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1286" name="/newroot/313/file0" dev="tmpfs" ino=1744 res=1 errno=0 [ 281.393390][ T42] audit: type=1800 audit(1786380219.549:1540): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 281.401800][ T42] audit: type=1800 audit(1786380219.549:1541): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193377 res=0 errno=0 [ 281.458356][ T42] audit: type=1800 audit(1786380219.629:1542): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16325 res=0 errno=0 [ 281.488332][ T42] audit: type=1800 audit(1786380219.659:1543): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15809 res=0 errno=0 [ 281.509929][ T42] audit: type=1800 audit(1786380219.659:1544): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193390 res=0 errno=0 [ 281.517237][ T42] audit: type=1800 audit(1786380219.659:1545): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=193390 res=0 errno=0 [ 281.599396][T10531] netlink: zone id is out of range [ 281.646782][T10525] 9pnet_virtio: no channels available for device syz [ 281.699864][T10528] 9pnet_virtio: no channels available for device syz [ 281.714072][T10525] 9pnet_virtio: no channels available for device syz [ 281.717906][T10525] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 281.723529][T10525] overlayfs: overlapping lowerdir path [ 281.739021][T10528] 9pnet_virtio: no channels available for device syz [ 281.742133][T10528] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 281.746040][T10528] overlayfs: overlapping lowerdir path [ 281.755611][T10540] pim6reg: entered allmulticast mode [ 281.801528][T10544] FAULT_INJECTION: forcing a failure. [ 281.801528][T10544] name failslab, interval 1, probability 0, space 0, times 0 [ 281.808919][T10544] CPU: 2 UID: 0 PID: 10544 Comm: syz.4.1292 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.808940][T10544] Tainted: [L]=SOFTLOCKUP [ 281.808944][T10544] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.808951][T10544] Call Trace: [ 281.808955][T10544] [ 281.808960][T10544] dump_stack_lvl+0x100/0x190 [ 281.808978][T10544] should_fail_ex.cold+0x5/0xa [ 281.808991][T10544] should_failslab+0xc2/0x120 [ 281.809006][T10544] __kmalloc_noprof+0xfc/0x820 [ 281.809020][T10544] ? rcu_is_watching+0x12/0xc0 [ 281.809035][T10544] ? tomoyo_realpath_from_path+0xb6/0x690 [ 281.809054][T10544] tomoyo_realpath_from_path+0xb6/0x690 [ 281.809073][T10544] tomoyo_path_number_perm+0x23c/0x580 [ 281.809086][T10544] ? tomoyo_path_number_perm+0x22e/0x580 [ 281.809100][T10544] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 281.809114][T10544] ? get_pid_task+0x106/0x250 [ 281.809152][T10544] ? find_held_lock+0x2b/0x80 [ 281.809173][T10544] ? __fget_files+0x215/0x3d0 [ 281.809187][T10544] ? hook_file_ioctl_common+0x140/0x440 [ 281.809207][T10544] ? __fget_files+0x215/0x3d0 [ 281.809225][T10544] ? __fget_files+0x21f/0x3d0 [ 281.809247][T10544] security_file_ioctl_compat+0xd3/0x230 [ 281.809268][T10544] __ia32_compat_sys_ioctl+0xc2/0x360 [ 281.809299][T10544] __do_fast_syscall_32+0xe7/0x970 [ 281.809325][T10544] ? lockdep_hardirqs_on+0x78/0x100 [ 281.809350][T10544] do_fast_syscall_32+0x32/0x70 [ 281.809368][T10544] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 281.809382][T10544] RIP: 0023:0xf709efec [ 281.809396][T10544] Code: Unable to access opcode bytes at 0xf709efc2. [ 281.809401][T10544] RSP: 002b:00000000f548d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 281.809413][T10544] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040946400 [ 281.809420][T10544] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 281.809426][T10544] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 281.809432][T10544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.809438][T10544] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 281.809452][T10544] [ 281.809580][T10544] ERROR: Out of memory at tomoyo_realpath_from_path. [ 282.044514][T10549] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 282.708671][T10568] netlink: zone id is out of range [ 282.711519][ T5884] usb 46-1: device descriptor read/8, error -110 [ 283.028726][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 283.031127][T10573] 9pnet_virtio: no channels available for device syz [ 283.041795][T10573] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 283.105014][ T5884] usb usb46-port1: attempt power cycle [ 283.116179][T10578] 9pnet_virtio: no channels available for device syz [ 283.169438][T10578] 9pnet_virtio: no channels available for device syz [ 283.173070][T10578] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 283.176675][T10578] overlayfs: overlapping lowerdir path [ 283.258777][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.427462][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.526041][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.624035][T10589] FAULT_INJECTION: forcing a failure. [ 283.624035][T10589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.628270][T10589] CPU: 0 UID: 0 PID: 10589 Comm: syz.2.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.628289][T10589] Tainted: [L]=SOFTLOCKUP [ 283.628293][T10589] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 283.628300][T10589] Call Trace: [ 283.628304][T10589] [ 283.628309][T10589] dump_stack_lvl+0x100/0x190 [ 283.628327][T10589] should_fail_ex.cold+0x5/0xa [ 283.628340][T10589] _copy_from_user+0x2e/0xd0 [ 283.628357][T10589] get_compat_msghdr+0xb3/0x480 [ 283.628376][T10589] ? __pfx_get_compat_msghdr+0x10/0x10 [ 283.628394][T10589] ? __lock_acquire+0x49f/0x1a40 [ 283.628428][T10589] ___sys_recvmsg+0x193/0x1a0 [ 283.628441][T10589] ? __pfx____sys_recvmsg+0x10/0x10 [ 283.628464][T10589] do_recvmmsg+0x54d/0x740 [ 283.628478][T10589] ? __pfx_do_recvmmsg+0x10/0x10 [ 283.628491][T10589] ? find_held_lock+0x2b/0x80 [ 283.628504][T10589] ? ksys_write+0x190/0x250 [ 283.628515][T10589] ? ksys_write+0x190/0x250 [ 283.628529][T10589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 283.628547][T10589] __sys_recvmmsg+0x21f/0x270 [ 283.628563][T10589] ? __pfx___sys_recvmmsg+0x10/0x10 [ 283.628579][T10589] ? ksys_write+0x1ac/0x250 [ 283.628590][T10589] __ia32_compat_sys_recvmmsg_time32+0xc4/0x160 [ 283.628602][T10589] ? __do_fast_syscall_32+0x98/0x970 [ 283.628617][T10589] ? lockdep_hardirqs_on+0x78/0x100 [ 283.628632][T10589] __do_fast_syscall_32+0xe7/0x970 [ 283.628647][T10589] ? lockdep_hardirqs_on+0x78/0x100 [ 283.628663][T10589] do_fast_syscall_32+0x32/0x70 [ 283.628679][T10589] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.628693][T10589] RIP: 0023:0xf7ff5fec [ 283.628707][T10589] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 283.628712][T10589] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000151 [ 283.628723][T10589] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000980 [ 283.628730][T10589] RDX: 0000000000000387 RSI: 0000000000002102 RDI: 0000000000000000 [ 