last executing test programs: 2.588807344s ago: executing program 2 (id=67): mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB="c64c783d2d30303030b77e303030303030303030303030302c9e"]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}}}}}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x12, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0xfff2, 0x9}, {0xfff1, 0xfff1}, {0xfff1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044850}, 0x24044000) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x1200800, &(0x7f0000000180)='*]$#@-&-\x00') 2.450725619s ago: executing program 2 (id=73): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/0:0:0:0\x00', 0x200000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES16=r0]) 2.390820288s ago: executing program 2 (id=74): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044040}, 0x44040) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x3dfe, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x10000, 0x6e34, 0x4, 0x10, 0xffffffa6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004045}, 0x80) (async, rerun: 32) unshare(0x6020400) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) (async) listen(r1, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaffff08004500002800000000000604000000141b0000000000004e220000000000007c1179f43e07814ad565bc495758d1e083777966195f62acc0b7024994a4c2eea9b3c03b56074c4417d460033a9f007b0000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) (async, rerun: 32) r2 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 32) ioctl$sock_SIOCETHTOOL(r2, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) (async) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.390518277s ago: executing program 2 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) preadv(r1, &(0x7f00000032c0)=[{&(0x7f0000000540)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)={'bond0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r7 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x129102, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x2f, 0x10}, 0x20) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x800) 2.286737097s ago: executing program 2 (id=77): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000080)=0x100001, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.220035604s ago: executing program 2 (id=79): socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x201, 0x1ff, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000140)='./myproc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) read$FUSE(r4, 0x0, 0x0) syz_ublk_setup_io_uring(0x4fe7, &(0x7f0000000000)={0x0, 0x39d3, 0x80000, 0x1, 0x1fa, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xa5ec, 0x8, 0x100010, r4, 0x0) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r9, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000384c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c000280080001800000000014000000020a01"], 0xf4}}, 0x0) syz_io_uring_complete(r5, r6) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000800)={{r3}, "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"}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./myproc\x00', r4}, 0x18) 1.160136101s ago: executing program 1 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000d81cdca933f3e9f58f9da1717dcc62c48cda01f34c76501cba006b82a900e1a7ca005d75409246468f70e66061c6619867bf02d4deefde34dc779911f69c5ba6aa686556d79b2252d9fd24deb8ad6852f2975beeabea558c9dae8d112e1e25f12186ba0fde7659b5c3bef5b51fe2941a7736e00fa79d53f8743e692a714abeb0abc765ae9625168d3b97b81665617f0a98a5a17381993e6bfcc30552ffffffffffffff7f4627bb8b2fc2ecf7ecca71759a166cc3d647a6b20869ec959907ff77063585b84d3783571f953d3ce014641a89c7c2259021b1b93c9486f8d81a385f409b62d255dcb3ee4ec7", @ANYRES16=r2, @ANYBLOB="010023bd7000fcdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000008001400", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) 1.089357518s ago: executing program 1 (id=95): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000600)={0x0, &(0x7f0000000140)=[@nested_create_vm={0x12d, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest64=0x2813, 0xfffffffffffffff8, 0x3, 0x5}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @code={0xa, 0x5f, {"640f01c266b899000f00d0b8010000000f01d93e0fc79c326d130000660f667b08c46151c20f86644c0fc76e0066460f145972c4027d9234459b000000b9a50b0000b866000000ba000000000f30"}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0xe8, 0x3, 0x9}}, @cpuid={0x64, 0x18, {0x0, 0x7}}, @rdmsr={0x66, 0x18, {0x8b3}}, @rdmsr={0x66, 0x18, {0x40000082}}, @set_irq_handler={0xc8, 0x20, {0xbf}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_load_code={0x12e, 0x5b, {0x1, "260f01c40f0766bad10466ed66baf80cb89ee7ab8fef66bafc0c66b80a0066ef26673e430f01ca66f30f38f61fc462dd9c7f083e0f300f20d835200000000f22d841f4"}}, @in_dx={0x69, 0x20, {0x5118, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @control32=0x4018, 0x6, 0x4, 0x80}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x469, 0xa7, 0x5, 0x1000}}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmresume={0x130, 0x18, 0x8}, @rdmsr={0x66, 0x18, {0x363}}, @nested_load_syzos={0x136, 0x128, {0x2, 0x9, [@nested_amd_clgi={0x17f, 0x10}, @nested_create_vm={0x12d, 0x18, 0x2}, @uexit={0x0, 0x18, 0x828}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x2, 0x7}}, @wrmsr={0x65, 0x20, {0x236, 0xa3e0000000000000}}, @wrmsr={0x65, 0x20, {0x4b564d01, 0x80000001}}, @nested_load_code={0x12e, 0x58, {0x0, "66baf80cb878e15b83ef66bafc0cb847990000ef6736420f01d1410f01ca2e420fc77500b805000000b9005800000f01c10f01cf470f01c9df27400f070f01c5"}}]}}, @uexit={0x0, 0x18, 0x7}, @nested_vmresume={0x130, 0x18}], 0x482}) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000640)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) (async) sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x14, r0, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x1) r2 = inotify_init1(0x0) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000880)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000008c0)={@rand_addr=0x64010102, @multicast2, @private=0xa010101}, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000900)={{0x1, 0x1, 0x18, r3, {0x0, 0x4}}, './file0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@bridge_setlink={0x44, 0x13, 0x4, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xb434}, @IFLA_IFALIASn={0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_EVENT={0x8, 0x2c, 0x7a29}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x57f3}]}, 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x4004) (async) close_range(r3, r1, 0x2) (async) accept(r3, &(0x7f0000000a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000b00)=0x80) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000dc0)={0x0, &(0x7f0000000b40)=[@nested_vmresume={0x130, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0xa8a3, 0x7, 0x5}}, @wrmsr={0x65, 0x20, {0xaf1, 0xffff}}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0xcf}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0xf, 0x8000000000000000, 0x8, 0x7fffffffffffffff}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x3, 0x0, 0x1}}, @in_dx={0x69, 0x20, {0x393d}}, @rdmsr={0x66, 0x18, {0x8d9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro_nat=0x6406, 0x9, 0x8, 0xc}}, @rdmsr={0x66, 0x18, {0x19a}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0x790, 0xfffffffffffffff9, 0x2}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @guest32=0x482e, 0x1, 0x3, 0xc}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0x76, 0x2}}], 0x268}) syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000e80)=[@text32={0x20, &(0x7f0000000e00)="3e2e260f215b66baf80cb8b633e38def66bafc0c66edf20f06c4c121d17f360fc728c744240025700000c74424020c89ad11c7442406000000000f0114240f08660f018426151a00000f0015010000000f0055f6", 0x54}], 0x1, 0x20, &(0x7f0000000ec0)=[@flags={0x3, 0x20000}, @vmwrite={0x8, 0x0, 0x5, 0x0, 0x1}], 0x2) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f40)={'veth1_to_bond\x00', 0x0}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000013c0)={0x0, &(0x7f0000000f80)=[@wrmsr={0x65, 0x20, {0x865, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xb0, 0x2, 0x7ff, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x70, 0x5, 0x8001}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_load_syzos={0x136, 0x50, {0x0, 0x5, [@nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x3}]}}, @out_dx={0x6a, 0x28, {0xacba, 0x6, 0xffff}}, @wr_crn={0x67, 0x20, {0x10, 0x80}}, @cpuid={0x64, 0x18, {0x6, 0x742}}, @set_irq_handler={0xc8, 0x20, {0x86}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x2a8}}, @set_irq_handler={0xc8, 0x20, {0x23, 0x2}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_load_code={0x12e, 0x58, {0x3, "430f00df460f1bdc66447495c4e37908673910450f011cc0660fe1f766b807018ed0c744240031010000c74424020c000000ff1c248f6948974cc8cb0f0014ab"}}, @nested_load_code={0x12e, 0x6c, {0x1, "8f68208e000b47f4f246d2214b980fc73a0f5d68b866ba210066b8008066efc744240021553757c744240200000080c7442406000000000f011424c4c17f2c5800c744240033000000c7442402d1880000ff2c24"}}, @uexit={0x0, 0x18, 0x100000001}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @wr_crn={0x67, 0x20, {0x4, 0x9}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x47b, 0x7, 0x6}}, @out_dx={0x6a, 0x28, {0x4fc9, 0x1, 0x8}}, @rdmsr={0x66, 0x18, {0xb77}}, @wrmsr={0x65, 0x20, {0x806, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x655, 0x0, 0x4e3, 0xf}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x0, 0x4, 0x1}}], 0x42c}) (async) r9 = syz_open_dev$vivid(&(0x7f0000001400), 0x1, 0x2) ioctl$VIDIOC_DBG_G_CHIP_INFO(r9, 0xc0c85666, &(0x7f0000001440)={{0x2, @name="2dd5283e68166074bd61b6e71f5a030e219fd123407aa1633c50b1b2783f29d6"}, "5262af3894ad7e2bbea64fde24413a308856cef35035300421e017ef8fb65b58", 