last executing test programs: 3.758204274s ago: executing program 2 (id=3): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x10010, 0xffffffffffffffff, 0x572aa000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00001c9000/0x4000)=nil, 0x4000, 0x0) (async) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1cf) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000140)='\x06\x00\x00\x00\x04\xb0\xfe\x98\a\x84\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xc3) pipe2$watch_queue(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0xe6) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xffffffffffffffff) (async) fchdir(0xffffffffffffffff) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000100)={0x1f, 0xfffe}, 0xe) listen(r5, 0x0) shutdown(r5, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r1, {0x9, 0x1}}, './debug\x00'}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000540)={0xd, @sliced={0x8, [0xa5, 0x800, 0x86, 0x200, 0xb, 0x800, 0x8, 0xbddf, 0x8000, 0xf, 0xf, 0xfe00, 0x13, 0xd, 0x1, 0x7, 0x1ff, 0xfff, 0x6, 0x100, 0xbe78, 0x5, 0x9, 0xff00, 0x7ff, 0xff6a, 0x3, 0xfc6b, 0xf7, 0x8, 0x8000, 0x6, 0xffed, 0xffff, 0x9, 0x9, 0xd18, 0x0, 0x6, 0x1, 0x7, 0x7, 0x9, 0x7, 0xa, 0x2, 0x9, 0x180]}}) (async) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000640)={0xda, 0xdf, 0x2, {0x3, @sdr={0x16000c0c, 0xf86}}, 0x8001}) (async) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000740)={0x6, 0x5}) (async) r8 = openat$autofs(0xffffffffffffff9c, 0x0, 0x408400, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r8, 0xc0189378, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r7}}, './file0\x00'}) ioctl$VIDIOC_ENCODER_CMD(r9, 0xc028564d, &(0x7f00000007c0)={0x1, 0x1, [0x3, 0x40000000, 0xb5f, 0x5, 0x8, 0x8001, 0x9, 0xe00]}) 3.589737243s ago: executing program 2 (id=6): r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x8, 0x105200) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000100)) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='udf\x00', 0x20001b, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) 3.538779993s ago: executing program 2 (id=7): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) getpgrp(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x3, 0x12) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) syz_ublk_add_dev(r0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x1, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x4, 0xdb5, 0x0, 0x0, 0x1000, 0x8000, 0x0, 0x0, 0x80}}}, &(0x7f0000000400)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={&(0x7f00000001c0)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', r1, 0x4000, r2}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, &(0x7f0000000240)=""/118, 0x76, 0x0, 0x0}, 0x58) 3.49024699s ago: executing program 2 (id=9): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x100, &(0x7f0000000080)=0x2) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f00000000c0)={0x0, 0x7f, 0x5, 0xb, 0xe, "517bb841daee559a9575a676672939d09c035f"}) 3.070496875s ago: executing program 1 (id=13): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000d00)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1a, 0x4, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xc}], {0x95, 0x0, 0x18}}, &(0x7f0000000e40)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.069963471s ago: executing program 1 (id=14): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8416, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) syz_ublk_setup_io_uring(0x1c, &(0x7f0000000200)={0x0, 0x99ee, 0x80, 0x0, 0x4001cb, 0x0, r2}, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000300)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) execveat(r2, &(0x7f0000000380)='./dev/sda1\x00', &(0x7f0000000500)={[&(0x7f00000003c0)='#! ', &(0x7f0000000400)='\x00', &(0x7f0000000440)='devtmpfs\x00', &(0x7f0000000480)='&#&\x00', &(0x7f00000004c0)='ext4\x00']}, &(0x7f00000005c0)={[&(0x7f0000000540)='%@\x00', &(0x7f0000000580)='cpuset.memory_pressure\x00']}, 0x1000) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000d80)={0x4, 0xffffffff000, 0x5, 0x102000}) 2.990247083s ago: executing program 1 (id=15): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r2, r1, 0x25, 0x0, @void}, 0x10) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x5) 2.859841851s ago: executing program 1 (id=16): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x4004811}, 0x20) 2.859483638s ago: executing program 1 (id=17): prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x0, 0xf67}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x20, 0x20, 0x8, 0xbd96, {{0x32, 0x4, 0x1, 0x21, 0xc8, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @remote, {[@timestamp={0x44, 0x8, 0xed, 0x0, 0x9, [0x3]}, @timestamp_prespec={0x44, 0x24, 0xde, 0x3, 0x1, [{@remote, 0x7}, {@multicast2, 0x71}, {@loopback, 0x4}, {@loopback, 0x1}]}, @timestamp={0x44, 0x8, 0xb9, 0x0, 0x2, [0x3]}, @cipso={0x86, 0x15, 0x3, [{0x6, 0xf, "e428d1eb2666d56b2b0cb8d9ff"}]}, @cipso={0x86, 0x6b, 0x0, [{0x1, 0x3, '`'}, {0x7, 0x9, "5426bb6dc2550c"}, {0x7, 0x12, "6a16ca197b3a9fa3ff73eea506cffed4"}, {0x0, 0xf, "77e2e702764017fd21bf137be1"}, {0x2, 0xc, "ebd018bdc354071eaeac"}, {0x2, 0x7, "cd6718d70f"}, {0x5, 0x11, "69486e66076a90c553a7056a5acbce"}, {0x2, 0x10, "847d58de25ee37e8f448e0d9f2f1"}, {0x2, 0x4, 'SJ'}]}]}}}}}) r3 = syz_open_dev$vcsn(&(0x7f0000000340), 0x8d, 0x5c1400) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) r5 = creat(&(0x7f00000004c0)='./file0\x00', 0x7a) close(r5) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x24b2, 0x0, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$key(0xf, 0x3, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000700)={0x1, &(0x7f0000000740)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000780)={0x1f, 0xffff, 0x3}, 0x6) r10 = add_key(&(0x7f0000000800)='keyring\x00', &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r11 = add_key(&(0x7f0000000880)='asymmetric\x00', 0x0, &(0x7f00000008c0)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r10) r12 = add_key$keyring(&(0x7f0000000e40), &(0x7f0000000e80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r12, &(0x7f0000000ec0)='asymmetric\x00', &(0x7f0000000f00)=@chain={'key_or_keyring:', r11}) add_key(&(0x7f0000000f40)='asymmetric\x00', 0x0, &(0x7f0000000f80)="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", 0x1d8, r12) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x8927, &(0x7f00000006c0)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x12, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xf}, @ldst={0x0, 0x0, 0x1, 0x5, 0x0, 0x80, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x6b4219d4, 0x0, 0x0, 0x41100, 