283.628737][T10589] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.628747][T10589] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 283.628753][T10589] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.628766][T10589] [ 283.664484][ T5884] usb usb46-port1: unable to enumerate USB device [ 283.808985][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.172912][ T5746] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.183815][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.186988][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.189827][ T5746] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.192959][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 284.223330][T10590] ima: policy update completed [ 284.309992][ T12] bridge_slave_1: left allmulticast mode [ 284.312578][ T12] bridge_slave_1: left promiscuous mode [ 284.315176][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.351876][T10602] netlink: zone id is out of range [ 284.367330][ T12] bridge_slave_0: left allmulticast mode [ 284.375159][ T12] bridge_slave_0: left promiscuous mode [ 284.379893][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.575662][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.581124][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.585466][ T12] bond0 (unregistering): Released all slaves [ 284.595045][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 284.972873][T10593] wg2 speed is unknown, defaulting to 1000 [ 285.012523][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 285.202458][T10619] 9pnet_virtio: no channels available for device syz [ 285.209440][T10619] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 285.422480][ T12] hsr_slave_0: left promiscuous mode [ 285.446955][ T12] hsr_slave_1: left promiscuous mode [ 285.449523][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.453607][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.462510][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.465474][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.518847][ T12] veth1_macvtap: left promiscuous mode [ 285.527475][ T12] veth0_macvtap: left promiscuous mode [ 285.535487][ T12] veth1_vlan: left promiscuous mode [ 285.537924][ T12] veth0_vlan: left promiscuous mode [ 285.910623][ T12] team0 (unregistering): Port device team_slave_1 removed [ 285.924522][ T12] team0 (unregistering): Port device team_slave_0 removed [ 286.001602][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 286.001705][ T42] audit: type=1400 audit(1786380224.169:1608): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=10649 comm="syz.2.1316" [ 286.009746][ T42] audit: type=1804 audit(1786380224.169:1609): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1316" name="/newroot/proc/mdstat" dev="proc" ino=4026532009 res=1 errno=0 [ 286.262382][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 286.396875][ T5746] Bluetooth: hci3: command tx timeout [ 286.479941][ T8438] bond0: (slave syz_tun): Releasing backup interface [ 286.535167][ T42] audit: type=1800 audit(1786380224.709:1610): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=193740 res=0 errno=0 [ 286.686438][ T42] audit: type=1800 audit(1786380224.859:1611): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 286.758074][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 286.764328][T10665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1317'. [ 286.796051][T10593] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.801523][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.804139][T10593] bridge_slave_0: entered allmulticast mode [ 286.807026][T10593] bridge_slave_0: entered promiscuous mode [ 286.812475][T10593] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.815780][T10593] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.818579][T10593] bridge_slave_1: entered allmulticast mode [ 286.822583][T10593] bridge_slave_1: entered promiscuous mode [ 286.844340][T10668] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 286.847447][T10593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.850744][T10668] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 286.854553][T10593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.861761][T10668] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 286.867838][T10668] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 286.876239][T10593] team0: Port device team_slave_0 added [ 286.880241][T10593] team0: Port device team_slave_1 added [ 286.883344][T10668] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 286.902264][T10593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.902403][ T42] audit: type=1800 audit(1786380225.069:1612): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201068 res=0 errno=0 [ 286.904793][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.921424][T10593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.926403][T10593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.929239][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.939913][ T42] audit: type=1800 audit(1786380225.099:1613): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=201091 res=0 errno=0 [ 286.950905][T10593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.000920][T10593] hsr_slave_0: entered promiscuous mode [ 287.003770][T10593] hsr_slave_1: entered promiscuous mode [ 287.006539][T10593] debugfs: 'hsr0' already exists in 'hsr' [ 287.009253][T10593] Cannot create hsr debugfs directory [ 287.027454][ T42] audit: type=1800 audit(1786380225.199:1614): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=200347 res=0 errno=0 [ 287.054231][ T12] IPVS: stop unused estimator thread 0... [ 287.110256][ T42] audit: type=1800 audit(1786380225.279:1615): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27302 res=0 errno=0 [ 287.131621][ T42] audit: type=1800 audit(1786380225.279:1616): pid=10593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 287.154059][ T42] audit: type=1800 audit(1786380225.279:1617): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=203207 res=0 errno=0 [ 287.245636][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.272725][T10593] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 287.279655][T10593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 287.296098][T10593] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 287.306904][T10593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 287.310630][T10593] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 287.324946][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.329697][T10593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 287.334811][T10593] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 287.345045][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.352944][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.359509][T10593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 