last executing test programs: 3.385859065s ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x55db9d9df0f8a7f1, 0x0, 0x0, 0x0, {r0}}, 0x58) 3.377115764s ago: executing program 2 (id=3): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') read$FUSE(r1, &(0x7f0000000880)={0x2020}, 0x2020) writev(r1, &(0x7f00000006c0)=[{&(0x7f00000004c0)='\n', 0x1}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f00000038c0)={0x360, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa598}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90b}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5ee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe5}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x77ca}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4fd40c2f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xde1, @mcast2, 0x9}}}}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x806d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc8db}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) (async) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480), 0xc, &(0x7f00000005c0)={&(0x7f00000038c0)={0x360, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa598}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90b}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5ee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe5}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x77ca}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x28}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4fd40c2f}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @mcast1, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xde1, @mcast2, 0x9}}}}]}, @TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x806d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc8db}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}]}, 0x360}, 0x1, 0x0, 0x0, 0x20008000}, 0x4010) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="31832abd009643ded757806b89eadf2894b3c4eccfd5596607348b02ce6c392c92ccc59c12da7e5ca3c9742eb0b31d233e0b8ed9c3fa921148fd7426d53f5e6100193e25f7ca77c019fb6bd9abc1b30b18996cca"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="31832abd009643ded757806b89eadf2894b3c4eccfd5596607348b02ce6c392c92ccc59c12da7e5ca3c9742eb0b31d233e0b8ed9c3fa921148fd7426d53f5e6100193e25f7ca77c019fb6bd9abc1b30b18996cca"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4886) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xa0}}, 0x84) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xa0}}, 0x84) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000001c0)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x2, 0x0, 0x0}) setsockopt$inet6_opts(r7, 0x29, 0x40, &(0x7f00000001c0)=ANY=[], 0xd0060) recvmsg(r5, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="6a0f", 0x2}], 0x1}, 0x41) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1}, 0x40000160) (async) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/247, 0xf7}], 0x1}, 0x40000160) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) sendmsg$inet(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000000200)="6f3ca0de8049db57f180c6d95cb8a4ef69d4e14467775682fced1a231d33c551adfbb3f9fd7f54e22bfe70e23ae1a08f7938ae5160e325df7d5176bed6a9b30eb237ff570e37d2dea20f20af38c0a45aa557783ac9a6e7e8cb8dd31a", 0x5c}], 0x2}, 0x4000804) (async) sendmsg$inet(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f00000028c0)="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", 0x1000}, {&(0x7f0000000200)="6f3ca0de8049db57f180c6d95cb8a4ef69d4e14467775682fced1a231d33c551adfbb3f9fd7f54e22bfe70e23ae1a08f7938ae5160e325df7d5176bed6a9b30eb237ff570e37d2dea20f20af38c0a45aa557783ac9a6e7e8cb8dd31a", 0x5c}], 0x2}, 0x4000804) 3.323583614s ago: executing program 1 (id=5): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x0, 0xcf, 0x2, 0x81, 0x3, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x5, 