0x62, '\x00', r2, @fallback=0x15, r3, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xe, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[r4, r5, r6], &(0x7f00000005c0)=[{0x3, 0x3, 0x0, 0x1}, {0x4, 0x4, 0x10, 0xc}], 0x10, 0x3}, 0x94) mlock(&(0x7f000000c000/0x1000)=nil, 0x1000) 2.799259992s ago: executing program 1 (id=18): r0 = socket$unix(0x1, 0x2, 0x0) request_key(0x0, 0x0, &(0x7f0000000080)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000100)={0x27, 0x1}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000180)={&(0x7f0000000140)=[{0x9, 0x3}, {0xffaf, 0x1, 0x1}, {0x7, 0x6, 0x1}, {0x9, 0x3, 0x1}], 0x4, 0x10, 0x0, 0x8000}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000003c0)={0xd, {"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", 0x1000}}, 0x1006) ptrace(0x10, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000040)={'wlan0\x00'}) syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.600225023s ago: executing program 3 (id=19): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000840)={0x0, 0x0}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000880), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000008c0)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000900)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x48, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000580), 0x1, 0x2) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="540000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="91400300000000002000128008000100736974001400028008000300ac1e010106000d00090000"], 0x54}, 0x1, 0x0, 0x0, 0x24048c00}, 0x8010) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r9, 0xc2604111, &(0x7f00000005c0)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x71a0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2, 0xffffffff], [0xffffffff, 0x0, 0x80000001, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x5}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xfffffffb}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0x80}, {0x0, 0xffffffff}, {0x7, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r9, 0x4140, 0x0) write$P9_RSTATu(r9, 0x0, 0x6e) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc4, r4, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x1f}}}}, [@NL80211_ATTR_TX_RATES={0x54, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x7, 0x3, 0xf2f2, 0x6, 0x78, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x388, 0x7, 0x0, 0x812b, 0xff, 0xaf5b]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0xfffa, 0x8, 0x7, 0x4, 0x7]}}]}]}, @NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0x9}, {0x0, 0x1}, {0x0, 0x8}, {0x2, 0x2}, {0x6, 0x4}, {0x6, 0x9}, {}, {0x0, 0x3}, {0x4, 0x4}, {0x3, 0x7}, {0x2, 0x4}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x4}, {0x4, 0x6}, {0x7, 0x5}, {0x1}, {0x4, 0x1}, {0x5, 0x7}, {0x1, 0x9}, {0x2, 0xa}, {0x2, 0x3}, {0x0, 0xa}, {0x2}, {0x3}, {0x2, 0x6}, {0x5, 0x2}, {0x1, 0x4}, {0x7, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x5}, {0x3, 0xa}, {0x4, 0x7}, {0x0, 0x2}, {0x4, 0x7}, {0x7, 0x9}, {0x3, 0x3}, {0x2, 0x8}, {0x4}, {0x1, 0x7}, {0x2, 0x2}, {0x2, 0x5}, {0x3, 0x6}, {0x5, 0x4}, {0x1, 0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x4, 0x8}, {0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x6, 0x2}]}]}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x264498e8c5aa6df0}, 0x20000810) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r11], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.039958544s ago: executing program 0 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3ff, 0x25}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c011}, 0xd0c0) 2.036991496s ago: executing program 0 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x20044044}, 0xd0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) writev(r0, &(0x7f0000000040), 0x2) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSCTTY(r1, 0x540e, 0x2) 2.028007729s ago: executing program 0 (id=28): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0x10, 0x4) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f00000000c0)=0xb) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000140)={r3, 0x22}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x8000, 0x7, 0x800, 0x9, {{0x28, 0x4, 0x0, 0x1b, 0xa0, 0x64, 0x0, 0x0, 0x2f, 0x0, @multicast2, @loopback, {[@generic={0x86, 0x6, "dfebb351"}, @rr={0x7, 0x23, 0xea, [@broadcast, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x38}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0xa4, [@multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @multicast2]}, @ssrr={0x89, 0xf, 0x7d, [@loopback, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xb0, 0x0, 0x4, [0x8, 0x2]}, @rr={0x7, 0xb, 0x56, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0x3d, [@multicast2, @private=0xa010101, @multicast2, @local, @remote]}, @cipso={0x86, 0xb, 0x0, [{0x2, 0x5, "ed2591"}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xf}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40480a5) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0xc0bc421b13211675}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000480)={0x9, 0x108, 0xfa00, {r6, 0x0, "4fbc75", "0dab2d688bb42015382e31df871ff556f2d3b612173189e2964e24781fd1cc0f0e4e202008a16fe36b692ad10640be6ae7c653d7b0d702b7ded3d4ca08c21800e665aa2db61764604bb75096ead1bdf54416dbe8680bcecf97f42b8727adda9412e0bf9edd3989516d615e2f5b48424d29bee580a9086f71967489aba6b67e8d7b20990aa1c78b8506f614b25ffc8b29722ac9a28560ce5b735cbbbb3413426c0c5755dcb2e4a97d01fcfe8ed438acb17c52496a737bff90955e2fe87c6730a00fe5b205bba96478b707f3c7808bdcfd7dec5678ca0e20816d13a62636a95ea3e8fd1b1cedc677882c33929ce623cc76a4a8812c79e6cbf08dadd8e311a0d191"}}, 0x110) rmdir(&(0x7f00000005c0)='./file0\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000600)={@id={0x2, 0x0, @a}}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000640), 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, 0x140c, 0x20, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8040) gettid() ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000780)) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0x18b3) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000007c0)) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000800)={{0xa, 0x4e21, 0x8, @rand_addr=' \x01\x00', 0x3}, {0xa, 0x4e20, 0x3, @mcast2, 0xfffffff8}, 0x0, {[0x16, 0x88, 0x9f9, 0xfffffffd, 0x1ff, 0x4, 0x4, 0x1]}}, 0x5c) r7 = syz_genetlink_get_family_id$smc(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48021}, 0x2) syz_ublk_setup_io_uring(0x1f73, &(0x7f00000009c0)={0x0, 0x390b, 0x200, 0x3, 0x87}, &(0x7f0000000a40)=0x0, &(0x7f0000000a80), &(0x7f0000000ac0)) r9 = mmap$IORING_OFF_CQ_RING(0x0, 0x80000000, 0x1000000, 0x20010, r1, 0x8000000) syz_io_uring_complete(r8, r9) write$binfmt_aout(r2, &(0x7f0000000b00)={{0xcc, 