last executing test programs: 835.602974ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = open(&(0x7f0000000280)='.\x00', 0x2800, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x4040080) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) fchdir(r6) r7 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) 720.570205ms ago: executing program 1 (id=5): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x1, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x10001}]}, 0x34}}, 0x24008084) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000180)={"2486910384e5923431d4c5d5fbf51400", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r5, 0x4010942a, &(0x7f0000000040)={0x0, 0x312}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r8, r8, 0x2f}, 0x20) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="120980ff0000", 0x0, 0x4, 0x4, 0x0, 0x0}) 640.387037ms ago: executing program 1 (id=6): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x880) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000004140)}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, r8, 0x0, r8], [0x2b8], [0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r9, 0x1, 0xd47, 0x7f}) sendmsg$NFT_BATCH(r13, &(0x7f0000000f80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWFLOWTABLE={0xcc, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'geneve0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0xe4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0xc6, 0x6, "7430cd4186ef48b7d1420d3561aabb54df0f24d6dd163e220f53c8f799ff73ea5c3048b6a346dd52ee9da9194143fe59bb09cf2d9411d14632d25b6592afb080eeffc639d4a05f9730079fee8c2906ec4b89310a0b0fc277f828f027337bca689588562b670e24e8b00e30c38c8a13f4cb99b1fd44945e9b47f704612a97a872bdd1d44fe32f8f917bbb048e8d2e177e4615082877c2dbaf3a845b7bf7c13e4db39c8c2697e8b9036cd299b032265f02fda4d1fcf08b27ef79c08fff272538d596ee"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_DELSET={0x38c, 0xb, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x32c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xc7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_DESC_CONCAT={0x174, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8eb1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8d27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa1c}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x50c4ea58}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa591}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a9ae70}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_SET_DESC_CONCAT={0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x405c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xba}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x489}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1c0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4aa6b75a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xada}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x32d00000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7dd12db3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}]}, @NFT_MSG_NEWCHAIN={0xdc, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x3c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4731bd7e}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2e3c6281}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'batadv_slave_0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6a8}, 0x1, 0x0, 0x0, 0x20000010}, 0x44000) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) (async, rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000040)=0x1620, 0x4) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 570.161062ms ago: executing program 1 (id=7): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc) get_mempolicy(&(0x7f0000000080), &(0x7f0000000180), 0x6, &(0x7f0000ffc000/0x4000)=nil, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0}) mknodat(r0, &(0x7f0000000140)='./file1\x00', 0x8000, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr$security_capability(&(0x7f0000000600)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) r1 = userfaultfd(0x801) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) fadvise64(r2, 0x10000, 0x2, 0x2) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000500)={0xa, @pix_mp={0x0, 0xfffffffe, 0x3234564e, 0x2, 0x1, [{0x2}, {0x0, 0x80}, {0xb6e7, 0x2}, {0x0, 0xffffffff}, {}, {0xa8}, {0x3, 0x2000}], 0x0, 0x0, 0x0, 0x2}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x9, 0x1, 0x3, 0x9, "c33afd017bb7409cad9f9455a1b767521eb170387e0ba4b39533b72c886aca3c9899800d5fbbae1b08d5831f8caf125951ea347994a6ba6369e36c7397fc0e89", "360e87a12ef5ce7ffa2bd9190dea0b512c114cc466b76d2637e282eaaf905917", [0x3, 0xffffffff]}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000e27000/0x4000)=nil, 0x4000}, 0x1}) 569.894372ms ago: executing program 3 (id=4): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffe, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x0, 0x1, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x1ff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0x201, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0xfffffffd, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x7ffffffe, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1001, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000b0, 0x0, 0x7fff}, {0x400000b1, 0x0, 0x8}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000000)={@multicast, @empty, @val={@void, {0x8100, 0x4, 0x1}}, {@ipv4={0x800, @tipc={{0xa, 0x4, 0x1, 0x1, 0x44, 0x64, 0x0, 0xfc, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x61, 