0x38, 0x1, 0x78, 0x7, 0x9}, [{0x6474e551, 0x2, 0x2007, 0x5, 0x7fff, 0x7980, 0x0, 0x3}]}, 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000008c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="20080400000404f608ba"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.307288781s ago: executing program 2 (id=7): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4201"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 3.231460597s ago: executing program 2 (id=9): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4a1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1f, 0x0, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00002bb000/0x3000)=nil, 0x3000}, 0x6}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000400)=[@cpuid={0x64, 0x18, {0x4185, 0x5}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x10000, 0xfffffffffffffff8, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xb1, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xc02a, 0x3, 0xffff}}, @enable_nested={0x12c, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0xddde4000, 0x8269}}, @code={0xa, 0x65, {"66ba4300ed09380f38f17f9448b80c000000000000000f23c00f21f83503000b000f23f8450f38041326660fc7b2fdff00003e26f346de32470f01cff3450fc7b4c520000000b9800000c00f3235002000000f30"}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x3a5, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x63, 0x2, 0x5, 0x2}}, @rdmsr={0x66, 0x18, {0xb55}}, @nested_load_syzos={0x136, 0xfa, {0x2, 0x8, [@wrmsr={0x65, 0x20, {0xb5d, 0x1}}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x87, 0x939f, 0x7f, 0x3}}, @nested_load_code={0x12e, 0x62, {0x1, "c482493a9000000080b920080000b800980000ba000000000f306526f20f126f46410f07f3f343d8d7660f3880530f460f08440f0171d7b9800000c00f3235004000000f303e36f0f619"}}, @wrmsr={0x65, 0x20, {0x95e, 0xa88}}]}}, @wrmsr={0x65, 0x20, {0xaa3, 0x8}}, @nested_load_syzos={0x136, 0x50, {0x3, 0x8, [@nested_amd_set_intercept={0x181, 0x30, {0x1, 0x1ff, 0x8001, 0x1}}]}}, @nested_vmresume={0x130, 0x18, 0x3}], 0x387}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000002c0)={0xc7, 0x0, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r4, 0x4010e501, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x14e) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=J00000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="8879705f69643d000000", @ANYRESDEC=0x0]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r7) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="9b0f2bbd70000a00df25010000000400028004000300"], 0x1c}, 0x1, 0x0, 0x0, 0x4851}, 0x4040814) read$FUSE(r6, &(0x7f0000006340)={0x2020}, 0x2020) unshare(0x62040200) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000001c0)={{&(0x7f00003f6000/0x1000)=nil, 0x1000}}) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x20, 0xfb, 0x6}]}) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 3.165726085s ago: executing program 0 (id=12): socket$netlink(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x8002) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1e, 0x0, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/218, 0xffffffffffffff26}], 0x3c}, 0x3}], 0x1, 0x2102, 0x0) r3 = dup2(r0, r0) close(r3) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xd0da, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) socket$unix(0x1, 0x1, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@rnullb, 0xffffffffffffffff, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000040)={0x2812, 0x1}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r4, 0x4) landlock_restrict_self(r6, 0x0) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) read(r5, 0x0, 0xffffffb0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') landlock_restrict_self(r5, 0x0) 3.111403135s ago: executing program 3 (id=13): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x8000, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0x91a47000) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20000084}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2282, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x45, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x48b, 0x0, 0x2}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd1000, 0x0, 0xf4, 0x2, 0xfd, 0xd4, 0x1, 0x0, 0x4, 0x3, 0x6}, {0x10102006, 0xffff1000, 0xd, 0x9, 0x7, 0x3, 0x6, 0x5, 0x5, 0xf, 0x3, 0xca}, {0x6000, 0xeeee0000, 0x3, 0xfe, 0x6, 0x7, 0x10, 0x21, 0xc, 0x0, 0x6, 0x5}, {0x8000000, 0x8000000, 0xd, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x2, 0x0, 0x9}, {0xffff1000, 0x4000, 0x9, 0x82, 0x3, 0x7, 0x9, 0x5, 0x7, 0x14, 0x2e, 0x4b}, {0x2, 0x4, 0x0, 0x26, 0x3, 0x6e, 0x1, 0xff, 0x3, 0x80, 0x1, 0xfc}, {0xdddd1000, 0x6000, 0xb, 0xdd, 0x3, 0x0, 0x0, 0x7, 0x5, 0x81, 0x0, 0x78}, {0xffff1000, 0x2, 0xd, 0x5, 0x3, 0x3, 0xa, 0xfd, 0x5, 0x6, 0x2, 0x7}, {0x3000, 0x5}, {0xffffffff, 0x9}, 0xc000002b, 0x0, 0xdddd1000, 0x22a0, 0x9, 0x0, 0xe6e70c00, [0x1, 0x5, 0x0, 0xc5]}) madvise(&(0x7f000094b000/0x3000)=nil, 0x3000, 0x16) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r8, 0x0, &(0x7f0000000c00)=0xfffffffffffffecb) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.109466464s ago: executing program 0 (id=14): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40101, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000340)="b87a0f8ec00f3066b9e30b000066b82d530000660fc7340f30c14202810f20e06635100000000f22e0670f001bf3ba2d717d0f01f5f30f090f00dd", 0x3b}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x218, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 3.108811394s ago: executing program 0 (id=15): alarm(0xfffffffffffffa7c) alarm(0x800) alarm(0xf) alarm(0x6) alarm(0x1) alarm(0xfffffffffffffffb) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) alarm(0xfffffffffffffff8) alarm(0xfffffffffffffff8) alarm(0x8000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x80280) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000000c0)={0x8001, 0x5, 0x4, 0xffffef60}) alarm(0x6) alarm(0x9) alarm(0x1) alarm(0x800) alarm(0x65) alarm(0x1) alarm(0x8) alarm(0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000100)=0xfff, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x4000}) alarm(0x0) alarm(0xffffffffffffffff) alarm(0x7) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000180)) alarm(0x8) socket$igmp(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) 3.079486739s ago: executing program 0 (id=16): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = openat(0xffffffffffffff9c, 0x0, 0x410005, 0x80) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="81e331e8ed94b4eeb6fb7f454c4603090700810000000000000402003e00f9ffffffbf0300000000000040000000000000000301000000000000350d000005003800020078000700000051e57464050000000100000000000000bb8d0000000000002d0c000000000000af000000000000000300000000000000080000000000000001000000b8a10000070000000002000000000000000500"/176], 0xb0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x3) close(r0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) r5 = getpgrp(0x0) process_vm_readv(r5, &(0x7f0000002e40)=[{&(0x7f0000002b80)=""/189, 0xbd}], 0x1, &(0x7f0000003380)=[{&(0x7f0000002e80)=""/39, 0xea7}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) fcntl$addseals(r4, 0x409, 0x8) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x80d0}, 0x20005800) lseek(r0, 0x8, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000080)) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.052529094s ago: executing program 0 (id=17): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2, 0x100, 0x6) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2046) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) chdir(&(0x7f00000001c0)='./bus\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x400c630f}], 