0xfc, 0x0, 0x2c6, 0x390, 0xa6cf, 0x231, 0x100}, "0b668a96aff96000dc00c6580a7621695fb8978edc138dc3e68decda109c746911374ece8b3bf1d057fa758be5dbf7b8ed43b629095f51941c84beaf1cd007c57b631814dcdcd42cb983d14f330445dafcd43642a32ebe51412ef1d1122060c598a6a66ef60849c4861c43e85f445c133464010c64d8a7fad84c1c5d0d97271f6a4afad58b21ed92cdfaa249c96b6ce2f2f5161e84ad8a00b429f0f93b14a2721b018eb4004f10b7098a5809e503ff030cad3711760f6efcc485831b5e03bafc258ce1e21e5eec0598313a", ['\x00', '\x00', '\x00', '\x00']}, 0x4eb) r10 = socket$unix(0x1, 0x5, 0x0) accept4$unix(r10, &(0x7f0000001000), &(0x7f0000001080)=0x6e, 0x80000) 1.960583437s ago: executing program 0 (id=29): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) exit(0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x50, 0x68, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x2}, {0x2}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x4}, @NHA_RES_GROUP_IDLE_TIMER={0x8}]}]}, 0x50}}, 0x0) 1.110267668s ago: executing program 0 (id=30): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) r0 = gettid() rt_sigqueueinfo(r0, 0x37, &(0x7f0000000080)={0x28, 0x5, 0x8}) timer_create(0x0, &(0x7f0000000340)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000380)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000400)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000440)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000500)=[{{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000600)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000680)={r3, 0x8}, 0x8) fcntl$lock(r1, 0x410, &(0x7f0000000480)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800002, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f00000004c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) r4 = syz_open_dev$usbmon(&(0x7f00000001c0), 0x80000000, 0x40002) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000240)=""/186, 0xba}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x2, 0x58, 0x65, 0x0, 0x2, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x1b}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x6}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x3, {{0xe, 0x1, 0xfe, 0x1, 0x1, 0x0, 0x5, 0x3}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0xf9}, 0x2, {0x7fff, 0xb730, 0x1, 0x4, 0x1, 0x1, 0x1}}}}}}}}, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.10963003s ago: executing program 3 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESDEC], 0x3c}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x43, 0x3) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000140)={{@local, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x5}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000001c0)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@local}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000280)={{@hyper, 0x2}, @hyper, 0xc, 0x0, 0x81, 0xfffffffffffffff9, 0x0, 0xfffffffe, 0x3}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0xb01, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c, &(0x7f0000000780)}}], 0x1, 0xad72df587c555044) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000640), &(0x7f0000000680)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./config\x00', &(0x7f0000000740)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g_uac2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='./config/usb_gadget/g_uac2\x00', 0x1a8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r6, &(0x7f0000000840)="0e02d54228c260ac4631bb8cf4aff4b6fd", 0x11) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r7) sendmsg$IEEE802154_LIST_IFACE(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x14, r8, 0x703, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r8, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040894}, 0x2000c841) 250.246107ms ago: executing program 0 (id=32): openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x2, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000380)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@any, 0x3}}}, 0xa) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2, 0x4d2, @remote}, 0x10) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x4c, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_CT={0x2c, 0xb, 0x0, 0x1, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}]}, 0x4c}}, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) (async) personality(0x87bf5ac905ea0f7f) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20842, 0x63) (rerun: 64) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000100003fedbdf2500007600", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c00028008001a0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000002c80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000001180)='i', 0x1}], 0x1}}], 0x2, 0x48000) 150.014152ms ago: executing program 3 (id=33): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000cc0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000d00)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1a, 0x4, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0xc}], {0x95, 0x0, 0x30}}, &(0x7f0000000e40)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 149.410568ms ago: executing program 3 (id=34): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/cpu_dma_latency\x00', 0x280e02, 0x100) read(r0, 0x0, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) r1 = socket(0x10, 0x3, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000140)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x4a8e) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000580)="ee", 0xfffffe5e}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x80e0) r6 = syz_io_uring_setup(0xf08, &(0x7f0000000280)={0x0, 0xaa21, 0x4, 0x3, 0x800000c3}, &(0x7f0000000680)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f00000003c0)=@IORING_OP_FUTEX_WAKE={0x34, 0x0, 0x0, 0xe, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r6, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000006c0)={'nat\x00', 0x0, 0x0, 0x0, [0x96a8, 0xfffffffffffffeff, 0x1, 0xffffffff80000000, 0x100000000, 0x2]}, &(0x7f0000000740)=0x78) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000009000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r10], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r11 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000200)={0xffffe8d3, 0x1, 0x83, "ac9b94aaad0b79ae3a00000000000000dcfa577900", 0x31324d59}) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 90.095832ms ago: executing program 3 (id=35): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x6009, 0x4) recvfrom(r0, 0x0, 0x9a, 0x40012042, 0x0, 0xffffffffffffffe6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() socket$inet_mptcp(0x2, 0x1, 0x106) (async) prlimit64(r1, 