0x0, 0xf, [0x2]}, @end, @generic={0x86, 0x4, "f7df"}]}}, @payload_conn={{{0x1c, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x2, 0x9, 0x0, 0x1, 0x7, 0x1, 0x0, 0x4, 0xf, 0x1, 0x4e21, 0x4e20}}, [0x0, 0x0, 0x0, 0x0]}}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xce1, 0xc4c, 0x75e, 0xcb]}) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001240)={0x0, 0xffffffffffffff52, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000906050f0a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 500.23027ms ago: executing program 1 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2720, 0x0, &(0x7f0000000100)) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000140)=0x9, 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c1e0000cd70ed000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800090000000000"], 0x3c}}, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000180)="9c893309190a287addf86643a09b09aa83a2edba50f78f8d952e5a31e144332d1589fd1635991efe9aae5c3affbd3565ea156bd45b58455f6faf331ce047e16b5ef138ce5aa5da096bfc168e8d65ef9632ee16e3cd4393ebf30ce26f33483b99dccb568e70b4e73c0f6feb7ecabbf7ee9fa6e8d55987fb87d6e424184042d0e694fe449bb31abbe73e83689e7b97bb8d477fc64acfcf4cd56b0d2266538e155dee50e7f4c20bd762e6455b71096cbf2a77abffd001d287483c5d239fe437856d2b94744f2cd0166d47120c38b6", 0xcd}, {&(0x7f0000000280)="485cd80a365765cc7e3fe2e0e0b1d0e6d07fd459484317f20c0c26cf37b30c4a72eb6611549a7f0c9d", 0x29}, {&(0x7f0000000300)="845c16c37c0f6e87d9c7b27d0e13a0c5b6064ead5e98c521a76d", 0x1a}, {&(0x7f00000003c0)="0be7392db68a0a867e55c2c367c0474b24356d21bbf3fd4a395bb9961d611fb49bbf6af4fa6ab8e9de2c4094ef4ef0089cf6546f07e13ee7fc7c97a672c4560377604c2595f461a0c91022a4bccc72295fd54f6a57e7922d996108217a8424b2e2fd77c33714f9137089616fe1270f37513cdc2c25389ab67fb43449bd78475356e4b12afc7dfecb8693be6bfc", 0x8d}, {&(0x7f0000000480)="7b6d27a0316fe02ad4621f90d2230068", 0x10}, {&(0x7f00000004c0)="e5cbcea516d183a76515848ba883433bc0b29426fea80d89d4ed27aa1e42d392bc5e5f9e3082366422913a0291ee6174bb53bacddce201f49f11bf0ddf91c55aea3ed4e907079dfc2659e0645403f574f68e3777d29d250b58fd62c7bf0f2bbcad139fdf09ba4aed7880", 0x6a}, {&(0x7f0000000580)="eac92667a76c34c89755dda7f4d08628fef8074541a13c258a1b1f5841fada9cb5421799fdac9523d7ccfc7245fd8b16b396de37c1d47dc71a0595a1ceeca14e6aba00e72f3f78048d83611a344a62a18390b6939d84fc1c2bb096a240791fd20f1dfd34f89dfe0e7f45e5bab44096be6a6e1c240e91978bef4d0eda23c6e44469e472171a93b0ece1696001ffe7325cf3eaa070dbca4bac8162d2d4770f326f54045d26dcb96d", 0xa7}, {&(0x7f0000000640)="dc2e609c5a70cc9c837e919828254344c1a38fd5662d87e04f2977eba71ef6cc06346f67a610b355b503d0b1a91ec3d7c3007773a6523b02cfc7a9684c9407d89eceada21dc277a2daac7cfb620c46ed52db6f6baad9cc47e14c1e3ce83be1c48144de4d8c198acbaad7388e3db39cf09d20bfe7dc934ecd30bb528c13278b9c6fbad74e988f5cd0c674b0c028a4915fa5c324c30c9fb7794de5866f33158d3cac02753b7aad36", 0xa7}], 0x8) r3 = add_key$user(&(0x7f0000000840), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000880)="ce3678e446b3045f2eba920500f79fb187dc3abfdad508a54933b5bfdd24054c79930787f3809e7aca5ca4b50a070b7c3379fc030e1dce72116c6a7246e7127fe0de7b7bff8692314254f7576ef8e50d89844d589cc1156dcbc8953ad5cdded56016be5670d4acaca9c8a9b62b4fa8d98a1c6dd6d728bd11380b4ba776b62db2b4380273bf78217d0100000000000000e36896", 0x93, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000080)=""/72, 0x48, &(0x7f0000000340)={&(0x7f0000000300)={'hmac(sha256)\x00'}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01864c2, &(0x7f00000007c0)={0x0, 0x1, r5}) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x10000) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000340)={'wg1\x00', 0x0}) r12 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8a040, 0x0) ioctl$FBIOPUT_CON2FBMAP(r12, 0x4610, &(0x7f0000000140)={0x1, 0x1}) read$FUSE(r5, &(0x7f00000009c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}]}}]}, 0x38}}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r8, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r8, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000440)=[r13, r13], 0x0, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f0000000980)={&(0x7f0000000800)=[r7, r13], &(0x7f0000000940)=[0xfffffffffffffff8, 0x3ff, 0x7fffffff, 0x8000, 0xa, 0x0], 0x2, 0x1}) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x90) syz_open_procfs(0x0, &(0x7f0000000780)='net/ip6_tables_matches\x00') 420.553448ms ago: executing program 2 (id=9): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) mincore(&(0x7f0000701000/0x1000)=nil, 0x1000, &(0x7f00000004c0)=""/74) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000140)={0x58, r4, 0x1, 0x80000000, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x20008894) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) setpriority(0x2, r5, 0xd18) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x185}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0x4004050}, 0x40010) r6 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000440), 0x8a0043, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001d0007f3ff0000000000080007000000", @ANYRES32=r8, @ANYBLOB="800072"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000680)=0x2) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e21, 0xff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9, 0xffffffff}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b3325fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0) 420.065538ms ago: executing program 2 (id=10): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) getresuid(&(0x7f0000000040)=0x0, &(0x7f00000000c0), &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2b, 