0x1}) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async, rerun: 64) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000001540)={0x8, {{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}}, {{0xa, 0x4e20, 0x2, @mcast2}}}, 0x108) (rerun: 64) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001680)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6}}, &(0x7f0000001780)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000017c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e23, 0x4, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0xff, r8, r11}, {0xe, 0x2, 0x400, 0x7, 0x2, 0x3, 0x2, 0x10000}, {0x8000000000000001, 0x3ff, 0x4, 0x9}, 0x2, 0x6e6bbd, 0x2, 0x0, 0x3, 0x2}, {{@in6=@private2, 0x4d3, 0x2b}, 0xa, @in6=@mcast1, 0x34ff, 0x5, 0x1, 0xe, 0x9, 0xffffffff, 0x3}}, 0xe8) (async) inotify_init() (async, rerun: 64) openat$nvram(0xffffffffffffff9c, &(0x7f00000018c0), 0x2, 0x0) (async, rerun: 64) r12 = gettid() r13 = syz_open_procfs(r12, &(0x7f0000001900)='net/psched\x00') ioctl$TUNSETIFINDEX(r13, 0x400454da, &(0x7f0000001940)=r10) (async, rerun: 32) sendmsg$NL80211_CMD_NEW_KEY(r13, &(0x7f0000001a80)={&(0x7f0000001980), 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x3c, r0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6a1, 0x71}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dfa68622e8"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20008080) (rerun: 32) 1.017091427s ago: executing program 1 (id=97): r0 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='f2fs\x00', 0x145000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/usbcore/parameters/autosuspend\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0', 0x1) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1}, 0x0) 950.193195ms ago: executing program 1 (id=100): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000140)={&(0x7f000074d000/0x2000)=nil, 0x2000}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r3], 0x50}}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000440)={0xbb8, 0x1, 0x5, 0x801, 0x0, 0x0, {0x2}, [{{0x254, 0x1, {{0x2, 0x4}, 0x9, 0xff, 0x400, 0x1d, 0x9, 'syz0\x00', "7228ac1d7fe68d5b56d60dce9a98105b5418d9038fcb203ac68d1e2814a6340a", "0dda83fe8122cd5f19fced76c4f39a64afc340ede1e1286298b9c594ee0834b1", [{0x4, 0x7, {0x2, 0x718}}, {0x200, 0x0, {0x0, 0x9}}, {0x7, 0x6c18, {0x0, 0xa01}}, {0x9, 0x4, {0x3, 0x6}}, {0x8001, 0x3ff, {0x3, 0x1}}, {0x9, 0xf, {0x0, 0x78d5}}, {0x200, 0x100, {0x2, 0x1000}}, {0x8, 0xdf40, {0x1, 0xffffff7f}}, {0x2, 0x1, {0x3, 0x800}}, {0x800, 0x2, {0x2, 0xffff}}, {0x7ff, 0x7ff, {0x3, 0x5}}, {0x6, 0x1a, {0x1, 0x1}}, {0x188, 0x10, {0x1, 0x4}}, {0x9, 0x8000, {0x0, 0x90}}, {0x9, 0x0, {0x2, 0x56e}}, {0x2, 0xa, {0x0, 0xff}}, {0x6, 0x7, {0xdf4e35846c50fa92, 0x3adb}}, {0xddc, 0xf6b0, {0x3, 0x2e}}, {0x1f6a, 0x10, {0x1, 0x3}}, {0xf6, 0x8, {0x1, 0x80}}, {0x0, 0xe, {0x0, 0x8}}, {0x3ff, 0xd, {0x1, 0x3}}, {0xfe, 0x3, {0x2, 0x3}}, {0xd4, 0x5, {0x3, 0xfffffffc}}, {0x7, 0x81, {0x0, 0x7}}, {0xd0, 0xa, {0x1}}, {0x9, 0xffff, {0x3, 0x9}}, {0x9, 0x400, {0x0, 0x1c02d1f4}}, {0xf, 0x2, {0x1, 0x3cf}}, {0xdc1c, 0x2, {0x2, 0x4}}, {0xff, 0x200, {0x3, 0x1}}, {0x9, 0x9, {0x3, 0x7e0}}, {0x400, 0x5, {0x2, 0x6}}, {0xd2d, 0x200, {0x0, 0xffffff00}}, {0xf, 0x0, {0x0, 0x10000}}, {0x4, 0x93, {0x1, 0x6}}, {0x8000, 0x8, {0x3, 0x3}}, {0x8, 0x8, {0x3, 0x8}}, {0xc5, 0x5d79, {0x0, 0x4}}, {0x5, 0x1ff}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x7, 0xb2, 0x7, 0xa, 0x5, 'syz0\x00', "23f23f5671250f9cc397ea504906169efa7fea084f6ec1e234373a527977d4e6", "9cf132c18c1acf31c67f344e5e909b03ff6fd4b89285d766bf6425b48a3d6753", [{0x5, 0xffff, {0x0, 0x2}}, {0x7, 0x101, {0x2, 0x3}}, {0x40, 0xa3, {0x2, 0x9}}, {0x2, 0x1, {0x3, 0xe}}, {0x111d, 0x8001, {0x0, 0x7ff}}, {0xfffc, 0x5, {0x3, 0x4}}, {0x8, 0xaae7, {0x0, 0x5}}, {0x8, 0x9, {0x1, 0x1ff}}, {0x101, 0x4, {0x3, 0x10001}}, {0x6, 0x5, {0x2, 0x3}}, {0xfff, 0xc, {0x3, 0xaeb}}, {0x3, 0x366, {0x3, 0x6}}, {0x3, 0xa942, {0x2, 0xa59}}, {0x3, 0x3}, {0x6, 0xd, {0x2, 0x6}}, {0x5, 0xef1, {0x0, 0x6}}, {0x1, 0x4, {0x3, 0x9}}, {0x724, 0x40, {0x3, 0x4f58}}, {0x100, 0x1, {0x0, 0x7f}}, {0x3, 0x5, {0x3, 0xfff}}, {0x7a2, 0x1, {0x1, 0x7f}}, {0x0, 0x9, {0x2, 0xffffffff}}, {0x120, 0xffff, {0x2, 0x1}}, {0xfffa, 0x28, {0x2, 0x9}}, {0x3a, 0xf, {0x3, 0xffffc68e}}, {0x6a9, 0x5, {0x3, 0x3}}, {0x8, 0x0, {0x2}}, {0x1, 0x401, {0x0, 0x6}}, {0x2, 0x8255, {0x1, 0x7}}, {0x10, 0x7, {0x3, 0xff}}, {0x401, 0x0, {0x3, 0x5}}, {0x2, 0x8, {0x3, 0x8}}, {0x9, 0x0, {0x1, 0x9}}, {0x7, 0x8, {0x3, 0x4dd5}}, {0x8001, 0xfd4, {0x2, 0xb7176a79}}, {0x5, 0x6, {0x0, 0x5}}, {0x7ff, 0x2, {0x0, 0x22}}, {0x9125, 0x300, {0x3, 0x3}}, {0x54d4, 0x0, {0xd8b1c54e5f9a24f0, 0x9}}, {0x9, 0x47, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x7, 0x6, 0x8, 0x6, 0x28, 'syz0\x00', "00fd38451036333ea0e4d6b52b8fc3022d028dc1e86c0bc65e51cd0247204273", "122a8958bfd1fb306ea8105d7f6b25f603b3ff6d7abeb70aa2703fe7db78941f", [{0x2, 0xf19, {0x2, 0x2}}, {0x1ff, 0x8, {0x1, 0x6}}, {0x2b51, 0x6, {0x1, 0x401}}, {0xde57, 0x2, {0x2}}, {0x7, 0x8, {0x1, 0x1}}, {0x2, 0x0, {0x2, 0xffffffff}}, {0x9, 0xa, {0x2, 0x8}}, {0x7, 0x80, {0x1, 0x40}}, {0xfffa, 0xa0, {0x3, 0x3}}, {0x0, 0x101, {0x1, 0x5}}, {0x2, 0xfff, {0x1, 0x4}}, {0x5, 0x27, {0x2, 0x200}}, {0x0, 0x1, {0x1, 0x1}}, {0x2, 0x2, {0x0, 0x7ef641fe}}, {0x6, 0x800, {0x2, 0x61a}}, {0x6, 0xf, {0x0, 0x10}}, {0x6, 0x6e, {0x1, 0x99}}, {0x7ff, 0x2, {0x3, 0x7}}, {0x8, 0x2, {0x2, 0x9}}, {0x9, 0x0, {0x2, 0x4}}, {0x2, 0x0, {0x3}}, {0xef41, 0xb7, {0x1, 0xbe6}}, {0x5, 0x1000, {0x0, 0x8}}, {0x0, 0x1, {0x3, 0xfff}}, {0x1000, 0x4, {0x1, 0x2}}, {0x8, 0xfffe, {0x3, 0x800}}, {0x1, 0x6, {0x2, 0x7}}, {0x8001, 0x33, {0x1, 0x8001}}, {0x101, 0xfff8, {0x1, 0x8}}, {0x101, 0xe62, {0x3}}, {0x43, 0x4, {0x2, 0x7c3c}}, {0x7, 0x1, {0x3, 0x3ff}}, {0xfff1, 0x0, {0x1, 0x67d}}, {0x1, 0x1, {0x2, 0xffff}}, {0x2, 0x8, {0x1, 0x7769}}, {0x2, 0x3, {0x0, 0x91}}, {0x7, 0x8, {0x1, 0x7}}, {0x7f, 0x0, {0x0, 0xfff}}, {0x5, 0x6, {0x1}}, {0x3, 0x1ff}]}}}, {{0x254, 0x1, {{0x3, 0x12a2}, 0x10, 0xa, 0x3ac0, 0x2000, 0x25, 'syz1\x00', "0109a2096843701fe40903ffbe3cdd5f08f333d7e675655b38d2260b0ed239d0", "67b39119c22174f784b5ef8db9e9a49384df3a40538a0111c6b5ca8fd675bde3", [{0x749, 0x100, {0x2, 0xb56}}, {0x8, 0x9, {0x0, 0xfffffffc}}, {0x7, 0x8, {0x1, 0xf}}, {0x6, 0xb2a0, {0x3, 0x5}}, {0x5, 0x2, {0x0, 0x7}}, {0xfff, 0x3, {0x2, 0x4}}, {0x2, 0x7, {0x2, 0x10}}, {0x9, 0x9, {0x2, 0x2}}, {0x4, 0x3, {0x3, 0x2}}, {0x12c0, 0xf000, {0x1, 0x3a}}, {0x400, 0x2, {0x2, 0x4}}, {0x1000, 0x3, {0x3, 0xfffffff7}}, {0x5, 0xd1c1, {0x3, 0x1}}, {0x2, 0x3, {0x3, 0xa}}, {0x2, 0x2bc4, {0x3, 0x1}}, {0x5, 0x8, {0x1, 0x2}}, {0x7, 0xd, {0x1, 0x4}}, {0x8, 0x97cf, {0x0, 0xffffff14}}, {0x3, 0x5, {0x1, 0x40}}, {0x4, 0x6, {0x3, 0x9}}, {0xc0d, 0x9, {0x2, 0xec05}}, {0x1, 0x4, {0x0, 0x7fffffff}}, {0x11, 0x1, {0x2, 0xffffff00}}, {0x5, 0xfff9, {0x0, 0xc}}, {0x1, 0x10, {0x4, 0x2}}, {0x623, 0x5, {0x0, 0x6}}, {0x6, 0x9, {0x0, 0x9}}, {0x6, 0x0, {0x0, 0x4d}}, {0x9, 0x5, {0x1, 0xfe88}}, {0x0, 0xfff, {0x0, 0x9}}, {0x4875, 0x4, {0x1, 0x1000}}, {0x0, 0xa, {0x1, 0x5}}, {0x5, 0x1, {0x1, 0x3c8000}}, {0x42, 0x2f5}, {0x4, 0x400, {0x2, 0xf}}, {0xa, 0xcd, {0xdba213a1cc7559a3, 0x7}}, {0x6, 0x81, {0x3, 0x5}}, {0x7, 0x2, {0x2, 0xb79}}, {0x1, 0x2, {0x1, 0x8}}, {0x3, 0x9, {0x3, 0xfffffe01}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x7, 0x1, 0x3, 0x9, 0x1b, 'syz0\x00', "793acf3c3da1f46a8a29d27baccb30b36597613451d4fa8b654356d64884594a", "64c50acf6403d61bcc7844d2bf9505255b29e582e850aa4789729ef653a1b878", [{0x4, 0x7, {0x0, 0xf6cc}}, {0x4, 0xfff, {0x0, 0x6}}, {0xe289, 0xcd, {0x2, 0x21}}, {0x8, 0x5217, {0x0, 0x4}}, {0xa, 0xb2, {0x0, 0x100}}, {0x0, 0x9, {0x0, 0x7f}}, {0x5, 0x81, {0x0, 0x2}}, {0x7, 0x9, {0x2, 0xfffff40a}}, {0x9, 0x1, {0x0, 0x101}}, {0x9, 0x1}, {0x0, 0xc, {0x3, 0x8}}, {0x4, 0x8}, {0xf6fc, 0x3, {0x3, 0x6}}, {0x8, 0x6, {0x0, 0x2}}, {0x7, 0x0, {0x0, 0xf6}}, {0xe1, 0x8, {0x2, 0x4}}, {0x1, 0x8c2, {0x0, 0x400}}, {0x9, 0xe}, {0x0, 0x6, {0x1, 0xa}}, {0x1000, 0x8, {0x3, 0x1000}}, {0xc, 0x4, {0x2, 0x14}}, {0x4, 0xfa2e, {0x3, 0x3f8}}, {0x8e41, 0x4, {0x1, 0x9}}, {0xd, 0xad3f, {0x3, 0x3}}, {0x7, 0x9, {0x0, 0x2}}, {0x7, 0x4, {0x0, 0x7ff}}, {0x716c, 0x1000, {0x1, 0x3}}, {0x5, 0x3, {0x1, 0x13}}, {0xff7f, 0xcd8, {0x0, 0x1}}, {0xfffe, 0x2, {0x1, 0xbe}}, {0x5, 0x2, {0x1, 0x4}}, {0x6, 0x4, {0x2, 0x403}}, {0x8, 0x4, {0x2, 0xf5}}, {0x9, 0x5, {0x1}}, {0x6, 0x3, {0x2, 0x3}}, {0x3, 0x1, {0x3, 0x1}}, {0x40, 0x95e, {0x1, 0x6}}, {0x8, 0x1, {0x0, 0x7}}, {0x8, 0xa, {0x1, 0x7f}}, {0x0, 0xa5, {0x1, 0x84}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$kcm(r4, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000180)="0ea01b022e0e89fff723cccc1a3640f1f4af4aff4b6000f0d12af11d06008af2045f6780e51f6d398d10d8a4c69a3c78793750047f92fcd1af8a2eaf07b01188173fe120d516aea4db37c2ad033f2102f31d24e135412bd46a1122d7d0c65717f39bff2bad2e2a86da2703b216717888a77ae451ec1de49736fb0b8dae03a3adfab232076b356ed85a8df016d51bebf4cc5f8253dd4a414fd0deedd1b1ba8e28b6f7ec2bfbcabe06f8b44e42f9ad17e4a51ea1ac02927558e93c028cf429d985e512071eb70da9bc194e", 0xca}, {&(0x7f0000000280)="9d2d8fce42469a4d2b03204f24466bce0afdce1fd2b395f868b6d1f292b2cbc568c14fd04403", 0x26}, {&(0x7f0000001080)="6063ba64a5400651a7b4060e666b75decdf5d7056ee99f6f40d8c030ed6f02ffcebf42205744dd8d886808f9241b665786be8c77a5a967fb16c192a15c8e006cd27a4d2de5f908444c7e196ca81e319814f97b583a57591ad90745842658460e906a294a433e261380317517c1a1795fb55f66872c6d0787f2c42858fe41a79f95a910da04f1d04821228d67319f989e965e938f92492258634ca84f58f3a2ebfcebee3b061e4b7149717f38881978e4df7ef32f0a419321fec607737bb597850e36650333aa2c027f518ee3f84db4a7034490bce4f09e8c7035", 0xda}, {&(0x7f0000001180)="2de42166c4ac739e6fcf36479db81d9f0e7ee724f75b38b1b40b90e74560b33f9c74cf4b60612eee2640bdc16b3ca24e248cb593f6c379", 