287.365013][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.375348][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.397518][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.497200][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.615082][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.624913][T10593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.639531][T10593] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.665555][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.668883][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.683498][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.686635][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.849703][ T12] bridge_slave_1: left allmulticast mode [ 287.855296][ T12] bridge_slave_1: left promiscuous mode [ 287.857271][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.865005][ T12] bridge_slave_0: left allmulticast mode [ 287.866828][ T12] bridge_slave_0: left promiscuous mode [ 287.868730][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.055773][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.062766][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.070078][ T12] bond0 (unregistering): Released all slaves [ 288.104326][T10679] wg2 speed is unknown, defaulting to 1000 [ 288.400449][T10593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.424122][ T12] tipc: Disabling bearer [ 288.429490][ T12] tipc: Disabling bearer [ 288.437106][ T12] tipc: Left network mode [ 288.471541][ T5746] Bluetooth: hci3: command tx timeout [ 288.472595][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 288.718997][T10679] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.721640][T10679] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.723990][T10679] bridge_slave_0: entered allmulticast mode [ 288.726694][T10679] bridge_slave_0: entered promiscuous mode [ 288.732305][T10679] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.734553][T10679] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.736914][T10679] bridge_slave_1: entered allmulticast mode [ 288.739737][T10679] bridge_slave_1: entered promiscuous mode [ 288.782261][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 288.796601][T10726] 9pnet_virtio: no channels available for device syz [ 288.802726][T10726] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 288.812628][T10679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.817868][T10679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.853339][T10679] team0: Port device team_slave_0 added [ 288.857116][T10679] team0: Port device team_slave_1 added [ 288.889429][T10679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.892852][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.903406][T10679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.948936][T10679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.952162][T10679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.962368][T10679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.975776][T10593] veth0_vlan: entered promiscuous mode [ 289.032188][T10679] hsr_slave_0: entered promiscuous mode [ 289.036031][T10679] hsr_slave_1: entered promiscuous mode [ 289.038394][T10679] debugfs: 'hsr0' already exists in 'hsr' [ 289.040158][T10679] Cannot create hsr debugfs directory [ 289.067508][ T12] hsr_slave_0: left promiscuous mode [ 289.070022][ T12] hsr_slave_1: left promiscuous mode [ 289.079629][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.081954][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.084717][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.087120][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.100638][ T12] veth1_macvtap: left promiscuous mode [ 289.102543][ T12] veth0_macvtap: left promiscuous mode [ 289.104498][ T12] veth1_vlan: left promiscuous mode [ 289.106236][ T12] veth0_vlan: left promiscuous mode [ 289.244823][ T12] team0 (unregistering): Port device team_slave_1 removed [ 289.256089][ T12] team0 (unregistering): Port device team_slave_0 removed [ 289.315332][ T12] team0 (unregistering): Port device dummy0 removed [ 289.358760][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 289.368308][T10593] veth1_vlan: entered promiscuous mode [ 289.540317][ T5744] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.554492][ T5744] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.564135][ T5744] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.576754][T10593] veth0_macvtap: entered promiscuous mode [ 289.579621][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.589082][T10593] veth1_macvtap: entered promiscuous mode [ 289.591490][ T5744] Bluetooth: hci2: command tx timeout [ 289.592558][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.645595][T10593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.734663][T10593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.757352][ T5449] 8021q: adding VLAN 0 to HW filter on device eth13 [ 289.771370][T10771] FAULT_INJECTION: forcing a failure. [ 289.771370][T10771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.776990][T10771] CPU: 2 UID: 0 PID: 10771 Comm: syz.2.1330 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.777020][T10771] Tainted: [L]=SOFTLOCKUP [ 289.777026][T10771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.777038][T10771] Call Trace: [ 289.777044][T10771] [ 289.777051][T10771] dump_stack_lvl+0x100/0x190 [ 289.777079][T10771] should_fail_ex.cold+0x5/0xa [ 289.777101][T10771] _copy_from_user+0x2e/0xd0 [ 289.777129][T10771] get_compat_msghdr+0xb3/0x480 [ 289.777158][T10771] ? __pfx_get_compat_msghdr+0x10/0x10 [ 289.777193][T10771] ___sys_sendmsg+0x1b6/0x1e0 [ 289.777222][T10771] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.777254][T10771] ? find_held_lock+0x2b/0x80 [ 289.777292][T10771] __sys_sendmsg+0x160/0x210 [ 289.777317][T10771] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.777349][T10771] ? __pfx_ksys_write+0x10/0x10 [ 289.777373][T10771] __do_fast_syscall_32+0xe7/0x970 [ 289.777399][T10771] ? lockdep_hardirqs_on+0x78/0x100 [ 289.777425][T10771] do_fast_syscall_32+0x32/0x70 [ 289.777451][T10771] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.777474][T10771] RIP: 0023:0xf7ff5fec [ 289.777495][T10771] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 289.777503][T10771] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 289.777522][T10771] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 289.777533][T10771] RDX: 0000000024044040 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.777543][T10771] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.777554][T10771] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 289.777564][T10771] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.777587][T10771] [ 289.780035][ T12] IPVS: stop unused estimator thread 0... [ 289.794311][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.872215][T10679] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.877599][T10679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.880326][T10679] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.886936][T10679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 