0x7f, 0x2, 0x7, 0x4, @rand_addr=' \x01\x00', @empty, 0x8000, 0x700, 0x0, 0xe00000}}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002800128008000100687372001c00028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001800)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc1300001800200026bd7000fddbdf25ac1e0001000000000000000000000000fe8000000000000000000000000000aa4e2300064e2000090a0000203a000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="ac141413000000000000000000000000000004d62b000000fc000000000000000000000000000001ff7fffffffffffff05000000000000000a00000000000000000400000000000002000000000000000300000000000000050000000000000001000000000000000800000000000000ffff000000000000080000000000000007000000000000000900000003000000c30c000026bd7000000000000a0001095a000000000000000e00000000000000ac000700ff020000000000000000000000000001ac1e00010000000000000000000000004e2304004e2100000200a0000c000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0400000000000000faffffffffffffff040000000000000001040000000200b0f4b20b0000000000000000000000fd000500000000000000a3000000000000001000000000000000060000000000000009000000000000007f00000000000000a6240000316b6e001200000300000000e40006007f00000100000000000000000000000000000000000000000000000000000001042000034e20007f0a0040a05e000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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"], 0x13cc}}, 0x4000000) close(r0) 369.747114ms ago: executing program 1 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r3, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a00060000000000040004010800010001000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="aeb296d1", @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="040013000a000600ffffffffffff000006001200000800000600b500c902000006001201a5000000"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) accept4$packet(r3, 0x0, &(0x7f0000000080), 0x80000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00'}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x41) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000000000000a00060000000000040004010800010001000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="aeb296d1", @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r4, @ANYBLOB="040013000a000600ffffffffffff000006001200000800000600b500c902000006001201a5000000"], 0x44}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) (async) 287.937297ms ago: executing program 1 (id=12): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0000:00:01.0\x00', 0xd) write(0xffffffffffffffff, &(0x7f0000000900), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='0000:00:04.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/bus/pci/devices/0000:00:05.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='0000:00:05.0', 0xc) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000040)={0x200, 0x7, 0x8, 0x4, 0xa6f, 0x8, 0x4}) 287.664159ms ago: executing program 2 (id=13): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x70bd25, 0x25cfdbfb, {0x1, 0x0, 0xa00}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x3c}, 0x1, 0x2000a00, 0xa000000, 0x20040090}, 0x10) 229.891581ms ago: executing program 2 (id=14): socket(0x40000000015, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040010) r0 = io_uring_setup(0x599b, &(0x7f0000000040)={0x0, 0x23e, 0xc000, 0xfffffffe, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x1a, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 168.630663ms ago: executing program 2 (id=15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000002c0)="b8001800080f23d00f21f8353000000e0f23f80f22d40fd8e866baf80cb84a8cce8cef665efc0cec26640f23dbc7442400b30d45d5c744240204000000c744240600000000c4c11167600066baf80cf20edf9bef66bafc0c66b8134266ef66ba4300ec0f0f49e4b70fbaa70a0000000d", 0x70}], 0x1, 0x57, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000380)=0x900, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r6, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r10 = creat(&(0x7f0000000440)='./file0\x00', 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x800) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000040)="1d", 0x1, 0xfffffffffffffffe) sendmmsg$alg(r12, &(0x7f00000042c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000700)="86", 0x1}], 0x1, 0x0, 0x0, 0x4010}], 0x1, 0x20040) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r5, 0x0) r13 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x38, r13, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=16): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x80984120, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) flock(0xffffffffffffffff, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, r5) sendmsg$NL80211_CMD_FRAME(r5, 0x0, 0x20048844) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4603240095028000000000000003003e0001010000940200000000000040000000000000004d02000000000000f6ffffff000038000100fdff81000808030000000400000000000000000000e70a00000000000000010100000000000006"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 38.093507][ T42] audit: type=1400 audit(1784972125.580:114): avc: denied { rlimitinh } for pid=5632 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.101538][ T42] audit: type=1400 audit(1784972125.580:115): avc: denied { siginh } for pid=5632 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:30139' (ED25519) to the list of known hosts. [ 39.831754][ T42] audit: type=1400 audit(1784972127.340:116): avc: denied { name_bind } for pid=5645 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.592174][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 