0x37}, {&(0x7f00000011c0)="00975f0eeda25b92e632ca58e5c9b5e0e079a7d7f5ff541e2ac8bf0621a59b08791b2d0d64ececa506fbe67448de81f085e0b6fe60673b0977fa5714bcecfd01c1f85b31555aeae8ba2f03ab8adb0defb2e5e8a861865466d00e878ef6165d74670475e0c0170d01794f868a57a4336e91", 0x71}, {&(0x7f0000001240)="90d9e46115d822b9e97ecb8c0cc09b59de6cb032957046e9c13e9af934e17b8c8a6f2d09", 0x24}], 0x6, &(0x7f0000001300)=[{0xd0, 0x119, 0x401, "5aa3b949901507da07eb39f162079f28e3c20ce85e69b5491ba48a27cb7234e56b983e39409b4a93f342396be76639a26253f9c0529d8a738aba2b13fc3a717d58bf36f4d6480a636f99b89e3c4cdf3a6733d54315b070e7d457a1668add4e50b7020e7d32c6051b034a867d71160b59683ba34b19b95cf0530d6f47e91e8f4d80214a18e44c8c74a505483bffc1f9e4545bd7ee782713a3eab1d5b1fa01a83e166adbb4bcbafcf24fa976fe6a97c0cfc9b5af07081a737b7c308ba519"}, {0x100, 0xff, 0xffff, "fdd00c6e05dc7e648838dcfe2f010b2f84530c98801eda503490254f9fe2860fd88bda0802fc9e49468eeb9f231998b4d33c27ffb2e2b63c99bbb82265ef0f1ddd9ee9555045931c100320d0bc830f62faaf614a604946c7786b1dc2635b86913dc7178efc12cd8301f7d1c8d2e56dec578fe1bb3f5adb8d5e3ee8fc58bbd5e4d42cab4c8553e962383e2924e08a9d846d60c012b80176c0766a3b46485a9ce953a82f4a822b02f7bb469f3a17b6a4a77380baaea843f07bce004fbfb7282b279bab2765892c0d34a419a550960198048d4ba8ef3e5e6eb49fbc391c674e5361ab1d1153482635f4aa60"}, {0x100, 0x10d, 0x4, "0cf253b5fb8008ecd2d0545cf6d7629a18ebefb31cf495714d81436d062add715bf182845f6fac24dcb1f1910f3b516d00bc28524a8ba5e13b9de3470734bc2f62ede458784a3a767a30084a99bce488850748864a2049ae38c2647622537fa96d5d470d6c978e7875eff1a0dcf1d4f22444aa5c9f9b2506402ee79352d921f6fbad4562f347e093076cdea1cdd21b6b2b6d632c1d36609ae46318435712bb4f6642ae8c1b81ce3f2cbb9288bd5fc3c7b1e1e538cc5ec8a5fc927641747a74a27f68969b36f4863b84aaaae6e0df6721e84ba643748f52ec492ab3e652aea861d60685cd6a99efee5af970"}, {0xa0, 0x113, 0x7, "e2d1e98c4f22ab0212a7efa199dd370227926433fe98b979647a9bf7665b8e584799c148c22361cb3dc08129656b11fd35d9e2fec12749b5412a9f6b4045de5c4de8d337809ca367c03553163ed3922dff485fde2eec8dbe059e54f031b69a087f5354eaf6ac39d63ed57b590f5b7d159ac82fe92bad61462fc18485ecc2cf454895bd79811e76f4e889"}, {0x1010, 0x10d, 0x9, "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"}, {0x1010, 0x111, 0x8, "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"}, {0x50, 0x113, 0x9a4, "3af412aec3c63ec7bbc7e60c71dad75c8952a783f60fb0b9a388b586abce94e5f2052b6d8e7de7f8b1bb1c2fa4192867bfcb8dc0cceb2205f1"}, {0x50, 0x11, 0xe47, "d50848c96239cfc798b0c863c479cbc59555c17e93adda63bf0165886c7a58377f81a4a4b16acc92cef25ff33db5a5ff068c158e5769047e066b"}], 0x2430}, 0x8000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) 800.438632ms ago: executing program 0 (id=104): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x4, 0x6e1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x91}}}, 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 737.917775ms ago: executing program 1 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x80, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000079100800000000004000000000000000950000000000000099a1aae9e4a6f8b821bf0e5d67028ff5ec80128ba45db82a5ceb41f4b54ac9b08873f9d351c714258e6f485e7777200852f33e5a35a4b6c55470692389c53123a50ec579c2a5fd1361cea9a10cb1fa3fbb2331f4e5107cf16fdef1eefd0c2da93f02b6ebfa597416bc0a9a0a59754710751e4a61f5a4087262e07e21bc24520f422f8e285daac6822b1d7e5df170c58cb3f553f05beeb6c33605a11f4a78785ac65e6eaaf686ec49c945f976d6a5738cbcd468fdca0541e9c3ca6322ce8eeb56b544525a8d96cab3516df5b0fc42c38e76355f4e888c5f389f872815ad49b813b03b305121a60bb6fa878a6fa46b7d8c54fb5812c4750137376f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x8) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000440), 0xd, 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x8}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 737.462038ms ago: executing program 0 (id=107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xa, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x38}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x19}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000c0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x2000c000) 732.151446ms ago: executing program 1 (id=108): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x200) syz_usb_disconnect(r1) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000002d80)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550e, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000a00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac40, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 726.928556ms ago: executing program 3 (id=109): getpid() setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000180)=@sco={0x1f, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f0000000440)=""/154, 0x9a}], 0x2, &(0x7f0000000540)=""/106, 0x6a}, 0x143) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x90, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0xfffffff7, 0x6, 0x4d27}, 0x3}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x80000001, 0xf5f6, 0x8, 0x5, 0x55de5cb1}, 0x2}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x6, 0x5, 0x0, 0x2, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x3, 0x8, 0x1, 0x8, 0x1}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mlockall(0x2) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) io_uring_enter(r6, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000013c0)={0x18, r8, 0x1, 0x3, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, r8, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x8000}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xb76}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8000}, @ETHTOOL_A_COALESCE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x40}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x101}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x7}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) read$FUSE(r1, &(0x7f0000000dc0)={0x2020}, 0x2020) r9 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 667.732189ms ago: executing program 0 (id=110): r0 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c41, 0x2, 0x20002, 0x2}) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$CDROM_MEDIA_CHANGED(r1, 0x5325, 0xfc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000010000/0x2000)=nil}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x48000) ioctl(r3, 0x4048aec9, &(0x7f0000000600)="010000000000000001") close_range(r0, 0xffffffffffffffff, 0x0) 430.321516ms ago: executing program 3 (id=111): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000140)="098d517dc6237b245aeb0ca62e2bc0d996f13e85c293b1b5e7545ed9e6b07c77424199756caf0841ad5ed677c06555018a9d2a1dedb80b35d88b600230a9581c7fc4d8393f8c2b175404131ff4f6c3d15ca1c6907603f0a74e36fb94d8a4216cb91622aa73726f31dcaba66b5ecaaae59c3fe06e", 0x74}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0xffffff81) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000002c0)={'raw\x00', 0x22, "1f67876479aa66e92be01899399c8bd925963bafae4971f42019713b6298942938bd"}, &(0x7f0000000340)=0x46) r3 = fcntl$dupfd(r0, 0x406, r0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x10, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x2000, &(0x7f0000000240)=ANY=[@ANYBLOB="ee253d", @ANYBLOB=',rootmode=00000000000000000040000,uwser_id=', @ANYRES8=r1, @ANYBLOB=',']) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) ioctl$SCSI_IOCTL_STOP_UNIT(r5, 0x6) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000340)=ANY=[], 0x28) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x4055}, 0x8811) shutdown(r3, 0x1) 378.394611ms ago: executing program 3 (id=112): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x6}, 0x94) r1 = msgget$private(0x0, 0x3ac) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005040), 0x44600, 0x0) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x141, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8f30fc733", 0x51}], 0x1, 0x5d, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="38d0a7314810ce32"], 0x8, 0x800) msgctl$IPC_RMID(r1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x8, 0x0, 0x0}}, 0x10) 318.545203ms ago: executing program 0 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4, 0x80000}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000540)=0x1) close_range(r4, r5, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000005c00)=""/253, 0xfd}], 0x7}}], 0x1, 0x0, 0x0) r7 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x6e}], 0x1, 0x11, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x100, 0xf610d70782467fc8, 0xd, 0x7, 0x6, 0x2e2e8fe4, 0x3, r9}, 0x20) syz_kvm_setup_cpu$x86(r7, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 189.325654ms ago: executing program 0 (id=114): modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d31, 0x0, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) (async) modify_ldt$write(0x1, &(0x7f0000000580)={0xfffffff8, 0x0, 0x400, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) mq_unlink(&(0x7f0000000000)='\\!