289.926334][T10776] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.940500][T10679] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 289.948601][T10679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 289.951543][T10679] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 289.956325][T10679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.047075][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.103349][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.107956][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.118737][T10761] wg2 speed is unknown, defaulting to 1000 [ 290.176363][T10776] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.221383][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.225923][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.256140][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.300234][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.303892][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.335899][T10776] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.416021][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.463972][T10776] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.511163][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.555728][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.560204][ T5746] Bluetooth: hci3: command tx timeout [ 290.692075][T10679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.827068][T10679] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.850469][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.852807][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.918893][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.922012][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.942351][ T12] bridge_slave_1: left allmulticast mode [ 290.944824][ T12] bridge_slave_1: left promiscuous mode [ 290.948108][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.972804][ T12] bridge_slave_0: left allmulticast mode [ 290.975454][ T12] bridge_slave_0: left promiscuous mode [ 290.978170][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.996523][ T12] pim6reg: left allmulticast mode [ 290.999037][ T12] dvmrp0: left allmulticast mode [ 291.190819][ T42] kauditd_printk_skb: 69 callbacks suppressed [ 291.190837][ T42] audit: type=1800 audit(1786380229.359:1687): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 291.204990][ T42] audit: type=1807 audit(1786380229.379:1688): action=measure res=1 [ 291.231844][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.240738][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.248198][ T1157] smbdirect: ib_dev[syz1] removed [ 291.249017][ T12] bond0 (unregistering): Released all slaves [ 291.259450][T10761] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.263093][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.266005][T10761] bridge_slave_0: entered allmulticast mode [ 291.269954][T10761] bridge_slave_0: entered promiscuous mode [ 291.276989][T10761] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.280121][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.283773][T10761] bridge_slave_1: entered allmulticast mode [ 291.287837][T10761] bridge_slave_1: entered promiscuous mode [ 291.302160][ T24] infiniband syz1: ib_query_port failed (-19) [ 291.336644][T10761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.357997][ T42] audit: type=1800 audit(1786380229.529:1689): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 291.376285][T10761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.398030][ T12] tipc: Disabling bearer [ 291.399781][ T12] tipc: Left network mode [ 291.432493][T10809] ima: policy update completed [ 291.437149][ T42] audit: type=1802 audit(1786380229.609:1690): pid=10809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.5.1334" res=1 errno=0 [ 291.444113][ T5814] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.447539][ T5814] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.450786][ T5814] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.477816][T10761] team0: Port device team_slave_0 added [ 291.483698][ T24] wg2 speed is unknown, defaulting to 1000 [ 291.490580][ T24] syz2: Port: 1 Link DOWN [ 291.536757][T10761] team0: Port device team_slave_1 added [ 291.554092][ T42] audit: type=1800 audit(1786380229.719:1691): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16454 res=0 errno=0 [ 291.564274][ T5843] wg2 speed is unknown, defaulting to 1000 [ 291.574325][T10060] IPVS: starting estimator thread 0... [ 291.580715][T10761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.583974][T10761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.605237][T10761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.612516][T10761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.615296][T10761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.633784][T10761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.638788][T10823] FAULT_INJECTION: forcing a failure. [ 291.638788][T10823] name failslab, interval 1, probability 0, space 0, times 0 [ 291.642911][T10823] CPU: 3 UID: 0 PID: 10823 Comm: syz.2.1335 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.642930][T10823] Tainted: [L]=SOFTLOCKUP [ 291.642934][T10823] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 291.642941][T10823] Call Trace: [ 291.642946][T10823] [ 291.642950][T10823] dump_stack_lvl+0x100/0x190 [ 291.642983][T10823] should_fail_ex.cold+0x5/0xa [ 291.642996][T10823] should_failslab+0xc2/0x120 [ 291.643012][T10823] __kmalloc_noprof+0xfc/0x820 [ 291.643026][T10823] ? rcu_is_watching+0x12/0xc0 [ 291.643040][T10823] ? tomoyo_realpath_from_path+0xb6/0x690 [ 291.643060][T10823] tomoyo_realpath_from_path+0xb6/0x690 [ 291.643079][T10823] tomoyo_path_number_perm+0x23c/0x580 [ 291.643092][T10823] ? tomoyo_path_number_perm+0x22e/0x580 [ 291.643107][T10823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 291.643121][T10823] ? get_pid_task+0x106/0x250 [ 291.643148][T10823] ? find_held_lock+0x2b/0x80 [ 291.643161][T10823] ? __fget_files+0x215/0x3d0 [ 291.643171][T10823] ? hook_file_ioctl_common+0x140/0x440 [ 291.643184][T10823] ? __fget_files+0x215/0x3d0 [ 291.643196][T10823] ? __fget_files+0x21f/0x3d0 [ 291.643208][T10823] security_file_ioctl_compat+0xd3/0x230 [ 291.643223][T10823] __ia32_compat_sys_ioctl+0xc2/0x360 [ 291.643254][T10823] __do_fast_syscall_32+0xe7/0x970 [ 291.643272][T10823] ? lockdep_hardirqs_on+0x78/0x100 [ 291.643288][T10823] do_fast_syscall_32+0x32/0x70 [ 291.643303][T10823] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.643317][T10823] RIP: 0023:0xf7ff5fec [ 291.643331][T10823] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 291.643336][T10823] RSP: 002b:00000000f549550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 291.643348][T10823] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000004b72 [ 