41.592192][ T42] audit: type=1400 audit(1784972129.100:119): avc: denied { write } for pid=5649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.647855][ T42] audit: type=1400 audit(1784972129.150:120): avc: denied { write } for pid=5652 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.842246][ T42] audit: type=1400 audit(1784972129.350:121): avc: denied { write } for pid=5655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.881083][ T42] audit: type=1400 audit(1784972129.390:122): avc: denied { write } for pid=5658 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.293061][ T42] audit: type=1400 audit(1784972129.800:123): avc: denied { mounton } for pid=5646 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.304201][ T42] audit: type=1400 audit(1784972129.810:124): avc: denied { mount } for pid=5646 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.309696][ T5646] cgroup: Unknown subsys name 'net' [ 42.316094][ T42] audit: type=1400 audit(1784972129.820:125): avc: denied { unmount } for pid=5646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.461308][ T5646] cgroup: Unknown subsys name 'cpuset' [ 42.468381][ T5646] cgroup: Unknown subsys name 'rlimit' [ 42.641033][ T42] audit: type=1400 audit(1784972130.150:126): avc: denied { setattr } for pid=5646 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.649470][ T42] audit: type=1400 audit(1784972130.160:127): avc: denied { create } for pid=5646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.657596][ T42] audit: type=1400 audit(1784972130.160:128): avc: denied { write } for pid=5646 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.709754][ T5662] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.532769][ T5646] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.724599][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 46.724618][ T42] audit: type=1400 audit(1784972134.230:162): avc: denied { execmem } for pid=5728 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.903068][ T42] audit: type=1400 audit(1784972134.410:163): avc: denied { create } for pid=5732 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.910077][ T42] audit: type=1400 audit(1784972134.410:164): avc: denied { read write } for pid=5732 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.917147][ T42] audit: type=1400 audit(1784972134.410:165): avc: denied { open } for pid=5732 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.924374][ T42] audit: type=1400 audit(1784972134.410:166): avc: denied { ioctl } for pid=5732 comm="syz-executor" path="socket:[2735]" dev="sockfs" ino=2735 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.951798][ T5745] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.955064][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.955159][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.955334][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.956994][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.957312][ T5749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.958903][ T5749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.961046][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.961705][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.961718][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.962545][ T5748] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.962798][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.964037][ T5749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.964292][ T5749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.966035][ T5744] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.966422][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.966688][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.970154][ T42] audit: type=1400 audit(1784972134.470:167): avc: denied { read } for pid=5732 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.970182][ T42] audit: type=1400 audit(1784972134.470:168): avc: denied { open } for pid=5732 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.970397][ T42] audit: type=1400 audit(1784972134.480:169): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.974757][ T5744] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.976463][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.977779][ T42] audit: type=1400 audit(1784972134.480:170): avc: denied { module_request } for pid=5732 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.993455][ T42] audit: type=1400 audit(1784972134.500:171): avc: denied { sys_module } for pid=5739 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.995369][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.484396][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.487404][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.491066][ T5739] bridge_slave_0: entered allmulticast mode [ 47.494392][ T5739] bridge_slave_0: entered promiscuous mode [ 47.527533][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.530213][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.532510][ T5739] bridge_slave_1: entered allmulticast mode [ 47.535152][ T5739] bridge_slave_1: entered promiscuous mode [ 47.577081][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.612484][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.624885][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.627188][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.629512][ T5732] bridge_slave_0: entered allmulticast mode [ 47.632154][ T5732] bridge_slave_0: entered promiscuous mode [ 