0x0, 0x0, 0x0}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1f, 0x0, &(0x7f0000000000)) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x10001) write$hidraw(r4, &(0x7f0000000040)="43618e1a87ea4588d8244225b0", 0xd) 2.779576303s ago: executing program 3 (id=18): unshare(0x60000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000110000000001", @ANYRES16=r1], 0xfdef) 2.749242078s ago: executing program 3 (id=19): syz_usb_connect(0x2, 0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000038b51140866b11c2ca2501020301090232000104000002090479030208066249090506004000fd20080725018001060009050e10"], 0x0) (async) r0 = syz_usb_connect(0x2, 0x44, &(0x7f0000000800)=ANY=[@ANYBLOB="1201000038b51140866b11c2ca2501020301090232000104000002090479030208066249090506004000fd20080725018001060009050e10"], 0x0) syz_usb_disconnect(r0) 2.415414226s ago: executing program 2 (id=20): mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) (async) r0 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x3000000, 0x13, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="f1e160488a3d4801c6a540cdaea897d07b42b6279805d525611fdb84b3397518f116a9293c7c78d616a435ee2ffa6b72ec1f4aa319f81a952c481612470f07da12431dd6373f4880", 0x0, 0x48) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r0, 0x20, &(0x7f0000000000)="f1e160488a3d4801c6a540cdaea897d07b42b6279805d525611fdb84b3397518f116a9293c7c78d616a435ee2ffa6b72ec1f4aa319f81a952c481612470f07da12431dd6373f4880", 0x0, 0x48) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0xae, 0x800, 0x1}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000100)=0x10, 0x800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x99, 0xff, 0x9, 0x79, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x1, 0x101}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000200)={r2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000240)={0x1, 0x0, {[0x3, 0x8000, 0x5, 0x8, 0x4, 0x7, 0x800, 0xc00000]}}) pwritev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="e681faa64bbb3fb47b6ead5155d8ee4fd4af8a8ac182d6e2b2ee684a6537d1fab3f40141619933beb1fe6074350316d65cf6146ab11fa876451ae3aca8c20c4d746b9523ac571fb705a6", 0x4a}, {&(0x7f0000000340)="bc7a1be3af3394c96241d5c2d602237679850bac50e1ae5ccfbd4b5d8c11e0a5db5406962b582ca3a34f2c25f25c3d625efa1d9a34a4ee04f2cd0fc9e0574d7628169cb9d0f70cc7c9aef2b7a1fc4720cdd7a9c6b69f9f09964ca1fbc1a4124a6f3f3a668dadc048445f086d2cc19b6008dfac68bdb6502555299e191ec220fca7db1a467183ce2c150a4ce67da91cb55b", 0x91}], 0x2, 0x6, 0x4) (async) pwritev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="e681faa64bbb3fb47b6ead5155d8ee4fd4af8a8ac182d6e2b2ee684a6537d1fab3f40141619933beb1fe6074350316d65cf6146ab11fa876451ae3aca8c20c4d746b9523ac571fb705a6", 0x4a}, {&(0x7f0000000340)="bc7a1be3af3394c96241d5c2d602237679850bac50e1ae5ccfbd4b5d8c11e0a5db5406962b582ca3a34f2c25f25c3d625efa1d9a34a4ee04f2cd0fc9e0574d7628169cb9d0f70cc7c9aef2b7a1fc4720cdd7a9c6b69f9f09964ca1fbc1a4124a6f3f3a668dadc048445f086d2cc19b6008dfac68bdb6502555299e191ec220fca7db1a467183ce2c150a4ce67da91cb55b", 0x91}], 0x2, 0x6, 0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x4010, r1, 0xaea30000) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000440)="6e4a8b1b48c285f79ec8c5e6fc3923ae3746ba6bf9e03134", 0x0, 0x18) socket(0x23, 0x800, 0x8) r4 = getuid() quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, r4, &(0x7f0000000480)='./file0\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/zoneinfo\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000500)='+\x00', &(0x7f0000000540)="30d1ad32b0382aad34159a08d6737879658e560f13165552cf81fd82969b596056285ee2e9", 0x25) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x7) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x7) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@textreal={0x8, &(0x7f0000000580)="26f76e0b0f38c80f0fc7af0060640f01cb0f01b1ebf2f3ad64660f38f576a266b9800000c00f326635000800000f30f08262771d0f7814", 