291.643354][T10823] RDX: 0000000080000240 RSI: 0000000000000000 RDI: 0000000000000000 [ 291.643360][T10823] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.643366][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.643372][T10823] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.643386][T10823] [ 291.651199][T10823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 291.671773][ T5746] Bluetooth: hci1: command tx timeout [ 291.692873][ T5745] Bluetooth: hci2: command tx timeout [ 291.709764][T10821] IPVS: using max 45 ests per chain, 108000 per kthread [ 291.764632][ T5449] 8021q: adding VLAN 0 to HW filter on device eth14 [ 291.792244][T10761] hsr_slave_0: entered promiscuous mode [ 291.795038][T10761] hsr_slave_1: entered promiscuous mode [ 291.802452][T10761] debugfs: 'hsr0' already exists in 'hsr' [ 291.804977][T10761] Cannot create hsr debugfs directory [ 291.892515][ T5824] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.917927][ T42] audit: type=1800 audit(1786380230.089:1692): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="dhcpcd" name="uevent" dev="sysfs" ino=218790 res=0 errno=0 [ 291.931018][ T42] audit: type=1800 audit(1786380230.099:1693): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27302 res=0 errno=0 [ 291.939112][ T42] audit: type=1800 audit(1786380230.099:1694): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27301 res=0 errno=0 [ 291.948227][ T42] audit: type=1800 audit(1786380230.109:1695): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=222795 res=0 errno=0 [ 292.015142][T10679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.055730][ T12] hsr_slave_0: left promiscuous mode [ 292.059043][ T12] hsr_slave_1: left promiscuous mode [ 292.064091][ T12] veth1_macvtap: left promiscuous mode [ 292.066238][ T12] veth0_macvtap: left promiscuous mode [ 292.068087][ T12] veth1_vlan: left promiscuous mode [ 292.072345][ T12] veth0_vlan: left promiscuous mode [ 292.205147][ T12] team0 (unregistering): Port device team_slave_1 removed [ 292.215874][ T12] team0 (unregistering): Port device team_slave_0 removed [ 292.245047][ T1157] smc: removing ib device syz2 [ 292.264488][ T42] audit: type=1800 audit(1786380230.439:1696): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 292.305439][ T1157] smbdirect: ib_dev[syz2] removed [ 292.342130][ T5449] 8021q: adding VLAN 0 to HW filter on device eth15 [ 292.345759][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 292.384878][T10850] FAULT_INJECTION: forcing a failure. [ 292.384878][T10850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.405227][T10761] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 292.405298][T10850] CPU: 3 UID: 0 PID: 10850 Comm: syz.2.1337 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.405324][T10850] Tainted: [L]=SOFTLOCKUP [ 292.405330][T10850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 292.405340][T10850] Call Trace: [ 292.405345][T10850] [ 292.405351][T10850] dump_stack_lvl+0x100/0x190 [ 292.405376][T10850] should_fail_ex.cold+0x5/0xa [ 292.405396][T10850] _copy_from_user+0x2e/0xd0 [ 292.405420][T10850] move_addr_to_kernel+0x65/0x170 [ 292.405440][T10850] __sys_sendto+0x1b8/0x4e0 [ 292.405461][T10850] ? __pfx___sys_sendto+0x10/0x10 [ 292.405497][T10850] ? fput+0x79/0x100 [ 292.405517][T10850] ? ksys_write+0x1ac/0x250 [ 292.405534][T10850] __ia32_sys_sendto+0xdd/0x1b0 [ 292.405554][T10850] ? __do_fast_syscall_32+0x98/0x970 [ 292.405584][T10850] ? lockdep_hardirqs_on+0x78/0x100 [ 292.405604][T10850] __do_fast_syscall_32+0xe7/0x970 [ 292.405626][T10850] ? lockdep_hardirqs_on+0x78/0x100 [ 292.405649][T10850] do_fast_syscall_32+0x32/0x70 [ 292.405672][T10850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.405693][T10850] RIP: 0023:0xf7ff5fec [ 292.405712][T10850] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 292.405719][T10850] RSP: 002b:00000000f54b650c EFLAGS: 00000292 ORIG_RAX: 0000000000000171 [ 292.405735][T10850] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000900 [ 292.405745][T10850] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000080000a00 [ 292.405754][T10850] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 292.405763][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.405773][T10850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.405794][T10850] [ 292.474584][T10860] trusted_key: encrypted_key: master key parameter '' is invalid [ 292.512704][T10761] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 292.515570][T10761] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 292.561008][T10761] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 292.583177][T10761] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 292.620516][T10761] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 292.631578][ T5745] Bluetooth: hci3: command tx timeout [ 292.656782][T10761] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 292.680141][T10761] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 292.729861][T10679] veth0_vlan: entered promiscuous mode [ 292.814638][T10679] veth1_vlan: entered promiscuous mode [ 292.915074][T10679] veth0_macvtap: entered promiscuous mode [ 292.932890][T10679] veth1_macvtap: entered promiscuous mode [ 292.973225][T10679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.022146][T10679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.068692][ T5449] 8021q: adding VLAN 0 to HW filter on device eth16 [ 293.081804][T10761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.344735][T10761] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.412896][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.415691][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.432442][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.434808][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.481917][ T5814] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.485976][ T12] IPVS: stop unused estimator thread 0... [ 293.492327][ T225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.499309][ T225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.504244][T10881] ima: policy update completed [ 293.534625][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.538151][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.571578][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.575247][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.578937][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.751809][ T5745] Bluetooth: hci2: command tx timeout [ 293.751833][ T5746] Bluetooth: hci1: command tx timeout [ 293.960141][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17 [ 293.964001][T10901] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 293.966075][T10901] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 293.975031][T10901] vhci_hcd vhci_hcd.0: Device attached [ 294.065280][T10894] 9pnet_virtio: no channels available for device syz [ 294.129501][T10894] 9pnet_virtio: no channels available for device syz [ 