47.657253][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.660380][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.663223][ T5732] bridge_slave_1: entered allmulticast mode [ 47.666912][ T5732] bridge_slave_1: entered promiscuous mode [ 47.677069][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.680222][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.683061][ T5733] bridge_slave_0: entered allmulticast mode [ 47.686713][ T5733] bridge_slave_0: entered promiscuous mode [ 47.691392][ T5739] team0: Port device team_slave_0 added [ 47.707473][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.709922][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.712175][ T5733] bridge_slave_1: entered allmulticast mode [ 47.714849][ T5733] bridge_slave_1: entered promiscuous mode [ 47.719267][ T5739] team0: Port device team_slave_1 added [ 47.739349][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.766027][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.793735][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.796191][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.804168][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.819758][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.832561][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.835236][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.844247][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.849734][ T5732] team0: Port device team_slave_0 added [ 47.853631][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.867351][ T5732] team0: Port device team_slave_1 added [ 47.904157][ T5733] team0: Port device team_slave_0 added [ 47.920070][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.922321][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.929928][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.934562][ T5733] team0: Port device team_slave_1 added [ 47.959867][ T5739] hsr_slave_0: entered promiscuous mode [ 47.962342][ T5739] hsr_slave_1: entered promiscuous mode [ 47.965174][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.967297][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.975281][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.992003][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.994190][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.001958][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.005561][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.008372][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.010702][ T5735] bridge_slave_0: entered allmulticast mode [ 48.013422][ T5735] bridge_slave_0: entered promiscuous mode [ 48.017037][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.019365][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.021665][ T5735] bridge_slave_1: entered allmulticast mode [ 48.024197][ T5735] bridge_slave_1: entered promiscuous mode [ 48.033556][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.035707][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.043561][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.081288][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.112240][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.118035][ T5733] hsr_slave_0: entered promiscuous mode [ 48.120535][ T5733] hsr_slave_1: entered promiscuous mode [ 48.122591][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 48.124401][ T5733] Cannot create hsr debugfs directory [ 48.130182][ T5732] hsr_slave_0: entered promiscuous mode [ 48.133133][ T5732] hsr_slave_1: entered promiscuous mode [ 48.136909][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 48.139341][ T5732] Cannot create hsr debugfs directory [ 48.169271][ T5735] team0: Port device team_slave_0 added [ 48.172409][ T5735] team0: Port device team_slave_1 added [ 48.242616][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.244726][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.252525][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.260424][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.262667][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.270808][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.359972][ T5735] hsr_slave_0: entered promiscuous mode [ 48.362269][ T5735] hsr_slave_1: entered promiscuous mode [ 48.364405][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 48.366164][ T5735] Cannot create hsr debugfs directory [ 48.511981][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.519077][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.545905][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.551863][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.562129][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.567581][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.576050][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.582422][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.612231][ T5732] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.617270][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.620243][ T5732] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.623772][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.626406][ T5732] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.631190][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.633731][ T5732] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.637776][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.712511][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.718852][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.722415][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.728585][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.734430][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.739000][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.743653][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.747338][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.799086][ T5735] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.804017][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.806624][ T5735] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.812542][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.819449][ T5735] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.825199][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.829812][ T5735] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.835414][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.846113][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.880786][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.891346][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.894317][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.903826][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.919455][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.922763][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.938200][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.953608][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.956476][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.977700][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.979899][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.995706][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.010103][ T5748] Bluetooth: hci1: command tx timeout [ 49.010106][ T65] Bluetooth: hci0: command tx timeout [ 49.010324][ T5748] Bluetooth: hci3: command tx timeout [ 49.037510][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.056328][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.068508][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.071503][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.088471][ T5748] Bluetooth: hci2: command tx timeout [ 49.092944][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.095688][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.115406][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.128980][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.131272][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.142314][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.144521][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.333223][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.341183][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.381324][ T5732] veth0_vlan: entered promiscuous mode [ 49.390101][ T5739] veth0_vlan: entered promiscuous mode [ 49.394764][ T5732] veth1_vlan: entered promiscuous mode [ 49.402977][ T5739] veth1_vlan: entered promiscuous mode [ 49.420049][ T5732] veth0_macvtap: entered promiscuous mode [ 49.427222][ T5732] veth1_macvtap: entered promiscuous mode [ 49.437022][ T5739] veth0_macvtap: entered promiscuous mode [ 49.451818][ T5739] veth1_macvtap: entered promiscuous mode [ 49.457278][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.469494][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.476766][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.487813][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.494441][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.498867][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.502713][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.510025][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.515273][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.531749][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.566448][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.570560][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.584399][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.587168][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.611378][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.614487][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.647705][ T5735] veth0_vlan: entered promiscuous mode [ 49.658716][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.659753][ T5733] veth0_vlan: entered promiscuous mode [ 49.662222][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.682702][ T5735] veth1_vlan: entered promiscuous mode [ 49.685021][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.688045][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.697533][ T5733] veth1_vlan: entered promiscuous mode [ 49.713138][ T5732] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.718417][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.722922][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.743851][ T5735] veth0_macvtap: entered promiscuous mode [ 49.762674][ T5735] veth1_macvtap: entered promiscuous mode [ 49.771099][ T5733] veth0_macvtap: entered promiscuous mode [ 49.785094][ T5733] veth1_macvtap: entered promiscuous mode [ 