0xa, 0x0, 0x0) (async) sched_setscheduler(r1, 0x0, &(0x7f0000000380)=0x6060) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="38010000100033062abd700000000000fe8000000000000000000000000000aaff0100000000000000000000000000010000fffd4e2400000200202004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003200000020010000000000000000000000000002fdffffffffffffff00000000000400000000000000000000cd2d0000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000040000000300000025bd700000e500000a0004000000000000000000480001006d643500"/236], 0x138}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) (async) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd\x00') statx(r3, 0x0, 0x1000, 0x200, &(0x7f0000000480)) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x26) (async) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='ext4\x00', 0x8410, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f00000002c0)='./file0\x00') (async) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000005c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f0000000600)={0x20, r5, 0x1, 0x0, &(0x7f0000000640)=[{}]}) socket(0x1, 0x803, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000840)=""/84, 0x9}) (async) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20a00, 0x168) 0s ago: executing program 3 (id=36): r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000100)="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", 0xfc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x2, 0x7fff7ffc}]}) r1 = syz_open_dev$dri(&(0x7f0000000200), 0x1f, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000240)={0x3}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x75) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 30.091523][ T43] audit: type=1400 audit(1791913262.961:116): avc: denied { write } for pid=5635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.146990][ T43] audit: type=1400 audit(1791913263.021:117): avc: denied { write } for pid=5638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.464623][ T43] audit: type=1400 audit(1791913263.331:118): avc: denied { write } for pid=5641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.501462][ T43] audit: type=1400 audit(1791913263.371:119): avc: denied { write } for pid=5644 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:55711' (ED25519) to the list of known hosts. [ 30.877263][ T43] audit: type=1400 audit(1791913263.751:120): avc: denied { write } for pid=5648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.103206][ T5654] cgroup: Unknown subsys name 'net' [ 33.229361][ T5654] cgroup: Unknown subsys name 'cpuset' [ 33.233245][ T5654] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.475026][ T5711] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.247484][ T5654] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.701921][ T43] kauditd_printk_skb: 33 callbacks suppressed [ 37.701938][ T43] audit: type=1400 audit(1791913270.571:154): avc: denied { execmem } for pid=5717 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.885144][ T43] audit: type=1400 audit(1791913270.761:155): avc: denied { create } for pid=5723 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.885495][ T43] audit: type=1400 audit(1791913270.761:156): avc: denied { read write } for pid=5723 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.885836][ T43] audit: type=1400 audit(1791913270.761:157): avc: denied { open } for pid=5723 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 37.894431][ T43] audit: type=1400 audit(1791913270.761:158): avc: denied { ioctl } for pid=5723 comm="syz-executor" path="socket:[7521]" dev="sockfs" ino=7521 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.916457][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.917847][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.918467][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.919624][ T5736] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.920309][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.920434][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.920876][ T5736] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.921396][ T5736] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.921613][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.921676][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.922052][ T5736] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.922308][ T5736] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.923862][ T5736] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.923907][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.924232][ T5736] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.924718][ T5736] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.925130][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.925386][ T5736] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 37.928586][ T43] audit: type=1400 audit(1791913270.801:159): avc: denied { read } for pid=5728 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.930281][ T43] audit: type=1400 audit(1791913270.801:160): avc: denied { open } for pid=5728 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.931640][ T5725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.932212][ T43] audit: type=1400 audit(1791913270.801:161): avc: denied { mounton } for pid=5728 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 37.932536][ T5725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.935469][ T43] audit: type=1400 audit(1791913270.811:162): avc: denied { module_request } for pid=5728 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 37.958675][ T43] audit: type=1400 audit(1791913270.821:163): avc: denied { mounton } for pid=5723 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 38.467762][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.468558][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.468745][ T5728] bridge_slave_0: entered allmulticast mode [ 38.470157][ T5728] bridge_slave_0: entered promiscuous mode [ 38.496691][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.496739][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.496795][ T5728] bridge_slave_1: entered allmulticast mode [ 38.497525][ T5728] bridge_slave_1: entered promiscuous mode [ 38.578693][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.602778][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.633394][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.633439][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.633671][ T5723] bridge_slave_0: entered allmulticast mode [ 38.634450][ T5723] bridge_slave_0: entered promiscuous mode [ 38.653484][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.653548][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.653609][ T5723] bridge_slave_1: entered allmulticast mode [ 38.654297][ T5723] bridge_slave_1: entered promiscuous mode [ 38.661553][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.661635][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.661719][ T5724] bridge_slave_0: entered allmulticast mode [ 38.663071][ T5724] bridge_slave_0: entered promiscuous mode [ 38.677382][ T5728] team0: Port device team_slave_0 added [ 38.684873][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.684949][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.685042][ T5724] bridge_slave_1: entered allmulticast mode [ 38.686311][ T5724] bridge_slave_1: entered promiscuous mode [ 38.687371][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.687603][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.687870][ T5726] bridge_slave_0: entered allmulticast mode [ 38.689298][ T5726] bridge_slave_0: entered promiscuous mode [ 38.692565][ T5728] team0: Port device team_slave_1 added [ 38.705583][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.705713][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.705753][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.705808][ T5726] bridge_slave_1: entered allmulticast mode [ 38.706491][ T5726] bridge_slave_1: entered promiscuous mode [ 38.725903][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.726381][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.726390][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.726402][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.733819][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.735080][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.735387][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.735394][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.735406][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.751715][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.752802][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.760740][ T5723] team0: Port device team_slave_0 added [ 38.779208][ T5723] team0: Port device team_slave_1 added [ 38.780447][ T5726] team0: Port device team_slave_0 added [ 38.789684][ T5728] hsr_slave_0: entered promiscuous mode [ 38.790136][ T5728] hsr_slave_1: entered promiscuous mode [ 38.802396][ T5726] team0: Port device team_slave_1 added [ 38.809765][ T5724] team0: Port device team_slave_0 added [ 38.811490][ T5724] team0: Port device team_slave_1 added [ 38.817409][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.817417][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.817429][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.829148][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.829157][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.829170][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.835364][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.835373][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.835385][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.850228][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.850237][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.850249][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.859973][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.859986][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.860006][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.861502][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.861513][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.861532][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.894515][ T5723] hsr_slave_0: entered promiscuous mode [ 38.895165][ T5723] hsr_slave_1: entered promiscuous mode [ 38.895651][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 38.896109][ T5723] Cannot create hsr debugfs directory [ 38.928845][ T5724] hsr_slave_0: entered promiscuous mode [ 38.929408][ T5724] hsr_slave_1: entered promiscuous mode [ 38.929699][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 38.929710][ T5724] Cannot create hsr debugfs directory [ 38.958107][ T5726] hsr_slave_0: entered promiscuous mode [ 38.958540][ T5726] hsr_slave_1: entered promiscuous mode [ 38.958844][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 38.958856][ T5726] Cannot create hsr debugfs directory [ 39.186924][ T5728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.194217][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.194739][ T5728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.200894][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.202042][ T5728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.206097][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.212243][ T5728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.213973][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.252271][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.252364][ T5728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.252771][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.252931][ T5728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.258184][ T5723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.261842][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.262200][ T5723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.264626][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.271140][ T5723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.277247][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.278574][ T5723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.282120][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.289518][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.290406][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.352778][ T5724] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.356369][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.356754][ T5724] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.362071][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.366816][ T5724] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.371102][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.371562][ T5724] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.373689][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.416480][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.435995][ T5726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.440122][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.446410][ T5726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.449741][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.450388][ T5726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.453170][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.453901][ T5726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.457538][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.461355][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.480016][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.480064][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.495881][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.497596][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.497639][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.512835][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.530329][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.530395][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.539286][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.539336][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.558437][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.576018][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.579324][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.579370][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.585688][ T5723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.598831][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.600871][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.600913][ T403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.619926][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.631126][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.631170][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.639210][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.639254][ T403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.811366][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.833538][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.841576][ T5723] veth0_vlan: entered promiscuous mode [ 39.849753][ T5723] veth1_vlan: entered promiscuous mode [ 39.866961][ T5728] veth0_vlan: entered promiscuous mode [ 39.871029][ T5728] veth1_vlan: entered promiscuous mode [ 39.883785][ T5723] veth0_macvtap: entered promiscuous mode [ 39.889630][ T5723] veth1_macvtap: entered promiscuous mode [ 39.899849][ T5728] veth0_macvtap: entered promiscuous mode [ 39.904151][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.906407][ T5728] veth1_macvtap: entered promiscuous mode [ 39.918430][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.921450][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.932247][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.944682][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.946086][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.975748][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.975852][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.975871][ T5802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.975889][ T5802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.975907][ T5802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.975925][ T5802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.975942][ T5802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.975960][ T5802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.982029][ T5724] veth0_vlan: entered promiscuous mode [ 39.992562][ T5724] veth1_vlan: entered promiscuous mode [ 39.996317][ T5735] Bluetooth: hci1: command tx timeout [ 39.996919][ T5725] Bluetooth: hci0: command tx timeout [ 39.998040][ T5735] Bluetooth: hci3: command tx timeout [ 39.998173][ T5725] Bluetooth: hci2: command tx timeout [ 40.041480][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.041496][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.062538][ T403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.062551][ T403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.069696][ T5724] veth0_macvtap: entered promiscuous mode [ 40.071825][ T5726] veth0_vlan: entered promiscuous mode [ 40.072695][ T5724] veth1_macvtap: entered promiscuous mode [ 40.091759][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.091772][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.099918][ T5726] veth1_vlan: entered promiscuous mode [ 40.107494][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.107506][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.108865][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.114366][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.137786][ T5726] veth0_macvtap: entered promiscuous mode [ 40.150112][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.150664][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.150697][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.151551][ T5726] veth1_macvtap: entered promiscuous mode [ 40.161096][ T5728] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.178706][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.188653][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.211841][ T449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.211856][ T449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.246435][ T449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.246450][ T449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.273179][ T449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.273192][ T449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.276865][ T5802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.277053][ T5802] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.277284][ T5802] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.277502][ T5802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.277696][ T5802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.299804][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.299816][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.345171][ T5884] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 40.345274][ T5884] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 40.345284][ T5884] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 40.345291][ T5884] UDF-fs: Scanning with blocksize 512 failed [ 40.346019][ T5884] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 40.346081][ T5884] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 40.346091][ T5884] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 40.346098][ T5884] UDF-fs: Scanning with blocksize 1024 failed [ 40.346360][ T5884] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 40.346408][ T5884] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 40.346418][ T5884] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 40.346424][ T5884] UDF-fs: Scanning with blocksize 2048 failed [ 40.346635][ T5884] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 40.346677][ T5884] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 40.346686][ T5884] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 40.346693][ T5884] UDF-fs: Scanning with blocksize 4096 failed [ 40.346697][ T5884] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 40.646498][ T5921] xt_CT: No such helper "syz1" [ 40.883469][ T5902] cgroup: fork rejected by pids controller in /syz3 [ 41.151479][ T5993] ptrace attach of "/syz-executor exec"[5724] was attempted by "wtuA]_\x0d,V_$}3-5`?EL4(VQ%+qHC\x1bc5k\x0cx_/G)8\x22[Y+D\x22\x0dp.0<#bJ}MaQbE\x07A(0/F\x0dC%b@X^$lC6|+('at—a;Z8BvA=._im9E\x099/J6II9 \x0aOTWv噯V[S0+E\x0b5FJx%T!P*M$bLMtgXO]7GUSMhyQjle+˚Nr'\x0d+\x5cZGKyH,])^W\x07bkqGtMlPqDzC-xy+kb9K>2dp\x0cdzBR`T91; L/Ebbpֲا{A\x07r\x0bk̀|C\x22&!hg{>ޫ\x09ȔX|,6!y@w\x22zgLfKrK]wjhYKbąb5^(Mn͍H6O\x09bߡ;Ϫۨ\x5cruUоSҡ߱ƌdx\x0d,ML9\x225\x0a\x07ս;Х(p\x0aak or}v]\x0a1\x09r6?Qbo;쉂*z\x0bgX?!n!bܿq_I :,>=6\x0aIp\x0dmiPl\x0d*#&@zNZu/ [ 41.151893][ T5993] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 41.357877][ T6009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19'. [ 41.380877][ T6009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6009 comm=syz.3.19 [ 41.381366][ T6009] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 41.434944][ T5804] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 41.471238][ T6011] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 41.473467][ T6011] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 41.473478][ T6011] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.564942][ T5804] usb 6-1: device descriptor read/64, error -71 [ 41.814943][ T5804] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 41.893617][ T6033] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.27'. [ 41.894489][ T6033] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.27'. [ 41.945036][ T5804] usb 6-1: device descriptor read/64, error -71 [ 42.065705][ T5804] usb usb6-port1: attempt power cycle [ 42.085072][ T5735] Bluetooth: hci3: command tx timeout [ 42.085092][ T5735] Bluetooth: hci0: command tx timeout [ 42.085104][ T5735] Bluetooth: hci1: command tx timeout [ 42.085210][ T5725] Bluetooth: hci2: command tx timeout [ 42.425417][ T5804] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 42.446060][ T5804] usb 6-1: device descriptor read/8, error -71 [ 42.684910][ T5804] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 42.705429][ T5804] usb 6-1: device descriptor read/8, error -71 [ 42.825195][ T5804] usb usb6-port1: unable to enumerate USB device [ 42.867480][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 42.867497][ T43] audit: type=1400 audit(1791913275.741:254): avc: denied { read write } for pid=6039 comm="syz.0.30" name="usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.867530][ T43] audit: type=1400 audit(1791913275.741:255): avc: denied { open } for pid=6039 comm="syz.0.30" path="/dev/usbmon8" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.869371][ T43] audit: type=1400 audit(1791913275.741:256): avc: denied { ioctl } for pid=6039 comm="syz.0.30" path="/dev/usbmon8" dev="devtmpfs" ino=761 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 42.920997][ T6045] trusted_key: encrypted_key: insufficient parameters specified [ 42.941355][ T6044] Zero length message leads to an empty skb [ 43.675047][ T6049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 43.788497][ T43] audit: type=1400 audit(1791913276.661:257): avc: denied { create } for pid=6055 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.789111][ T43] audit: type=1400 audit(1791913276.661:258): avc: denied { write } for pid=6055 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.793071][ T6056] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 43.794021][ T6056] netlink: 'syz.3.34': attribute type 1 has an invalid length. [ 43.921514][ T6068] netlink: 224 bytes leftover after parsing attributes in process `syz.3.36'. [ 43.940118][ T6068] Console: switching to colour dummy device 80x25 [ 44.135151][ T5993] ------------[ cut here ]------------ [ 44.135163][ T5993] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 44.135169][ T5993] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x944/0x1bd0, CPU#2: syz.1.18/5993 [ 44.142971][ T5993] Modules linked in: [ 44.144565][ T5993] CPU: 2 UID: 0 PID: 5993 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 44.148002][ T5993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.151202][ T5993] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 44.152893][ T5993] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 c8 62 6f 06 45 85 c0 75 13 48 8d 3d cc 6e 72 06 48 c7 c6 c0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 44.159065][ T5993] RSP: 0018:ffffc90003e37800 EFLAGS: 00010246 [ 44.159588][ T5086] Bluetooth: hci1: command tx timeout [ 44.159609][ T5086] Bluetooth: hci0: command tx timeout [ 44.159623][ T5086] Bluetooth: hci3: command tx timeout [ 44.159695][ T5725] Bluetooth: hci2: command tx timeout [ 44.168133][ T5993] RAX: 0000000000000003 RBX: ffff8881007951c0 RCX: 1ffffffff248b320 [ 44.170728][ T5993] RDX: 0000000000000000 RSI: ffffffff8beff6c0 RDI: ffffffff9248a510 [ 44.173249][ T5993] RBP: ffffc90003e37970 R08: 0000000000000000 R09: 0000000000000000 [ 44.175920][ T5993] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 44.178510][ T5993] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888029555b60 [ 44.181107][ T5993] FS: 0000000000000000(0000) GS:ffff8880d4b46000(0000) knlGS:0000000000000000 [ 44.184021][ T5993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.186320][ T5993] CR2: 00007fd57c5ecff8 CR3: 000000000fb96000 CR4: 0000000000352ef0 [ 44.188898][ T5993] Call Trace: [ 44.190003][ T5993] [ 44.190994][ T5993] ? virtio_gpu_free_object+0xec/0x280 [ 44.192778][ T5993] ? drm_gem_fb_destroy+0x1a1/0x210 [ 44.194478][ T5993] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 44.196505][ T5993] ? __pfx___mutex_lock+0x10/0x10 [ 44.198145][ T5993] ? drm_mode_object_put+0x41/0x50 [ 44.199809][ T5993] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 44.201589][ T5993] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 44.203474][ T5993] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 44.205549][ T5993] ? virtio_gpu_free_object+0xec/0x280 [ 44.207328][ T5993] virtio_gpu_free_object+0xec/0x280 [ 44.209060][ T5993] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 44.210982][ T5993] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 44.213036][ T5993] drm_gem_object_free+0x60/0xa0 [ 44.214669][ T5993] drm_client_buffer_delete+0x1d8/0x270 [ 44.216580][ T5993] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 44.218459][ T5993] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 44.220496][ T5993] put_fb_info+0xb8/0xf0 [ 44.221874][ T5993] fb_release+0x13e/0x190 [ 44.223298][ T5993] ? __pfx_fb_release+0x10/0x10 [ 44.224992][ T5993] __fput+0x400/0xb60 [ 44.226333][ T5993] task_work_run+0x150/0x240 [ 44.227871][ T5993] ? __pfx_task_work_run+0x10/0x10 [ 44.229535][ T5993] ? do_raw_spin_unlock+0x145/0x1e0 [ 44.231259][ T5993] do_exit+0x8da/0x2a50 [ 44.232641][ T5993] ? __pfx_do_exit+0x10/0x10 [ 44.234144][ T5993] ? do_raw_spin_lock+0x128/0x260 [ 44.236039][ T5993] ? find_held_lock+0x2b/0x80 [ 44.237635][ T5993] ? get_signal+0x7e0/0x21e0 [ 44.239213][ T5993] do_group_exit+0xd5/0x2a0 [ 44.240785][ T5993] get_signal+0x1ec7/0x21e0 [ 44.242267][ T5993] ? rcu_is_watching+0x13/0xc0 [ 44.243876][ T5993] ? __pfx_get_signal+0x10/0x10 [ 44.245594][ T5993] ? down_interruptible+0x66/0xa0 [ 44.247365][ T5993] ? rcu_is_watching+0x13/0xc0 [ 44.248987][ T5993] arch_do_signal_or_restart+0x91/0x7e0 [ 44.250831][ T5993] ? down_interruptible+0x66/0xa0 [ 44.252562][ T5993] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 44.254614][ T5993] ? __pfx_raw_ioctl+0x10/0x10 [ 44.256366][ T5993] exit_to_user_mode_loop+0x139/0x700 [ 44.258251][ T5993] ? rcu_is_watching+0x13/0xc0 [ 44.259867][ T5993] do_syscall_64+0x661/0x790 [ 44.261347][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.263284][ T5993] RIP: 0033:0x7f2dbe59df6b [ 44.264702][ T5993] Code: Unable to access opcode bytes at 0x7f2dbe59df41. [ 44.267043][ T5993] RSP: 002b:00007f2dbf4e7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.269731][ T5993] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f2dbe59df6b [ 44.272281][ T5993] RDX: 00007f2dbf4e8fd0 RSI: 0000000080085502 RDI: 0000000000000007 [ 44.274891][ T5993] RBP: 00007f2dbf4e8fd0 R08: 0000000000000008 R09: 00007f2dbf4e7fc8 [ 44.277479][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 44.279977][ T5993] R13: 0000000800000000 R14: 0000000000000008 R15: 00007f2dbe654286 [ 44.282474][ T5993] [ 44.283506][ T5993] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 44.285831][ T5993] CPU: 2 UID: 0 PID: 5993 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 44.288742][ T5993] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.291949][ T5993] Call Trace: [ 44.293035][ T5993] [ 44.293978][ T5993] dump_stack_lvl+0x100/0x190 [ 44.295634][ T5993] vpanic+0x553/0x970 [ 44.296928][ T5993] ? __pfx_vpanic+0x10/0x10 [ 44.298399][ T5993] ? lock_release+0x24d/0x310 [ 44.299943][ T5993] panic+0xd1/0xe0 [ 44.301158][ T5993] ? __pfx_panic+0x10/0x10 [ 44.302615][ T5993] check_panic_on_warn.cold+0x19/0x34 [ 44.304360][ T5993] ? __mutex_lock+0x944/0x1bd0 [ 44.305921][ T5993] __warn.cold+0x191/0x318 [ 44.307363][ T5993] __report_bug+0x30f/0x440 [ 44.308839][ T5993] ? __mutex_lock+0x944/0x1bd0 [ 44.310362][ T5993] ? __pfx___report_bug+0x10/0x10 [ 44.312018][ T5993] ? fb_release+0x13e/0x190 [ 44.313484][ T5993] ? __fput+0x400/0xb60 [ 44.314844][ T5993] ? task_work_run+0x150/0x240 [ 44.316551][ T5993] report_bug_entry+0xe2/0x290 [ 44.318058][ T5993] ? __mutex_lock+0x94b/0x1bd0 [ 44.319567][ T5993] handle_bug+0x1cd/0x2a0 [ 44.320928][ T5993] exc_invalid_op+0x17/0x50 [ 44.322336][ T5993] asm_exc_invalid_op+0x1a/0x20 [ 44.323835][ T5993] RIP: 0010:__mutex_lock+0x94b/0x1bd0 [ 44.325801][ T5993] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c0 10 00 00 44 8b 05 c8 62 6f 06 45 85 c0 75 13 48 8d 3d cc 6e 72 06 48 c7 c6 c0 f6 ef 8b <67> 48 0f b9 3a 90 e9 1b f8 ff ff 4d 8d a7 f0 0a 00 00 4c 89 e7 e8 [ 44.331613][ T5993] RSP: 0018:ffffc90003e37800 EFLAGS: 00010246 [ 44.333428][ T5993] RAX: 0000000000000003 RBX: ffff8881007951c0 RCX: 1ffffffff248b320 [ 44.335775][ T5993] RDX: 0000000000000000 RSI: ffffffff8beff6c0 RDI: ffffffff9248a510 [ 44.338167][ T5993] RBP: ffffc90003e37970 R08: 0000000000000000 R09: 0000000000000000 [ 44.340587][ T5993] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 44.343012][ T5993] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888029555b60 [ 44.345465][ T5993] ? virtio_gpu_free_object+0xec/0x280 [ 44.347121][ T5993] ? drm_gem_fb_destroy+0x1a1/0x210 [ 44.348712][ T5993] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 44.350505][ T5993] ? __pfx___mutex_lock+0x10/0x10 [ 44.352123][ T5993] ? drm_mode_object_put+0x41/0x50 [ 44.353793][ T5993] ? drm_mode_rmfb.part.0+0x2cd/0x500 [ 44.355554][ T5993] ? __pfx_drm_mode_rmfb.part.0+0x10/0x10 [ 44.357358][ T5993] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 44.359368][ T5993] ? virtio_gpu_free_object+0xec/0x280 [ 44.361130][ T5993] virtio_gpu_free_object+0xec/0x280 [ 44.362827][ T5993] ? __pfx_virtio_gpu_free_object+0x10/0x10 [ 44.364742][ T5993] ? __pfx_drm_fbdev_shmem_fb_release+0x10/0x10 [ 44.366764][ T5993] drm_gem_object_free+0x60/0xa0 [ 44.368360][ T5993] drm_client_buffer_delete+0x1d8/0x270 [ 44.370089][ T5993] drm_fbdev_shmem_fb_destroy+0xc5/0x110 [ 44.371904][ T5993] ? __pfx_drm_fbdev_shmem_fb_destroy+0x10/0x10 [ 44.373826][ T5993] put_fb_info+0xb8/0xf0 [ 44.375241][ T5993] fb_release+0x13e/0x190 [ 44.376607][ T5993] ? __pfx_fb_release+0x10/0x10 [ 44.378163][ T5993] __fput+0x400/0xb60 [ 44.379465][ T5993] task_work_run+0x150/0x240 [ 44.380977][ T5993] ? __pfx_task_work_run+0x10/0x10 [ 44.382624][ T5993] ? do_raw_spin_unlock+0x145/0x1e0 [ 44.384320][ T5993] do_exit+0x8da/0x2a50 [ 44.385685][ T5993] ? __pfx_do_exit+0x10/0x10 [ 44.387184][ T5993] ? do_raw_spin_lock+0x128/0x260 [ 44.388825][ T5993] ? find_held_lock+0x2b/0x80 [ 44.390347][ T5993] ? get_signal+0x7e0/0x21e0 [ 44.391896][ T5993] do_group_exit+0xd5/0x2a0 [ 44.393373][ T5993] get_signal+0x1ec7/0x21e0 [ 44.394861][ T5993] ? rcu_is_watching+0x13/0xc0 [ 44.396498][ T5993] ? __pfx_get_signal+0x10/0x10 [ 44.398045][ T5993] ? down_interruptible+0x66/0xa0 [ 44.399607][ T5993] ? rcu_is_watching+0x13/0xc0 [ 44.401181][ T5993] arch_do_signal_or_restart+0x91/0x7e0 [ 44.402982][ T5993] ? down_interruptible+0x66/0xa0 [ 44.404576][ T5993] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 44.406602][ T5993] ? __pfx_raw_ioctl+0x10/0x10 [ 44.408066][ T5993] exit_to_user_mode_loop+0x139/0x700 [ 44.409784][ T5993] ? rcu_is_watching+0x13/0xc0 [ 44.411318][ T5993] do_syscall_64+0x661/0x790 [ 44.412786][ T5993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.414630][ T5993] RIP: 0033:0x7f2dbe59df6b [ 44.416064][ T5993] Code: Unable to access opcode bytes at 0x7f2dbe59df41. [ 44.418202][ T5993] RSP: 002b:00007f2dbf4e7f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 44.420772][ T5993] RAX: fffffffffffffffc RBX: 0000000000000007 RCX: 00007f2dbe59df6b [ 44.423224][ T5993] RDX: 00007f2dbf4e8fd0 RSI: 0000000080085502 RDI: 0000000000000007 [ 44.425682][ T5993] RBP: 00007f2dbf4e8fd0 R08: 0000000000000008 R09: 00007f2dbf4e7fc8 [ 44.428049][ T5993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 44.430438][ T5993] R13: 0000000800000000 R14: 0000000000000008 R15: 00007f2dbe654286 [ 44.432866][ T5993] [ 44.434406][ T5993] Kernel Offset: disabled [ 44.435731][ T5993] Rebooting in 86400 seconds..