294.130533][T10894] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 294.130714][T10894] overlayfs: overlapping lowerdir path [ 294.210453][T10914] geneve2: entered allmulticast mode [ 294.243399][T10761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.254527][T10060] usb 48-1: SetAddress Request (2) to port 0 [ 294.254622][T10060] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 294.528780][T10761] veth0_vlan: entered promiscuous mode [ 294.545149][T10761] veth1_vlan: entered promiscuous mode [ 294.812091][T10761] veth0_macvtap: entered promiscuous mode [ 294.892970][T10902] vhci_hcd: connection reset by peer [ 294.895082][ T5814] vhci_hcd vhci_hcd.5: stop threads [ 294.896808][ T5814] vhci_hcd vhci_hcd.5: release socket [ 294.899793][ T5814] vhci_hcd vhci_hcd.5: disconnect device [ 294.963996][T10761] veth1_macvtap: entered promiscuous mode [ 295.028160][T10761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.137291][T10761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.225309][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.228677][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.232005][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.238889][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.253604][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.266408][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.303667][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.306272][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.645241][T10945] syzkaller0: entered promiscuous mode [ 295.647048][T10945] syzkaller0: entered allmulticast mode [ 295.656660][ T5746] Bluetooth: hci3: Malformed LE Event: 0x0d [ 295.831803][ T5746] Bluetooth: hci2: command tx timeout [ 295.831911][ T5745] Bluetooth: hci1: command tx timeout [ 296.716123][T10948] ima: policy update completed [ 296.718846][ T42] kauditd_printk_skb: 38 callbacks suppressed [ 296.718865][ T42] audit: type=1802 audit(1786380234.889:1735): pid=10948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.1349" res=1 errno=0 [ 297.520541][T10951] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 297.527698][T10951] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 297.533293][T10951] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 297.546355][T10951] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 297.597665][ T42] audit: type=1800 audit(1786380235.769:1736): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16067 res=0 errno=0 [ 297.607714][ T42] audit: type=1800 audit(1786380235.769:1737): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224737 res=0 errno=0 [ 297.615360][ T42] audit: type=1800 audit(1786380235.789:1738): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 297.620513][T10960] netlink: zone id is out of range [ 297.628693][ T42] audit: type=1800 audit(1786380235.799:1739): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 297.638169][ T42] audit: type=1800 audit(1786380235.799:1740): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224752 res=0 errno=0 [ 297.653222][ T42] audit: type=1800 audit(1786380235.809:1741): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224703 res=0 errno=0 [ 297.710172][ T42] audit: type=1800 audit(1786380235.879:1742): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16583 res=0 errno=0 [ 297.727214][ T42] audit: type=1800 audit(1786380235.899:1743): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16712 res=0 errno=0 [ 297.733462][ T42] audit: type=1800 audit(1786380235.899:1744): pid=5147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224897 res=0 errno=0 [ 297.884198][T10980] FAULT_INJECTION: forcing a failure. [ 297.884198][T10980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.889020][T10980] CPU: 3 UID: 0 PID: 10980 Comm: syz.6.1357 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.889040][T10980] Tainted: [L]=SOFTLOCKUP [ 297.889044][T10980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 297.889051][T10980] Call Trace: [ 297.889058][T10980] [ 297.889065][T10980] dump_stack_lvl+0x100/0x190 [ 297.889090][T10980] should_fail_ex.cold+0x5/0xa [ 297.889109][T10980] _copy_from_user+0x2e/0xd0 [ 297.889132][T10980] get_compat_msghdr+0xb3/0x480 [ 297.889158][T10980] ? __pfx_get_compat_msghdr+0x10/0x10 [ 297.889194][T10980] ___sys_sendmsg+0x1b6/0x1e0 [ 297.889215][T10980] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.889242][T10980] ? find_held_lock+0x2b/0x80 [ 297.889276][T10980] __sys_sendmsg+0x160/0x210 [ 297.889300][T10980] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.889329][T10980] ? __pfx_ksys_write+0x10/0x10 [ 297.889344][T10980] __do_fast_syscall_32+0xe7/0x970 [ 297.889360][T10980] ? lockdep_hardirqs_on+0x78/0x100 [ 297.889376][T10980] do_fast_syscall_32+0x32/0x70 [ 297.889391][T10980] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.889406][T10980] RIP: 0023:0xf7f83fec [ 297.889420][T10980] Code: Unable to access opcode bytes at 0xf7f83fc2. [ 297.889425][T10980] RSP: 002b:00000000f544650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172 [ 297.889437][T10980] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 297.889460][T10980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.889466][T10980] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.889472][T10980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.889478][T10980] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.889494][T10980] [ 297.911495][ T5745] Bluetooth: hci1: command tx timeout [ 298.163547][T10963] 9pnet_virtio: no channels available for device syz [ 298.167806][T10963] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 298.219173][T10991] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 298.221320][T10991] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 298.240102][T10991] vhci_hcd vhci_hcd.0: Device attached [ 298.269893][T10992] ima: policy update completed [ 298.309682][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1360'. [ 298.376811][T11001] netlink: 'syz.5.1362': attribute type 11 has an invalid length. [ 298.396817][ T5735] ================================================================== [ 298.399826][ T5735] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock_bh+0x33/0x40 [ 298.402727][ T5735] Read of size 1 at addr ffff8880292755a0 by task syz-executor/5735 [ 298.406579][ T5735] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 298.408120][ T5735] CPU: 0 UID: 0 PID: 5735 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 298.408145][ T5735] Tainted: [L]=SOFTLOCKUP [ 298.408151][ T5735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.408162][ T5735] Call Trace: [ 298.408168][ T5735] [ 298.408175][ T5735] dump_stack_lvl+0x100/0x190 [ 298.408197][ T5735] print_report+0x13d/0x4b0 [ 298.408222][ T5735] ? __virt_addr_valid+0x239/0x430 [ 298.408240][ T5735] ? _raw_spin_lock_bh+0x33/0x40 [ 298.408258][ T5735] kasan_report+0xdf/0x1c0 [ 298.408280][ T5735] ? _raw_spin_lock_bh+0x33/0x40 [ 298.408298][ T5735] ? _raw_spin_lock_bh+0x33/0x40 [ 298.408315][ T5735] __kasan_check_byte+0x36/0x50 [ 298.408354][ T5735] lock_acquire+0x132/0x370 [ 298.408370][ T5735] ? do_raw_spin_lock+0x128/0x260 [ 298.408387][ T5735] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.408406][ T5735] _raw_spin_lock_bh+0x33/0x40 [ 298.408423][ T5735] ? bt_accept_unlink+0x64/0x370 [ 298.408442][ T5735] bt_accept_unlink+0x64/0x370 [ 298.408459][ T5735] ? __local_bh_enable_ip+0x9e/0x120 [ 298.408479][ T5735] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 298.408505][ T5735] l2cap_chan_del+0xa6/0x920 [ 298.408523][ T5735] l2cap_conn_del+0x34f/0x6b0 [ 298.408542][ T5735] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 298.408559][ T5735] l2cap_disconn_cfm+0x9f/0x100 [ 298.408580][ T5735] hci_conn_hash_flush+0x10e/0x280 [ 298.408605][ T5735] hci_dev_close_sync+0x5cf/0x13c0 [ 298.408620][ T5735] ? find_held_lock+0x2b/0x80 [ 298.408639][ T5735] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 298.408657][ T5735] hci_dev_do_close+0x2e/0xb0 [ 298.408677][ T5735] hci_unregister_dev+0x23f/0x690 [ 298.408700][ T5735] vhci_release+0x17d/0x230 [ 298.408719][ T5735] ? __pfx_vhci_release+0x10/0x10 [ 298.408737][ T5735] __fput+0x3ff/0xb50 [ 298.408757][ T5735] task_work_run+0x150/0x240 [ 298.408780][ T5735] ? __pfx_task_work_run+0x10/0x10 [ 298.408804][ T5735] do_exit+0x951/0x2ae0 [ 298.408827][ T5735] ? do_raw_spin_lock+0x128/0x260 [ 298.408844][ T5735] ? __pfx_do_exit+0x10/0x10 [ 298.408863][ T5735] ? do_group_exit+0x1bd/0x2a0 [ 298.408883][ T5735] ? rcu_is_watching+0x12/0xc0 [ 298.408902][ T5735] do_group_exit+0xd5/0x2a0 [ 298.408923][ T5735] __ia32_sys_exit_group+0x3e/0x50 [ 298.408941][ T5735] ia32_sys_call+0x19ea/0x19f0 [ 298.408963][ T5735] __do_fast_syscall_32+0xe7/0x970 [ 298.408985][ T5735] ? lockdep_hardirqs_on+0x78/0x100 [ 298.409006][ T5735] do_fast_syscall_32+0x32/0x70 [ 298.409027][ T5735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.409047][ T5735] RIP: 0023:0xf7ff5fec [ 298.409060][ T5735] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 298.409067][ T5735] RSP: 002b:00000000ffe13bfc EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 298.409084][ T5735] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffe14da0 [ 298.409094][ T5735] RDX: 00000000f71e51b7 RSI: 00000000f748e300 RDI: 00000000f72c1631 [ 298.409103][ T5735] RBP: 00000000ffe13c58 R08: 0000000000000000 R09: 0000000000000000 [ 298.409112][ T5735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.409121][ T5735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.409136][ T5735] [ 298.409141][ T5735] [ 298.516525][ T5735] Allocated by task 10679: [ 298.518143][ T5735] kasan_save_stack+0x30/0x50 [ 298.519886][ T5735] kasan_save_track+0x14/0x30 [ 298.521690][ T5735] __kasan_kmalloc+0xaa/0xb0 [ 298.523392][ T5735] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 298.525400][ T5735] batadv_hard_if_event+0x14bf/0x3870 [ 298.527104][ T5735] notifier_call_chain+0x99/0x3f0 [ 298.528733][ T5735] call_netdevice_notifiers_info+0xbe/0x110 [ 298.530892][ T5735] register_netdevice+0x1998/0x25a0 [ 298.532868][ T5735] __ip_tunnel_create+0x52b/0x670 [ 298.534867][ T5735] ip_tunnel_init_net+0x230/0x780 [ 298.536862][ T5735] ops_init+0x1e2/0x5f0 [ 298.538185][ T5735] setup_net+0x118/0x3a0 [ 298.539659][ T5735] copy_net_ns+0x46f/0x7c0 [ 298.541441][ T5735] create_new_namespaces+0x3ea/0xac0 [ 298.543546][ T5735] unshare_nsproxy_namespaces+0xf2/0x220 [ 298.545756][ T5735] ksys_unshare+0x438/0xab0 [ 298.547571][ T5735] __ia32_sys_unshare+0x30/0x40 [ 298.549149][ T5735] __do_fast_syscall_32+0xe7/0x970 [ 298.550966][ T5735] do_fast_syscall_32+0x32/0x70 [ 298.552934][ T5735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.555178][ T5735] [ 298.556137][ T5735] The buggy address belongs to the object at ffff888029275000 [ 298.556137][ T5735] which belongs to the cache kmalloc-2k of size 2048 [ 298.561511][ T5735] The buggy address is located 400 bytes to the right of [ 298.561511][ T5735] allocated 1040-byte region [ffff888029275000, ffff888029275410) [ 298.567055][ T5735] [ 298.567999][ T5735] The buggy address belongs to the physical page: [ 298.570409][ T5735] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888029273000 pfn:0x29270 [ 298.573672][ T5735] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 298.576846][ T5735] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 298.579639][ T5735] page_type: f5(slab) [ 298.580971][ T5735] raw: 00fff00000000240 ffff88801bc42f00 ffffea000093e010 ffffea0000a5c610 [ 298.584191][ T5735] raw: ffff888029273000 0000000800080005 00000000f5000000 0000000000000000 [ 298.587165][ T5735] head: 00fff00000000240 ffff88801bc42f00 ffffea000093e010 ffffea0000a5c610 [ 298.589998][ T5735] head: ffff888029273000 0000000800080005 00000000f5000000 0000000000000000 [ 298.593398][ T5735] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 298.596742][ T5735] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 298.600036][ T5735] page dumped because: kasan: bad access detected [ 298.602550][ T5735] page_owner tracks the page as allocated [ 298.604516][ T5735] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5734, tgid 5734 (syz-executor), ts 48314537780, free_ts 18204429920 [ 298.611846][ T5735] post_alloc_hook+0xfd/0x120 [ 298.613594][ T5735] get_page_from_freelist+0xf48/0x3530 [ 298.615752][ T5735] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 298.617859][ T5735] new_slab+0xa2/0x640 [ 298.619072][ T5735] refill_objects+0xe3/0x410 [ 298.620606][ T5735] __pcs_replace_empty_main+0x376/0x680 [ 298.622618][ T5735] __kmalloc_cache_noprof+0x479/0x6c0 [ 298.624578][ T5735] rtnl_newlink+0x126/0x2380 [ 298.626012][ T5735] rtnetlink_rcv_msg+0x95e/0xe90 [ 298.627600][ T5735] netlink_rcv_skb+0x159/0x420 [ 298.629424][ T5735] netlink_unicast+0x585/0x850 [ 298.631295][ T5735] netlink_sendmsg+0x8b0/0xda0 [ 298.632816][ T5735] __sys_sendto+0x48b/0x4e0 [ 298.634416][ T5735] __ia32_compat_sys_socketcall+0x59a/0x770 [ 298.636764][ T5735] do_int80_emulation+0x14b/0x720 [ 298.638550][ T5735] asm_int80_emulation+0x1a/0x20 [ 298.640085][ T5735] page last free pid 5139 tgid 5139 stack trace: [ 298.642442][ T5735] __free_frozen_pages+0x79f/0x1090 [ 298.644381][ T5735] qlist_free_all+0x47/0xf0 [ 298.645954][ T5735] kasan_quarantine_reduce+0x1a0/0x1f0 [ 298.647651][ T5735] __kasan_slab_alloc+0x69/0x90 [ 298.649527][ T5735] __kmalloc_noprof+0x2bf/0x820 [ 298.651443][ T5735] tomoyo_supervisor+0x65d/0x1340 [ 298.653228][ T5735] tomoyo_env_perm+0x191/0x200 [ 298.654671][ T5735] tomoyo_find_next_domain+0x13d7/0x2010 [ 298.656622][ T5735] tomoyo_bprm_check_security+0x12d/0x1d0 [ 298.658761][ T5735] security_bprm_check+0x87/0x1e0 [ 298.660448][ T5735] bprm_execve+0x84b/0x1730 [ 298.661924][ T5735] do_execveat_common.isra.0+0x4a5/0x580 [ 298.664140][ T5735] __x64_sys_execve+0x93/0xd0 [ 298.666046][ T5735] do_syscall_64+0x115/0x840 [ 298.667601][ T5735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.669548][ T5735] [ 298.670482][ T5735] Memory state around the buggy address: [ 298.672607][ T5735] ffff888029275480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.675212][ T5735] ffff888029275500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.678084][ T5735] >ffff888029275580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.681060][ T5735] ^ [ 298.682611][ T5735] ffff888029275600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.685444][ T5735] ffff888029275680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 298.688380][ T5735] ================================================================== [ 298.691127][ T5735] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 298.693816][ T5735] CPU: 0 UID: 0 PID: 5735 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 298.697956][ T5735] Tainted: [L]=SOFTLOCKUP [ 298.699508][ T5735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 298.702996][ T5735] Call Trace: [ 298.704327][ T5735] [ 298.705532][ T5735] dump_stack_lvl+0x100/0x190 [ 298.707372][ T5735] vpanic+0x552/0x970 [ 298.708653][ T5735] ? __pfx_vpanic+0x10/0x10 [ 298.710179][ T5735] ? mark_held_locks+0x40/0x70 [ 298.712119][ T5735] ? irqentry_exit+0x24d/0xa00 [ 298.714069][ T5735] ? _raw_spin_lock_bh+0x33/0x40 [ 298.715743][ T5735] panic+0xd1/0xe0 [ 298.717005][ T5735] ? __pfx_panic+0x10/0x10 [ 298.718777][ T5735] ? check_panic_on_warn+0x1f/0x90 [ 298.720834][ T5735] check_panic_on_warn.cold+0x19/0x34 [ 298.722768][ T5735] end_report.part.0+0x3a/0x90 [ 298.724279][ T5735] kasan_report.cold+0xe/0x18 [ 298.726148][ T5735] ? _raw_spin_lock_bh+0x33/0x40 [ 298.728138][ T5735] ? _raw_spin_lock_bh+0x33/0x40 [ 298.730115][ T5735] __kasan_check_byte+0x36/0x50 [ 298.732070][ T5735] lock_acquire+0x132/0x370 [ 298.733911][ T5735] ? do_raw_spin_lock+0x128/0x260 [ 298.735905][ T5735] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 298.737703][ T5735] _raw_spin_lock_bh+0x33/0x40 [ 298.739321][ T5735] ? bt_accept_unlink+0x64/0x370 [ 298.741214][ T5735] bt_accept_unlink+0x64/0x370 [ 298.743049][ T5735] ? __local_bh_enable_ip+0x9e/0x120 [ 298.745380][ T5735] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 298.747456][ T5735] l2cap_chan_del+0xa6/0x920 [ 298.748959][ T5735] l2cap_conn_del+0x34f/0x6b0 [ 298.750845][ T5735] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 298.753021][ T5735] l2cap_disconn_cfm+0x9f/0x100 [ 298.754948][ T5735] hci_conn_hash_flush+0x10e/0x280 [ 298.756955][ T5735] hci_dev_close_sync+0x5cf/0x13c0 [ 298.758962][ T5735] ? find_held_lock+0x2b/0x80 [ 298.760873][ T5735] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 298.762978][ T5735] hci_dev_do_close+0x2e/0xb0 [ 298.764491][ T5735] hci_unregister_dev+0x23f/0x690 [ 298.766533][ T5735] vhci_release+0x17d/0x230 [ 298.768355][ T5735] ? __pfx_vhci_release+0x10/0x10 [ 298.770289][ T5735] __fput+0x3ff/0xb50 [ 298.771895][ T5735] task_work_run+0x150/0x240 [ 298.773759][ T5735] ? __pfx_task_work_run+0x10/0x10 [ 298.775745][ T5735] do_exit+0x951/0x2ae0 [ 298.777321][ T5735] ? do_raw_spin_lock+0x128/0x260 [ 298.778910][ T5735] ? __pfx_do_exit+0x10/0x10 [ 298.780671][ T5735] ? do_group_exit+0x1bd/0x2a0 [ 298.782822][ T5735] ? rcu_is_watching+0x12/0xc0 [ 298.784539][ T5735] do_group_exit+0xd5/0x2a0 [ 298.785994][ T5735] __ia32_sys_exit_group+0x3e/0x50 [ 298.787930][ T5735] ia32_sys_call+0x19ea/0x19f0 [ 298.789860][ T5735] __do_fast_syscall_32+0xe7/0x970 [ 298.791712][ T5735] ? lockdep_hardirqs_on+0x78/0x100 [ 298.793356][ T5735] do_fast_syscall_32+0x32/0x70 [ 298.795812][ T5735] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 298.798355][ T5735] RIP: 0023:0xf7ff5fec [ 298.799661][ T5735] Code: Unable to access opcode bytes at 0xf7ff5fc2. [ 298.802194][ T5735] RSP: 002b:00000000ffe13bfc EFLAGS: 00000286 ORIG_RAX: 00000000000000fc [ 298.805467][ T5735] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000ffe14da0 [ 298.808573][ T5735] RDX: 00000000f71e51b7 RSI: 00000000f748e300 RDI: 00000000f72c1631 [ 298.811685][ T5735] RBP: 00000000ffe13c58 R08: 0000000000000000 R09: 0000000000000000 [ 298.814780][ T5735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 298.817910][ T5735] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 298.821012][ T5735] [ 298.823038][ T5735] Kernel Offset: disabled [ 298.824777][ T5735] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:43:58 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a0f5c5 RDI=ffffffff9b9e3520 RBP=ffffffff9b9e34e0 RSP=ffffc90004477348 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3932303838386652 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9b6e321c R15=ffffffff85a0f560 RIP=ffffffff85a0f5ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096bf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73b04b0 CR3=00000000442a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000e08e000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000015000000000 0000000600000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88801cfa8bf0 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff88802b328418 RDI=ffff88801cfa8bf0 RBP=ffff88801cfa8000 RSP=ffffc90000590e28 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=00000000ffffffff R13=0000000000000046 R14=ffff88801cfa8bf0 R15=0000000000000002 RIP=ffffffff8bb8108f RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096cf3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080001000 CR3=00000000442a9000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014400000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffffff980ac088 RBX=000000000000003b RCX=000000000000003c RDX=ffffffff966c3140 RSI=000000000000003c RDI=ffffffff97f31c98 RBP=0000000000000030 RSP=ffffc90004226a08 R8 =ffffffff966c3170 R9 =0000000000000002 R10=ffffc90004226b98 R11=0000000000000000 R12=ffffffff81e507e0 R13=ffffc90004226ab0 R14=ffffffff81e515f0 R15=ffffffff97f31c98 RIP=ffffffff81e520b7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096df3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46ec0 CR3=00000000514cb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 2e7a797300000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffffc900236a7750 RCX=ffffffff8296aaeb RDX=0000000000000000 RSI=ffffffff82d11302 RDI=ffff888027c6d6a4 RBP=ffffc900236a7540 RSP=ffffc900236a74c8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff888027c6d6a0 R13=1ffff920046d4e9c R14=ffffc900236a7780 R15=ffff888025d87aa0 RIP=ffffffff82d1133c RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888096ef3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbb1d5ab440 CR3=000000004c3d6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 766c6f7365726269 6c2f343662696c2f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000c10 000000000000d3f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffffffffffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000001da0 0000000000033260 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000