\x00') 188.860038ms ago: executing program 0 (id=115): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0x69}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x8, 0x0, 0x0, 0x2}]}}]}]}, 0x3c}}, 0x0) close(r3) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000500)={0x0, 0xfffffffffffffc3b, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r7, 0x1eb, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x7]}) write(0xffffffffffffffff, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=-2,lpwwnn=0x1111111111111111,lpwwpn=0x222222', 0x62) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, r10, 0x0, r10], [0x2b8], [0x0, 0x1]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unshare(0x6a040000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYBLOB="f5bf0381d489710d3fdec2c6329f6b85374f7c9b0d1c97b2419bc0c0302cb1e85501a84eb6074e74b6a25c67c2c896269f8b25d42769bb813a9264c3110d004ead02ea5bf6be3e902654cb8a95699bf8f230e6a2f987a1c8719a7d8df4e00434dc891187490fbdeea637e3ad5fcded963f7c5b502c9fe3f2d7f50ab6fb44737a23d44d1363d8eaef0e2207620ab7467afcd94935355cebb71a7f5c64", @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) setsockopt$sock_void(r11, 0x1, 0x6c, 0x0, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 140.289797ms ago: executing program 3 (id=116): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x388, 0xffffffff, 0xd0, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x17fe582d91d0b905}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, @remote, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff000000, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0x9, 0x4, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x4, 0x800, 0xb9e, 0x6, 0x8, 0x440, 0x4], 0x13}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) (async) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000100)={0x900}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) (async) mount(&(0x7f0000000400)=@sg0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000700)='gfs2\x00', 0x2000000, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x15) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r3}, 0x18) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB="010000000000000000000200000008000300", @ANYRESHEX=r2, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1000519"], 0x3c}}, 0x4000000) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000480)=0x5ad, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) prctl$PR_SET_PDEATHSIG(0x35, 0x2) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="700002010180c2000000bbbbbbbbbbbb0800453c002a0068000000069078ac1414aa640101014e244e24", @ANYRES32, @ANYRES32=0x41424344, @ANYRES8=r0], 0x29) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r8, &(0x7f0000000040)="4a00000011007f0314066f9a70132d490675bc59083301", 0x17) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000440)={0x1, 0x5, 0x9, 0x1, 0x6}) 135.147766ms ago: executing program 3 (id=117): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000001c0)={0x7, @sdr={0x3447504d, 0x8}}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 0s ago: executing program 3 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x25}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ac", 0x1}], 0x1}, 0x880c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000440), 0x1000) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x1c) kernel console output (not intermixed with test programs): [ 45.755442][ T42] audit: type=1400 audit(1787435334.811:116): avc: denied { write } for pid=5636 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:52625' (ED25519) to the list of known hosts. [ 45.812645][ T42] audit: type=1400 audit(1787435334.861:117): avc: denied { write } for pid=5640 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.853634][ T42] audit: type=1400 audit(1787435334.901:118): avc: denied { name_bind } for pid=5642 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 45.887327][ T42] audit: type=1400 audit(1787435334.941:119): avc: denied { execute } for pid=5643 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.899400][ T42] audit: type=1400 audit(1787435334.941:120): avc: denied { execute_no_trans } for pid=5643 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 45.998624][ T42] audit: type=1400 audit(1787435335.051:121): avc: denied { write } for pid=5645 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.086976][ T42] audit: type=1400 audit(1787435335.141:122): avc: denied { write } for pid=5648 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.218876][ T42] audit: type=1400 audit(1787435335.271:123): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.279660][ T42] audit: type=1400 audit(1787435335.331:124): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.413039][ T42] audit: type=1400 audit(1787435335.461:125): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.690435][ T5643] cgroup: Unknown subsys name 'net' [ 48.858750][ T5643] cgroup: Unknown subsys name 'cpuset' [ 48.863685][ T5643] cgroup: Unknown subsys name 'rlimit' [ 49.060978][ T5710] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.802370][ T5643] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.382378][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 53.382399][ T42] audit: type=1400 audit(1787435342.431:156): avc: denied { execmem } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.651329][ T42] audit: type=1400 audit(1787435342.701:157): avc: denied { create } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.660564][ T42] audit: type=1400 audit(1787435342.701:158): avc: denied { read write } for pid=5724 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.675865][ T42] audit: type=1400 audit(1787435342.701:159): avc: denied { open } for pid=5724 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.686086][ T42] audit: type=1400 audit(1787435342.731:160): avc: denied { ioctl } for pid=5725 comm="syz-executor" path="socket:[1490]" dev="sockfs" ino=1490 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.707035][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.711005][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.723338][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.726880][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.727030][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.730430][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.731373][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.732112][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.733660][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.738091][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.739754][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.740008][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.745804][ T42] audit: type=1400 audit(1787435342.791:161): avc: denied { read } for pid=5725 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.747535][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.751030][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.751247][ T42] audit: type=1400 audit(1787435342.791:162): avc: denied { open } for pid=5725 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.751277][ T42] audit: type=1400 audit(1787435342.791:163): avc: denied { mounton } for pid=5725 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.754407][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.755670][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.756218][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.760653][ T42] audit: type=1400 audit(1787435342.811:164): avc: denied { module_request } for pid=5725 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.761701][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.762765][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.763411][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.800478][ T42] audit: type=1400 audit(1787435342.851:165): avc: denied { sys_module } for pid=5725 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.463801][ T5725] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.466793][ T5725] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.469541][ T5725] bridge_slave_0: entered allmulticast mode [ 54.472556][ T5725] bridge_slave_0: entered promiscuous mode [ 54.479530][ T5725] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.482014][ T5725] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.484310][ T5725] bridge_slave_1: entered allmulticast mode [ 54.487337][ T5725] bridge_slave_1: entered promiscuous mode [ 54.574334][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.577710][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.581818][ T5727] bridge_slave_0: entered allmulticast mode [ 54.584811][ T5727] bridge_slave_0: entered promiscuous mode [ 54.598347][ T5725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.609556][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.612250][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.614832][ T5727] bridge_slave_1: entered allmulticast mode [ 54.617516][ T5727] bridge_slave_1: entered promiscuous mode [ 54.621141][ T5726] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.623998][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.626805][ T5726] bridge_slave_0: entered allmulticast mode [ 54.631125][ T5726] bridge_slave_0: entered promiscuous mode [ 54.635407][ T5726] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.638070][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.640633][ T5726] bridge_slave_1: entered allmulticast mode [ 54.643961][ T5726] bridge_slave_1: entered promiscuous mode [ 54.648052][ T5725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.707727][ T5725] team0: Port device team_slave_0 added [ 54.711646][ T5725] team0: Port device team_slave_1 added [ 54.713880][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.717075][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.719727][ T5724] bridge_slave_0: entered allmulticast mode [ 54.722743][ T5724] bridge_slave_0: entered promiscuous mode [ 54.727621][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.730786][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.733463][ T5724] bridge_slave_1: entered allmulticast mode [ 54.736691][ T5724] bridge_slave_1: entered promiscuous mode [ 54.750188][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.757857][ T5726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.784304][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.797886][ T5726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.842269][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.844660][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.853728][ T5725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.860462][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.865901][ T5727] team0: Port device team_slave_0 added [ 54.871298][ T5726] team0: Port device team_slave_0 added [ 54.874053][ T5725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.877439][ T5725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.889022][ T5725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.895950][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.902049][ T5727] team0: Port device team_slave_1 added [ 54.912418][ T5726] team0: Port device team_slave_1 added [ 54.962508][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.965563][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.973657][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.979603][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.982105][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.991606][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.995874][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.998396][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.007058][ T5726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.013137][ T5724] team0: Port device team_slave_0 added [ 55.018705][ T5724] team0: Port device team_slave_1 added [ 55.027843][ T5726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.030790][ T5726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.042026][ T5726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.104809][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.108517][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.119719][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.145753][ T5725] hsr_slave_0: entered promiscuous mode [ 55.149944][ T5725] hsr_slave_1: entered promiscuous mode [ 55.155890][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.159002][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.171032][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.179141][ T5727] hsr_slave_0: entered promiscuous mode [ 55.182217][ T5727] hsr_slave_1: entered promiscuous mode [ 55.184478][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 55.186550][ T5727] Cannot create hsr debugfs directory [ 55.234890][ T5726] hsr_slave_0: entered promiscuous mode [ 55.238465][ T5726] hsr_slave_1: entered promiscuous mode [ 55.241777][ T5726] debugfs: 'hsr0' already exists in 'hsr' [ 55.244160][ T5726] Cannot create hsr debugfs directory [ 55.323349][ T5724] hsr_slave_0: entered promiscuous mode [ 55.326891][ T5724] hsr_slave_1: entered promiscuous mode [ 55.330266][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 55.333138][ T5724] Cannot create hsr debugfs directory [ 55.692338][ T5727] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.706705][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.712794][ T5727] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.721231][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.725263][ T5727] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.731915][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.736145][ T5727] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.745450][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.776027][ T5082] Bluetooth: hci3: command tx timeout [ 55.785606][ T5082] Bluetooth: hci1: command tx timeout [ 55.813707][ T5725] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.821319][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.832799][ T5725] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.840284][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.843202][ T5725] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.847218][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.850397][ T5725] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.855348][ T5082] Bluetooth: hci0: command tx timeout [ 55.855362][ T5736] Bluetooth: hci2: command tx timeout [ 55.856849][ T5725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.938361][ T5726] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.948324][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.952354][ T5726] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.958855][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.968277][ T5726] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.975416][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.980258][ T5726] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.987112][ T5726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.079448][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.086819][ T5724] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.093514][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.100057][ T5724] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.106300][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.110305][ T5724] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.117672][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.122332][ T5724] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.126896][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.162458][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.176466][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.180945][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.203951][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.206486][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.212898][ T5725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.249858][ T5725] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.272673][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.275786][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.296410][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.298705][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.306141][ T5726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.331208][ T5726] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.343355][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.345710][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.355515][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.358702][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.372443][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.408569][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.437724][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.440700][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.465336][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.468901][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.601602][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.639388][ T5727] veth0_vlan: entered promiscuous mode [ 56.648974][ T5727] veth1_vlan: entered promiscuous mode [ 56.678012][ T5727] veth0_macvtap: entered promiscuous mode [ 56.682568][ T5727] veth1_macvtap: entered promiscuous mode [ 56.693986][ T5726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.701361][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.722571][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.739077][ T5725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.805022][ T5804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.821218][ T5726] veth0_vlan: entered promiscuous mode [ 56.834051][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.835530][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.837777][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.839629][ T5725] veth0_vlan: entered promiscuous mode [ 56.844974][ T5575] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.856478][ T5725] veth1_vlan: entered promiscuous mode [ 56.870829][ T5726] veth1_vlan: entered promiscuous mode [ 56.889685][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.892857][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.910468][ T5726] veth0_macvtap: entered promiscuous mode [ 56.919769][ T5726] veth1_macvtap: entered promiscuous mode [ 56.925302][ T5725] veth0_macvtap: entered promiscuous mode [ 56.931647][ T5727] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.938441][ T5724] veth0_vlan: entered promiscuous mode [ 56.941159][ T5725] veth1_macvtap: entered promiscuous mode [ 56.949054][ T5724] veth1_vlan: entered promiscuous mode [ 56.953966][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.968122][ T5726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.980955][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.991250][ T5725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.031430][ T5724] veth0_macvtap: entered promiscuous mode [ 57.050544][ T5724] veth1_macvtap: entered promiscuous mode [ 57.094760][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.116985][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.117499][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.119679][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.123951][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.165526][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.170475][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.191617][ T5891] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 57.214446][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.219624][ T610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.226950][ T610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.231012][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.286664][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.290314][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.305949][ T5575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.311658][ T5575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.315601][ T5575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.318756][ T5575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.321487][ T5575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.355111][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.362069][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.365587][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.385256][ T5575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.389762][ T5575] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.400620][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.403225][ T5903] fuse: Unknown parameter 'fd<0x0000000000000004' [ 57.403843][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.410681][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.413730][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.444747][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.449572][ T5910] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 57.449963][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.476420][ T5575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.480180][ T5575] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.505325][ T5920] syzkaller0: entered promiscuous mode [ 57.507108][ T5920] syzkaller0: entered allmulticast mode [ 57.548149][ T5923] netlink: 872 bytes leftover after parsing attributes in process `syz.2.13'. [ 57.554368][ T5923] netlink: 872 bytes leftover after parsing attributes in process `syz.2.13'. [ 57.576037][ T5575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.597668][ T5920] kvm: MWAIT instruction emulated as NOP! [ 57.659503][ T5935] ima: policy update failed [ 57.713197][ T5939] Zero length message leads to an empty skb [ 57.734186][ T5941] syz.2.18 uses obsolete (PF_INET,SOCK_PACKET) [ 57.753355][ T5941] 9p: Bad value for 'version' [ 57.857413][ T5736] Bluetooth: hci1: command tx timeout [ 57.865015][ T5736] Bluetooth: hci3: command tx timeout [ 57.882107][ T5954] x_tables: duplicate underflow at hook 1 [ 57.936343][ T5736] Bluetooth: hci2: command tx timeout [ 57.945059][ T5736] Bluetooth: hci0: command tx timeout [ 58.468124][ T42] kauditd_printk_skb: 83 callbacks suppressed [ 58.468135][ T42] audit: type=1400 audit(1787435347.521:249): avc: denied { read } for pid=5976 comm="syz.1.27" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.473180][ T5977] program syz.1.27 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.479091][ T42] audit: type=1400 audit(1787435347.521:250): avc: denied { open } for pid=5976 comm="syz.1.27" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 58.491741][ T42] audit: type=1400 audit(1787435347.541:251): avc: denied { create } for pid=5976 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.505053][ T42] audit: type=1400 audit(1787435347.561:252): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 58.551955][ T5981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 58.568874][ T5981] bridge1: entered promiscuous mode [ 58.573701][ T5981] bridge1: entered allmulticast mode [ 58.580888][ T42] audit: type=1400 audit(1787435347.631:253): avc: denied { mount } for pid=5980 comm="syz.0.29" name="/" dev="configfs" ino=3122 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 58.581592][ T5981] warning: `syz.0.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.602305][ T42] audit: type=1400 audit(1787435347.651:254): avc: denied { create } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.607285][ T5983] netlink: 'syz.1.30': attribute type 12 has an invalid length. [ 58.612424][ T42] audit: type=1400 audit(1787435347.651:255): avc: denied { setopt } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.618947][ T5983] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 58.622354][ T42] audit: type=1400 audit(1787435347.651:256): avc: denied { setopt } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.632159][ T42] audit: type=1400 audit(1787435347.661:257): avc: denied { bind } for pid=5982 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 58.639208][ T42] audit: type=1400 audit(1787435347.661:258): avc: denied { name_bind } for pid=5982 comm="syz.1.30" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 58.729050][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.734388][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.739598][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.750866][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.920922][ T6012] syzkaller0: entered promiscuous mode [ 58.922784][ T6012] syzkaller0: entered allmulticast mode [ 58.971408][ T6019] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.987598][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.384704][ T1041] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.554686][ T1041] usb 7-1: Using ep0 maxpacket: 32 [ 59.560356][ T1041] usb 7-1: unable to get BOS descriptor or descriptor too short [ 59.564144][ T1041] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 59.573782][ T1041] usb 7-1: string descriptor 0 read error: -22 [ 59.577191][ T1041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.589492][ T1041] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 59.593949][ T1041] dw2102: su3000_power_ctrl: 1, initialized 0 [ 59.596399][ T1041] dvb-usb: bulk message failed: -22 (2/0) [ 59.606759][ T1041] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 59.611229][ T1041] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 59.614403][ T1041] usb 7-1: media controller created [ 59.616640][ T1041] dvb-usb: bulk message failed: -22 (6/0) [ 59.618671][ T1041] dw2102: i2c transfer failed. [ 59.620619][ T1041] dvb-usb: bulk message failed: -22 (6/0) [ 59.622802][ T1041] dw2102: i2c transfer failed. [ 59.624414][ T1041] dvb-usb: bulk message failed: -22 (6/0) [ 59.627128][ T1041] dw2102: i2c transfer failed. [ 59.628697][ T1041] dvb-usb: bulk message failed: -22 (6/0) [ 59.630923][ T1041] dw2102: i2c transfer failed. [ 59.633214][ T1041] dvb-usb: bulk message failed: -22 (6/0) [ 59.635283][ T1041] dw2102: i2c transfer failed. [ 59.637022][ T1041] dvb-usb: bulk message failed: -22 (6/0) [ 59.639242][ T1041] dw2102: i2c transfer failed. [ 59.641481][ T1041] dvb-usb: MAC address: 02:02:02:02:02:02 [ 59.654829][ T1041] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 59.673085][ T1041] dvb-usb: bulk message failed: -22 (3/0) [ 59.675622][ T1041] dw2102: command 0x0e transfer failed. [ 59.678052][ T1041] dvb-usb: bulk message failed: -22 (3/0) [ 59.680390][ T1041] dw2102: command 0x0e transfer failed. [ 59.944716][ T5736] Bluetooth: hci3: command tx timeout [ 59.944744][ T5082] Bluetooth: hci1: command tx timeout [ 59.955738][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 59.958848][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.45'. [ 59.984788][ T6044] syzkaller0: entered promiscuous mode [ 59.986773][ T6044] syzkaller0: entered allmulticast mode [ 59.996568][ T1041] dvb-usb: bulk message failed: -22 (3/0) [ 59.999960][ T1041] dw2102: command 0x0e transfer failed. [ 60.002697][ T1041] dvb-usb: bulk message failed: -22 (3/0) [ 60.004823][ T1041] dw2102: command 0x0e transfer failed. [ 60.006844][ T1041] dvb-usb: bulk message failed: -22 (1/0) [ 60.008767][ T1041] dw2102: command 0x51 transfer failed. [ 60.015919][ T5082] Bluetooth: hci0: command tx timeout [ 60.015952][ T5736] Bluetooth: hci2: command tx timeout [ 60.017133][ T6032] dvb-usb: bulk message failed: -22 (38/0) [ 60.017161][ T6032] dw2102: i2c transfer failed. [ 60.017177][ T6032] i2c i2c-2: Invalid block size returned: 34 [ 60.037074][ T6049] tipc: Started in network mode [ 60.040343][ T6049] tipc: Node identity 3201caf26a32, cluster identity 4711 [ 60.041483][ T1041] DVB: Unable to find symbol ds3000_attach() [ 60.044226][ T6049] tipc: Enabled bearer , priority 0 [ 60.046050][ T1041] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 60.056873][ T6049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 60.062476][ T6049] veth0_macvtap: mtu less than device minimum [ 60.081112][ T6048] tipc: Disabling bearer [ 60.124648][ T1041] rc_core: IR keymap rc-su3000 not found [ 60.128765][ T1041] Registered IR keymap rc-empty [ 60.136559][ T1041] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 60.146768][ T1041] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input5 [ 60.163985][ T1041] dvb-usb: schedule remote query interval to 150 msecs. [ 60.171277][ T6060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 60.177339][ T1041] dw2102: su3000_power_ctrl: 0, initialized 1 [ 60.181082][ T1041] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 60.197098][ T1041] usb 7-1: USB disconnect, device number 2 [ 60.330760][ T6069] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.52'. [ 60.342588][ T6074] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 60.358457][ T1041] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 60.407218][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.410989][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.423667][ T6076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.427443][ T6076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.516016][ T6086] Invalid source name [ 60.517571][ T6086] UBIFS error (pid: 6086): cannot open "./file0", error -22 [ 60.664392][ T6086] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 60.672622][ T6092] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 60.721879][ T6095] bridge_slave_0: left allmulticast mode [ 60.728078][ T6095] bridge_slave_0: left promiscuous mode [ 60.732344][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.765242][ T6098] netlink: 72 bytes leftover after parsing attributes in process `syz.2.60'. [ 60.771531][ T6095] bridge_slave_1: left allmulticast mode [ 60.773459][ T6095] bridge_slave_1: left promiscuous mode [ 60.775673][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.788440][ T6103] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 60.793787][ T6102] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 60.797432][ T6103] CIFS mount error: No usable UNC path provided in device string! [ 60.797432][ T6103] [ 60.804493][ T6103] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 60.806755][ T6095] bond0: (slave bond_slave_0): Releasing backup interface [ 60.834393][ T6095] bond0: (slave bond_slave_1): Releasing backup interface [ 60.854359][ T6095] team0: Port device team_slave_0 removed [ 60.875694][ T6095] team0: Port device team_slave_1 removed [ 60.879022][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.881861][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.887499][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.892434][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.900296][ T6095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 60.908940][ T6106] vlan0: entered promiscuous mode [ 60.919091][ T6106] team0: Port device vlan0 added [ 60.956171][ T6113] tipc: Started in network mode [ 60.966874][ T6113] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 60.977524][ T6113] tipc: Enabled bearer , priority 0 [ 61.029223][ T6117] binder: Unknown parameter 'Lx' [ 61.101423][ T6124] netlink: 68 bytes leftover after parsing attributes in process `syz.3.70'. [ 61.161422][ T6131] IPVS: set_ctl: invalid protocol: 137 224.0.0.1:18 [ 61.257239][ T6136] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.261724][ T6136] block device autoloading is deprecated and will be removed. [ 61.350655][ T6154] capability: warning: `syz.2.77' uses 32-bit capabilities (legacy support in use) [ 61.544483][ T6169] ref_ctr increment failed for inode: 0x71 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8880365b2640 [ 61.557874][ T6168] uprobe: syz.0.83:6168 failed to unregister, leaking uprobe [ 61.725850][ T5832] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 61.884254][ T6178] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 61.892603][ T5832] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 61.898381][ T6178] overlayfs: failed to set xattr on upper [ 61.899371][ T6189] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 61.899625][ T5832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 61.899654][ T5832] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 61.899687][ T5832] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.900833][ T6178] overlayfs: ...falling back to redirect_dir=nofollow. [ 61.901010][ T6178] overlayfs: ...falling back to index=off. [ 61.901020][ T6178] overlayfs: ...falling back to uuid=null. [ 61.931203][ T6189] CPU: 3 UID: 0 PID: 6189 Comm: syz.3.89 Not tainted syzkaller #0 PREEMPT(full) [ 61.931240][ T6189] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.931254][ T6189] Call Trace: [ 61.931263][ T6189] [ 61.931272][ T6189] dump_stack_lvl+0x100/0x190 [ 61.931316][ T6189] sysfs_warn_dup.cold+0x1c/0x28 [ 61.931350][ T6189] sysfs_create_dir_ns+0x24b/0x2b0 [ 61.931377][ T6189] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 61.931396][ T6189] ? find_held_lock+0x2b/0x80 [ 61.931410][ T6189] ? kobject_add_internal+0x25f/0x930 [ 61.931426][ T6189] ? kobject_add_internal+0x25f/0x930 [ 61.931442][ T6189] ? class_dir_child_ns_type+0xd/0x60 [ 61.931465][ T6189] kobject_add_internal+0x2c8/0x930 [ 61.931487][ T6189] kobject_add+0x16a/0x1e0 [ 61.931503][ T6189] ? __pfx_kobject_add+0x10/0x10 [ 61.931523][ T6189] ? get_device_parent+0x1b3/0x4c0 [ 61.931538][ T6189] ? kobject_put+0xb9/0x640 [ 61.931560][ T6189] device_add+0x294/0x1970 [ 61.931576][ T6189] ? lockdep_init_map_type+0x5c/0x250 [ 61.931596][ T6189] ? __pfx_device_add+0x10/0x10 [ 61.931612][ T6189] ? lockdep_init_map_type+0x5c/0x250 [ 61.931632][ T6189] ? __init_waitqueue_head+0xca/0x150 [ 61.931647][ T6189] tty_register_device_attr+0x388/0x7f0 [ 61.931667][ T6189] ? lockdep_init_map_type+0x5c/0x250 [ 61.931684][ T6189] ? __pfx_tty_register_device_attr+0x10/0x10 [ 61.931704][ T6189] ? tty_port_init+0x156/0x1c0 [ 61.931717][ T6189] gsm_activate_mux+0x155/0x2a0 [ 61.931730][ T6189] gsmld_ioctl+0xbbc/0x15c0 [ 61.931745][ T6189] ? kasan_quarantine_put+0x104/0x240 [ 61.931761][ T6189] ? __pfx_gsmld_ioctl+0x10/0x10 [ 61.931783][ T6189] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.931800][ T6189] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 61.931817][ T6189] ? __pfx_gsmld_ioctl+0x10/0x10 [ 61.931829][ T6189] tty_ioctl+0x11b4/0x1640 [ 61.931840][ T6189] ? __pfx_tty_ioctl+0x10/0x10 [ 61.931849][ T6189] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 61.931868][ T6189] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 61.931893][ T6189] ? selinux_file_ioctl+0x13b/0x290 [ 61.931908][ T6189] ? selinux_file_ioctl+0xb6/0x290 [ 61.931925][ T6189] ? __pfx_tty_ioctl+0x10/0x10 [ 61.931935][ T6189] __x64_sys_ioctl+0x18e/0x210 [ 61.931952][ T6189] do_syscall_64+0x123/0x790 [ 61.931967][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.931979][ T6189] RIP: 0033:0x7fe202d9e0d9 [ 61.931991][ T6189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.932001][ T6189] RSP: 002b:00007fe203c6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 61.932013][ T6189] RAX: ffffffffffffffda RBX: 00007fe203026090 RCX: 00007fe202d9e0d9 [ 61.932020][ T6189] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000005 [ 61.932026][ T6189] RBP: 00007fe202e35024 R08: 0000000000000000 R09: 0000000000000000 [ 61.932032][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.932038][ T6189] R13: 00007fe203026128 R14: 00007fe203026090 R15: 00007fffb1e49488 [ 61.932051][ T6189] [ 61.932069][ T6189] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 61.941777][ T5832] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 61.987342][ T5731] tipc: Node number set to 11578026 [ 62.024682][ T5736] Bluetooth: hci3: command tx timeout [ 62.032084][ T5082] Bluetooth: hci1: command tx timeout [ 62.082871][ T5832] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 62.095728][ T5082] Bluetooth: hci0: command tx timeout [ 62.098486][ T5082] Bluetooth: hci2: command tx timeout [ 62.304929][ T6163] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 62.312498][ T6163] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 62.318653][ T6163] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 62.390198][ T6163] SPCP8x5 ttyUSB0: Set UART format 0x370b failed (error = -32) [ 62.716264][ T6228] vlan2: entered promiscuous mode [ 62.719071][ T6228] hsr0: entered promiscuous mode [ 62.722350][ T6228] vlan2: entered allmulticast mode [ 62.724786][ T6228] hsr0: entered allmulticast mode [ 62.727165][ T6228] hsr_slave_0: entered allmulticast mode [ 62.729670][ T6228] hsr_slave_1: entered allmulticast mode [ 62.803891][ T6234] Can't find a SQUASHFS superblock on nullb0 [ 62.821321][ T6239] ublk_ctrl_add_dev: invalid recovery flags 10 [ 62.948450][ T6258] __nla_validate_parse: 2 callbacks suppressed [ 62.948462][ T6258] netlink: 56 bytes leftover after parsing attributes in process `syz.3.109'. [ 62.953592][ T6258] netlink: 56 bytes leftover after parsing attributes in process `syz.3.109'. [ 63.185392][ T5731] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.201087][ T6268] program syz.3.111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.243935][ T6270] capability: warning: `syz.3.112' uses deprecated v2 capabilities in a way that may be insecure [ 63.335741][ T5731] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 63.347385][ T5731] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 63.352378][ T5731] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 63.359429][ T5731] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.371238][ T5731] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 63.379425][ T5731] usb 6-1: SPCP8x5 converter now attached to ttyUSB1 [ 63.476496][ T5738] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 63.478339][ T6285] /dev/sg0: Can't lookup blockdev [ 63.516507][ T42] kauditd_printk_skb: 114 callbacks suppressed [ 63.516578][ T42] audit: type=1400 audit(2000000004.879:373): avc: denied { append } for pid=6289 comm="syz.3.117" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.531052][ T6290] loop5: detected capacity change from 0 to 7 [ 63.550838][ T42] audit: type=1400 audit(2000000004.909:374): avc: denied { open } for pid=6283 comm="syz.0.115" path="/dev/dri/card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.553841][ T6290] Dev loop5: unable to read RDB block 7 [ 63.564353][ T6290] loop5: unable to read partition table [ 63.564818][ T42] audit: type=1400 audit(2000000004.909:375): avc: denied { ioctl } for pid=6283 comm="syz.0.115" path="/dev/dri/card1" dev="devtmpfs" ino=637 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 63.568693][ T6290] loop5: partition table beyond EOD, truncated [ 63.577135][ T6290] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 63.578871][ T42] audit: type=1400 audit(2000000004.939:376): avc: denied { read write } for pid=6255 comm="syz.1.108" name="event1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.588746][ T42] audit: type=1400 audit(2000000004.939:377): avc: denied { open } for pid=6255 comm="syz.1.108" path="/dev/input/event1" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.672976][ T42] audit: type=1400 audit(2000000005.029:378): avc: denied { relabelfrom } for pid=6293 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.675977][ T6295] syzkaller0: entered promiscuous mode [ 63.681309][ T42] audit: type=1400 audit(2000000005.029:379): avc: denied { relabelto } for pid=6293 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 63.683537][ T6295] syzkaller0: entered allmulticast mode [ 63.695283][ T42] audit: type=1400 audit(2000000005.029:380): avc: denied { create } for pid=6293 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.723208][ T42] audit: type=1400 audit(2000000005.079:381): avc: denied { setopt } for pid=6283 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.738696][ T5738] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 63.786564][ T42] audit: type=1400 audit(2000000005.149:382): avc: denied { write } for pid=6293 comm="syz.3.