49.812629][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.826810][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.830793][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.842284][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.846139][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.857736][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.864173][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.867467][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.885846][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.890168][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.900366][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.906260][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.962106][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.969127][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.987512][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.990660][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.006471][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.011869][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.021684][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.024312][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.042939][ T5904] evm: overlay not supported [ 50.080431][ T5893] kvm: kvm [5890]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x800000000000 [ 50.099833][ T5893] kvm: kvm [5890]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffff000000000080 [ 50.155401][ T5910] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3462841347 (27702730776 ns) > initial count (18339398992 ns). Using initial count to start timer. [ 50.204079][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 50.217174][ T5918] bond0: entered promiscuous mode [ 50.219306][ T5918] bond_slave_0: entered promiscuous mode [ 50.221396][ T5918] bond_slave_1: entered promiscuous mode [ 50.230106][ T5918] batadv_slave_0: entered promiscuous mode [ 50.232053][ T5918] batadv_slave_0: left promiscuous mode [ 50.234948][ T5918] bond0: left promiscuous mode [ 50.236501][ T5918] bond_slave_0: left promiscuous mode [ 50.238706][ T5918] bond_slave_1: left promiscuous mode [ 50.255631][ T5921] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 50.600044][ T5939] process 'syz.2.16' launched './file1' with NULL argv: empty string added [ 50.763243][ T5927] ------------[ cut here ]------------ [ 50.765283][ T5927] Memory manager not clean during takedown. [ 50.767496][ T5927] WARNING: drivers/gpu/drm/drm_mm.c:965 at drm_mm_takedown+0x62/0x280, CPU#3: syz.1.12/5927 [ 50.771582][ T5927] Modules linked in: [ 50.773065][ T5927] CPU: 3 UID: 0 PID: 5927 Comm: syz.1.12 Tainted: G L syzkaller #0 PREEMPT(full) [ 50.776322][ T5927] Tainted: [L]=SOFTLOCKUP [ 50.777629][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.780937][ T5927] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 50.782637][ T5927] Code: 8b 43 38 48 39 c5 75 16 e8 fb d3 44 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 e5 d3 44 fc 48 8d 3d 2e 7d 68 0b <67> 48 0f b9 3a 48 c7 c0 e0 e3 46 8e 48 ba 00 00 00 00 00 fc ff df [ 50.788757][ T5927] RSP: 0018:ffffc900044a7858 EFLAGS: 00010246 [ 50.790630][ T5927] RAX: 0000000000080000 RBX: ffff8880276b9c68 RCX: ffffc900072a2000 [ 50.792989][ T5927] RDX: 0000000000080000 RSI: ffffffff85c588bb RDI: ffffffff912e05f0 [ 50.795505][ T5927] RBP: ffff8880276b9ca0 R08: 0000000000000007 R09: 0000000000000000 [ 50.797936][ T5927] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027940f80 [ 50.800410][ T5927] R13: ffff888027940f98 R14: ffffffff85c465c0 R15: 0000000000000000 [ 50.802775][ T5927] FS: 00007fc2eb7316c0(0000) GS:ffff8880d60de000(0000) knlGS:0000000000000000 [ 50.805528][ T5927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.808032][ T5927] CR2: 0000001b331caff8 CR3: 00000000584ec000 CR4: 0000000000352ef0 [ 50.810813][ T5927] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000008001800 [ 50.813302][ T5927] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 50.815716][ T5927] Call Trace: [ 50.816751][ T5927] [ 50.817657][ T5927] ? __pfx_drm_gem_init_release+0x10/0x10 [ 50.819558][ T5927] drm_managed_release+0x1bb/0x540 [ 50.821171][ T5927] ? __pfx_virtio_gpu_release+0x10/0x10 [ 50.822921][ T5927] drm_dev_put.part.0+0xca/0x140 [ 50.824502][ T5927] drm_dev_put+0x1f/0x30 [ 50.825825][ T5927] virtio_dev_remove+0xb8/0x170 [ 50.827353][ T5927] ? __pfx_virtio_dev_remove+0x10/0x10 [ 50.829122][ T5927] device_remove+0xcb/0x180 [ 50.830532][ T5927] device_release_driver_internal+0x44e/0x620 [ 50.832408][ T5927] bus_remove_device+0x2bc/0x560 [ 50.833972][ T5927] ? __pfx_bus_remove_device+0x10/0x10 [ 50.835662][ T5927] ? __pfx_device_remove_attrs+0x10/0x10 [ 50.837396][ T5927] device_del+0x376/0x9b0 [ 50.838842][ T5927] ? __pfx_device_del+0x10/0x10 [ 50.840366][ T5927] ? __pfx___might_resched+0x10/0x10 [ 50.842006][ T5927] ? __pfx_pci_device_is_present+0x10/0x10 [ 50.843845][ T5927] device_unregister+0x1d/0xe0 [ 50.845384][ T5927] unregister_virtio_device+0x39/0x60 [ 50.847034][ T5927] virtio_pci_remove+0x7c/0x110 [ 50.848660][ T5927] pci_device_remove+0xb2/0x1d0 [ 50.850191][ T5927] ? __pfx_pci_device_remove+0x10/0x10 [ 50.851866][ T5927] device_remove+0xcb/0x180 [ 50.853224][ T5927] device_release_driver_internal+0x44e/0x620 [ 50.855039][ T5927] unbind_store+0xf8/0x110 [ 50.856432][ T5927] ? __pfx_unbind_store+0x10/0x10 [ 50.858046][ T5927] drv_attr_store+0x74/0xb0 [ 50.859524][ T5927] ? __pfx_drv_attr_store+0x10/0x10 [ 50.861100][ T5927] sysfs_kf_write+0xf2/0x150 [ 50.862580][ T5927] kernfs_fop_write_iter+0x3e0/0x5f0 [ 50.864249][ T5927] ? __pfx_sysfs_kf_write+0x10/0x10 [ 50.865875][ T5927] vfs_write+0x6ac/0x1050 [ 50.867231][ T5927] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 50.869125][ T5927] ? __pfx_vfs_write+0x10/0x10 [ 50.870617][ T5927] ksys_write+0x12a/0x250 [ 50.871971][ T5927] ? __pfx_ksys_write+0x10/0x10 [ 50.873507][ T5927] do_syscall_64+0x115/0x870 [ 50.874970][ T5927] ? clear_bhb_loop+0x40/0x90 [ 50.876449][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.878335][ T5927] RIP: 0033:0x7fc2ea79de99 [ 50.879593][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.885419][ T5927] RSP: 002b:00007fc2eb731028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.887825][ T5927] RAX: ffffffffffffffda RBX: 00007fc2eaa25fa0 RCX: 00007fc2ea79de99 [ 50.890316][ T5927] RDX: 000000000000000d RSI: 0000200000000700 RDI: 0000000000000003 [ 50.892709][ T5927] RBP: 00007fc2ea833eaf R08: 0000000000000000 R09: 0000000000000000 [ 50.895138][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.897528][ T5927] R13: 00007fc2eaa26038 R14: 00007fc2eaa25fa0 R15: 00007ffe6f40c308 [ 50.899988][ T5927] [ 50.900936][ T5927] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 50.903166][ T5927] CPU: 3 UID: 0 PID: 5927 Comm: syz.1.12 Tainted: G L syzkaller #0 PREEMPT(full) [ 50.906339][ T5927] Tainted: [L]=SOFTLOCKUP [ 50.907660][ T5927] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 50.910686][ T5927] Call Trace: [ 50.911690][ T5927] [ 50.912611][ T5927] dump_stack_lvl+0x100/0x190 [ 50.914082][ T5927] vpanic+0x552/0x970 [ 50.915318][ T5927] ? __pfx_vpanic+0x10/0x10 [ 50.916697][ T5927] panic+0xd1/0xe0 [ 50.917837][ T5927] ? __pfx_panic+0x10/0x10 [ 50.919202][ T5927] check_panic_on_warn.cold+0x19/0x34 [ 50.920839][ T5927] ? drm_mm_takedown+0x62/0x280 [ 50.922325][ T5927] __warn.cold+0x191/0x318 [ 50.923712][ T5927] __report_bug+0x30f/0x440 [ 50.925120][ T5927] ? drm_mm_takedown+0x62/0x280 [ 50.926610][ T5927] ? __pfx___report_bug+0x10/0x10 [ 50.928139][ T5927] ? device_remove+0xcb/0x180 [ 50.929707][ T5927] ? device_release_driver_internal+0x44e/0x620 [ 50.931569][ T5927] ? unbind_store+0xf8/0x110 [ 50.932999][ T5927] ? drm_mm_takedown+0x5b/0x280 [ 50.934525][ T5927] report_bug_entry+0xe1/0x290 [ 50.935988][ T5927] ? drm_mm_takedown+0x62/0x280 [ 50.937483][ T5927] handle_bug+0x1cd/0x2a0 [ 50.938792][ T5927] exc_invalid_op+0x17/0x50 [ 50.940159][ T5927] asm_exc_invalid_op+0x1a/0x20 [ 50.941606][ T5927] RIP: 0010:drm_mm_takedown+0x62/0x280 [ 50.943234][ T5927] Code: 8b 43 38 48 39 c5 75 16 e8 fb d3 44 fc 48 83 c4 08 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8 e5 d3 44 fc 48 8d 3d 2e 7d 68 0b <67> 48 0f b9 3a 48 c7 c0 e0 e3 46 8e 48 ba 00 00 00 00 00 fc ff df [ 50.948841][ T5927] RSP: 0018:ffffc900044a7858 EFLAGS: 00010246 [ 50.950647][ T5927] RAX: 0000000000080000 RBX: ffff8880276b9c68 RCX: ffffc900072a2000 [ 50.953014][ T5927] RDX: 0000000000080000 RSI: ffffffff85c588bb RDI: ffffffff912e05f0 [ 50.955371][ T5927] RBP: ffff8880276b9ca0 R08: 0000000000000007 R09: 0000000000000000 [ 50.957738][ T5927] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888027940f80 [ 50.960065][ T5927] R13: ffff888027940f98 R14: ffffffff85c465c0 R15: 0000000000000000 [ 50.962373][ T5927] ? __pfx_drm_gem_init_release+0x10/0x10 [ 50.964077][ T5927] ? drm_mm_takedown+0x5b/0x280 [ 50.965544][ T5927] ? drm_mm_takedown+0x5b/0x280 [ 50.966973][ T5927] ? __pfx_drm_gem_init_release+0x10/0x10 [ 50.968662][ T5927] drm_managed_release+0x1bb/0x540 [ 50.970227][ T5927] ? __pfx_virtio_gpu_release+0x10/0x10 [ 50.971892][ T5927] drm_dev_put.part.0+0xca/0x140 [ 50.973411][ T5927] drm_dev_put+0x1f/0x30 [ 50.974668][ T5927] virtio_dev_remove+0xb8/0x170 [ 50.976120][ T5927] ? __pfx_virtio_dev_remove+0x10/0x10 [ 50.977732][ T5927] device_remove+0xcb/0x180 [ 50.979122][ T5927] device_release_driver_internal+0x44e/0x620 [ 50.980904][ T5927] bus_remove_device+0x2bc/0x560 [ 50.982355][ T5927] ? __pfx_bus_remove_device+0x10/0x10 [ 50.983921][ T5927] ? __pfx_device_remove_attrs+0x10/0x10 [ 50.985534][ T5927] device_del+0x376/0x9b0 [ 50.986806][ T5927] ? __pfx_device_del+0x10/0x10 [ 50.988236][ T5927] ? __pfx___might_resched+0x10/0x10 [ 50.989792][ T5927] ? __pfx_pci_device_is_present+0x10/0x10 [ 50.991561][ T5927] device_unregister+0x1d/0xe0 [ 50.992991][ T5927] unregister_virtio_device+0x39/0x60 [ 50.994591][ T5927] virtio_pci_remove+0x7c/0x110 [ 50.996040][ T5927] pci_device_remove+0xb2/0x1d0 [ 50.997466][ T5927] ? __pfx_pci_device_remove+0x10/0x10 [ 50.999101][ T5927] device_remove+0xcb/0x180 [ 51.000423][ T5927] device_release_driver_internal+0x44e/0x620 [ 51.002210][ T5927] unbind_store+0xf8/0x110 [ 51.003568][ T5927] ? __pfx_unbind_store+0x10/0x10 [ 51.005070][ T5927] drv_attr_store+0x74/0xb0 [ 51.006401][ T5927] ? __pfx_drv_attr_store+0x10/0x10 [ 51.007915][ T5927] sysfs_kf_write+0xf2/0x150 [ 51.009311][ T5927] kernfs_fop_write_iter+0x3e0/0x5f0 [ 51.010892][ T5927] ? __pfx_sysfs_kf_write+0x10/0x10 [ 51.012442][ T5927] vfs_write+0x6ac/0x1050 [ 51.013741][ T5927] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 51.015473][ T5927] ? __pfx_vfs_write+0x10/0x10 [ 51.016902][ T5927] ksys_write+0x12a/0x250 [ 51.018215][ T5927] ? __pfx_ksys_write+0x10/0x10 [ 51.019737][ T5927] do_syscall_64+0x115/0x870 [ 51.021173][ T5927] ? clear_bhb_loop+0x40/0x90 [ 51.022624][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.024379][ T5927] RIP: 0033:0x7fc2ea79de99 [ 51.025698][ T5927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.031151][ T5927] RSP: 002b:00007fc2eb731028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 51.033608][ T5927] RAX: ffffffffffffffda RBX: 00007fc2eaa25fa0 RCX: 00007fc2ea79de99 [ 51.035908][ T5927] RDX: 000000000000000d RSI: 0000200000000700 RDI: 0000000000000003 [ 51.038230][ T5927] RBP: 00007fc2ea833eaf R08: 0000000000000000 R09: 0000000000000000 [ 51.040599][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.042966][ T5927] R13: 00007fc2eaa26038 R14: 00007fc2eaa25fa0 R15: 00007ffe6f40c308 [ 51.045334][ T5927] [ 51.046843][ T5927] Kernel Offset: disabled [ 51.048159][ T5927] Rebooting in 86400 seconds..