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.795814][ T6257] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 63.798340][ T6257] ------------[ cut here ]------------ [ 63.800416][ T6257] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait+0x98/0x380 [ 63.804189][ T6257] WARNING: kernel/sched/core.c:9157 at __might_sleep+0x94/0xc0, CPU#2: syz.1.108/6257 [ 63.807345][ T6257] Modules linked in: [ 63.808789][ T6257] CPU: 2 UID: 0 PID: 6257 Comm: syz.1.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.812179][ T6257] Tainted: [L]=SOFTLOCKUP [ 63.813853][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 63.818357][ T6257] RIP: 0010:__might_sleep+0x97/0xc0 [ 63.820056][ T6257] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 63.829101][ T6257] RSP: 0018:ffffc900039475b8 EFLAGS: 00010286 [ 63.831926][ T6257] RAX: dffffc0000000000 RBX: ffffffff8e3bfa58 RCX: ffffffff81e2a988 [ 63.835256][ T6257] RDX: ffffffff81e2a988 RSI: 0000000000000001 RDI: ffffffff914651d0 [ 63.838750][ T6257] RBP: 0000000000000140 R08: 0000000000000001 R09: 00000000000000b6 [ 63.842063][ T6257] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88802d138000 [ 63.845740][ T6257] R13: 0000000000000001 R14: ffffffff87bae310 R15: dffffc0000000000 [ 63.849259][ T6257] FS: 00007f690243b6c0(0000) GS:ffff8880d5da2000(0000) knlGS:0000000000000000 [ 63.854275][ T6257] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.858474][ T6257] CR2: 0000200000000230 CR3: 000000005b932000 CR4: 0000000000352ef0 [ 63.861978][ T6257] Call Trace: [ 63.863403][ T6257] [ 63.864673][ T6257] __kmalloc_cache_noprof+0x3ff/0x6b0 [ 63.867114][ T6257] ? spcp8x5_get_msr+0xe9/0x2d0 [ 63.869326][ T6257] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 63.872114][ T6257] spcp8x5_get_msr+0xe9/0x2d0 [ 63.874250][ T6257] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 63.877468][ T6257] spcp8x5_carrier_raised+0x75/0xe0 [ 63.880345][ T6257] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 63.883153][ T6257] ? mark_held_locks+0x40/0x70 [ 63.885393][ T6257] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 63.887929][ T6257] serial_port_carrier_raised+0x8f/0xd0 [ 63.890294][ T6257] tty_port_block_til_ready+0x43c/0x8e0 [ 63.892728][ T6257] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 63.895487][ T6257] ? __pfx_autoremove_wake_function+0x10/0x10 [ 63.899153][ T6257] tty_port_open+0x19c/0x1f0 [ 63.902104][ T6257] ? __pfx_serial_open+0x10/0x10 [ 63.904532][ T6257] tty_open+0x3dd/0xfa0 [ 63.906577][ T6257] ? __pfx_tty_open+0x10/0x10 [ 63.908723][ T6257] ? chrdev_open+0x10b/0x6a0 [ 63.910535][ T6257] ? chrdev_open+0x10b/0x6a0 [ 63.912125][ T6257] ? __pfx_tty_open+0x10/0x10 [ 63.913759][ T6257] chrdev_open+0x234/0x6a0 [ 63.915861][ T6257] ? __pfx_chrdev_open+0x10/0x10 [ 63.918052][ T6257] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 63.921208][ T6257] do_dentry_open+0x6ab/0x14d0 [ 63.923593][ T6257] ? __pfx_chrdev_open+0x10/0x10 [ 63.926774][ T6257] vfs_open+0x82/0x3f0 [ 63.928775][ T6257] path_openat+0x19fa/0x2440 [ 63.931166][ T6257] ? __pfx_path_openat+0x10/0x10 [ 63.933482][ T6257] do_file_open+0x20e/0x430 [ 63.935792][ T6257] ? __pfx_do_file_open+0x10/0x10 [ 63.938306][ T6257] ? _raw_spin_unlock+0x28/0x50 [ 63.940746][ T6257] ? alloc_fd+0x471/0x7a0 [ 63.942686][ T6257] do_sys_openat2+0x10f/0x1e0 [ 63.945176][ T6257] ? __pfx_do_sys_openat2+0x10/0x10 [ 63.948240][ T6257] ? find_held_lock+0x2b/0x80 [ 63.950871][ T6257] __x64_sys_openat+0x12d/0x210 [ 63.953214][ T6257] ? __pfx___x64_sys_openat+0x10/0x10 [ 63.956012][ T6257] do_syscall_64+0x123/0x790 [ 63.958152][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.960728][ T6257] RIP: 0033:0x7f690159e0d9 [ 63.962762][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.971026][ T6257] RSP: 002b:00007f690243b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 63.974650][ T6257] RAX: ffffffffffffffda RBX: 00007f6901825fa0 RCX: 00007f690159e0d9 [ 63.978056][ T6257] RDX: 0000000000000000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 63.981467][ T6257] RBP: 00007f6901635024 R08: 0000000000000000 R09: 0000000000000000 [ 63.984272][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.987228][ T6257] R13: 00007f6901826038 R14: 00007f6901825fa0 R15: 00007ffff0dfe9f8 [ 63.989999][ T6257] [ 63.991289][ T6257] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.994077][ T6257] CPU: 2 UID: 0 PID: 6257 Comm: syz.1.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 63.997841][ T6257] Tainted: [L]=SOFTLOCKUP [ 63.999262][ T6257] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 64.002632][ T6257] Call Trace: [ 64.003732][ T6257] [ 64.004701][ T6257] dump_stack_lvl+0x100/0x190 [ 64.006368][ T6257] vpanic+0x553/0x970 [ 64.007799][ T6257] ? __pfx_vpanic+0x10/0x10 [ 64.009485][ T6257] panic+0xd1/0xe0 [ 64.010888][ T6257] ? __pfx_panic+0x10/0x10 [ 64.012677][ T6257] check_panic_on_warn.cold+0x19/0x34 [ 64.014559][ T6257] ? __might_sleep+0x94/0xc0 [ 64.016101][ T6257] __warn.cold+0x191/0x318 [ 64.017618][ T6257] __report_bug+0x30f/0x440 [ 64.019026][ T6257] ? __might_sleep+0x94/0xc0 [ 64.020500][ T6257] ? __pfx___report_bug+0x10/0x10 [ 64.022049][ T6257] ? prepare_to_wait+0x98/0x380 [ 64.023755][ T6257] ? prepare_to_wait+0x98/0x380 [ 64.025357][ T6257] report_bug_entry+0xe2/0x290 [ 64.026905][ T6257] ? __might_sleep+0x97/0xc0 [ 64.028288][ T6257] handle_bug+0x1cd/0x2a0 [ 64.029945][ T6257] exc_invalid_op+0x17/0x50 [ 64.031538][ T6257] asm_exc_invalid_op+0x1a/0x20 [ 64.033223][ T6257] RIP: 0010:__might_sleep+0x97/0xc0 [ 64.034849][ T6257] Code: 8b 94 24 80 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d 0c 3c 70 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 bd bf a7 00 eb 9f 89 74 24 04 e8 e2 bf a7 [ 64.041091][ T6257] RSP: 0018:ffffc900039475b8 EFLAGS: 00010286 [ 64.043024][ T6257] RAX: dffffc0000000000 RBX: ffffffff8e3bfa58 RCX: ffffffff81e2a988 [ 64.045712][ T6257] RDX: ffffffff81e2a988 RSI: 0000000000000001 RDI: ffffffff914651d0 [ 64.048198][ T6257] RBP: 0000000000000140 R08: 0000000000000001 R09: 00000000000000b6 [ 64.051397][ T6257] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88802d138000 [ 64.054053][ T6257] R13: 0000000000000001 R14: ffffffff87bae310 R15: dffffc0000000000 [ 64.056731][ T6257] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 64.058777][ T6257] ? prepare_to_wait+0x98/0x380 [ 64.060315][ T6257] ? prepare_to_wait+0x98/0x380 [ 64.061844][ T6257] __kmalloc_cache_noprof+0x3ff/0x6b0 [ 64.063506][ T6257] ? spcp8x5_get_msr+0xe9/0x2d0 [ 64.065059][ T6257] ? __pfx_serial_port_carrier_raised+0x10/0x10 [ 64.067223][ T6257] spcp8x5_get_msr+0xe9/0x2d0 [ 64.068903][ T6257] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 64.071076][ T6257] spcp8x5_carrier_raised+0x75/0xe0 [ 64.072969][ T6257] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 64.074841][ T6257] ? mark_held_locks+0x40/0x70 [ 64.076317][ T6257] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 64.078162][ T6257] serial_port_carrier_raised+0x8f/0xd0 [ 64.079915][ T6257] tty_port_block_til_ready+0x43c/0x8e0 [ 64.081646][ T6257] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 64.083560][ T6257] ? __pfx_autoremove_wake_function+0x10/0x10 [ 64.085858][ T6257] tty_port_open+0x19c/0x1f0 [ 64.087601][ T6257] ? __pfx_serial_open+0x10/0x10 [ 64.089492][ T6257] tty_open+0x3dd/0xfa0 [ 64.091088][ T6257] ? __pfx_tty_open+0x10/0x10 [ 64.092755][ T6257] ? chrdev_open+0x10b/0x6a0 [ 64.094298][ T6257] ? chrdev_open+0x10b/0x6a0 [ 64.095866][ T6257] ? __pfx_tty_open+0x10/0x10 [ 64.097420][ T6257] chrdev_open+0x234/0x6a0 [ 64.098873][ T6257] ? __pfx_chrdev_open+0x10/0x10 [ 64.100445][ T6257] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 64.102356][ T6257] do_dentry_open+0x6ab/0x14d0 [ 64.103822][ T6257] ? __pfx_chrdev_open+0x10/0x10 [ 64.105398][ T6257] vfs_open+0x82/0x3f0 [ 64.106809][ T6257] path_openat+0x19fa/0x2440 [ 64.108296][ T6257] ? __pfx_path_openat+0x10/0x10 [ 64.109866][ T6257] do_file_open+0x20e/0x430 [ 64.111460][ T6257] ? __pfx_do_file_open+0x10/0x10 [ 64.113307][ T6257] ? _raw_spin_unlock+0x28/0x50 [ 64.115093][ T6257] ? alloc_fd+0x471/0x7a0 [ 64.116601][ T6257] do_sys_openat2+0x10f/0x1e0 [ 64.118094][ T6257] ? __pfx_do_sys_openat2+0x10/0x10 [ 64.119936][ T6257] ? find_held_lock+0x2b/0x80 [ 64.121630][ T6257] __x64_sys_openat+0x12d/0x210 [ 64.123152][ T6257] ? __pfx___x64_sys_openat+0x10/0x10 [ 64.124826][ T6257] do_syscall_64+0x123/0x790 [ 64.126360][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.128500][ T6257] RIP: 0033:0x7f690159e0d9 [ 64.130023][ T6257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.136935][ T6257] RSP: 002b:00007f690243b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 64.139788][ T6257] RAX: ffffffffffffffda RBX: 00007f6901825fa0 RCX: 00007f690159e0d9 [ 64.142249][ T6257] RDX: 0000000000000000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 64.144929][ T6257] RBP: 00007f6901635024 R08: 0000000000000000 R09: 0000000000000000 [ 64.147511][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.149935][ T6257] R13: 00007f6901826038 R14: 00007f6901825fa0 R15: 00007ffff0dfe9f8 [ 64.152547][ T6257] [ 64.154681][ T6257] Kernel Offset: disabled [ 64.156546][ T6257] Rebooting in 86400 seconds..