0x37}], 0x1, 0x8, &(0x7f0000000600), 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000640)={0x4e00000000000000, 0x10000, 0x443, 0xc, 0x9}) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000880)={0x0, &(0x7f0000000680)=[@wrmsr={0x65, 0x20, {0x204, 0x4}}, @set_irq_handler={0xc8, 0x20, {0x57, 0x1}}, @rdmsr={0x66, 0x18, {0x337}}, @set_irq_handler={0xc8, 0x20, {0x36, 0x1}}, @in_dx={0x69, 0x20, {0x1b2e, 0x3}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16=0x2, 0x4, 0x712, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x15, 0x4, 0x1, 0x7}}, @set_irq_handler={0xc8, 0x20, {0x31}}, @cpuid={0x64, 0x18, {0x40, 0x1}}, @code={0xa, 0x58, {"c461ad64ca468bb6660000000f35f3470f0966b888008ed82e420f01cf0f20c035000000800f22c0653664650f789664b44c74b9800000c00f3235008000000f3066ba210066ed"}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x2}], 0x1c8}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) mmap$KVM_VCPU(&(0x7f0000fed000/0x1000)=nil, r9, 0x300001c, 0x80010, r7, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000fed000/0x1000)=nil, r9, 0x300001c, 0x80010, r7, 0x0) setreuid(r4, r4) (async) setreuid(r4, r4) r10 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f00000008c0)={0x7, 0x278c}) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000900)={0x10003, 0x1, 0x1, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x2, r10}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000009c0)={{0xd000, 0x33306000, 0xa, 0x7, 0x0, 0x3d, 0xfb, 0xb, 0x4, 0x40, 0x9, 0x50}, {0xeeee0000, 0xeeee8000, 0xb, 0x5, 0x10, 0x8, 0x3, 0x4, 0x5, 0xb, 0x1, 0x6}, {0x70000, 0x1000, 0x8, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x1, 0xe, 0x1}, {0x5000, 0x0, 0x3, 0x7, 0xc0, 0x5, 0x6, 0x0, 0x8, 0x4, 0x8, 0x50}, {0x0, 0x70000, 0x10, 0xff, 0x7, 0x1, 0xcd, 0x3, 0xff, 0x3, 0x1, 0xc}, {0x30000, 0x58000, 0x3, 0x9, 0x7, 0x4, 0x5c, 0x2, 0xfe, 0x4, 0x4, 0x6}, {0x54000, 0x80a0000, 0xa, 0xb8, 0x1, 0x6, 0x5, 0x3, 0x1, 0x6, 0x8, 0x4}, {0x41000, 0xd000, 0xc, 0x40, 0x4, 0x1, 0x0, 0x2, 0xce, 0x1, 0x60, 0xfd}, {0xffdf1000, 0xfeff}, {0x60000, 0x9}, 0xa0000024, 0x0, 0xc000, 0x120, 0x4, 0x2001, 0xffff1000, [0x6, 0x0, 0xfffffffffffffffd, 0x40]}) (async) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000009c0)={{0xd000, 0x33306000, 0xa, 0x7, 0x0, 0x3d, 0xfb, 0xb, 0x4, 0x40, 0x9, 0x50}, {0xeeee0000, 0xeeee8000, 0xb, 0x5, 0x10, 0x8, 0x3, 0x4, 0x5, 0xb, 0x1, 0x6}, {0x70000, 0x1000, 0x8, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x1, 0xe, 0x1}, {0x5000, 0x0, 0x3, 0x7, 0xc0, 0x5, 0x6, 0x0, 0x8, 0x4, 0x8, 0x50}, {0x0, 0x70000, 0x10, 0xff, 0x7, 0x1, 0xcd, 0x3, 0xff, 0x3, 0x1, 0xc}, {0x30000, 0x58000, 0x3, 0x9, 0x7, 0x4, 0x5c, 0x2, 0xfe, 0x4, 0x4, 0x6}, {0x54000, 0x80a0000, 0xa, 0xb8, 0x1, 0x6, 0x5, 0x3, 0x1, 0x6, 0x8, 0x4}, {0x41000, 0xd000, 0xc, 0x40, 0x4, 0x1, 0x0, 0x2, 0xce, 0x1, 0x60, 0xfd}, {0xffdf1000, 0xfeff}, {0x60000, 0x9}, 0xa0000024, 0x0, 0xc000, 0x120, 0x4, 0x2001, 0xffff1000, [0x6, 0x0, 0xfffffffffffffffd, 0x40]}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x400180, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r11, 0xc004ae0a, &(0x7f0000000b40)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r11, 0xc004ae0a, &(0x7f0000000b40)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.351442784s ago: executing program 2 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xc2, 0x5, 0x8, 0x0, 0x4ee2, 0x8, 0x80, 0xdf, 0x13, 0x2, 0xa, 0x0, 0x0, 0xc1, 0x1, 0xfe, 0x6, 0x5, 0x2, '\x00', 0xa3, 0x7}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, &(0x7f0000000380)=[@flags={0x3, 0x128bc4}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2d01, 0x0) socket$netlink(0x10, 0x3, 0x5) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000003c0)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x0, 0x2c, 0x0, @private2, @mcast2}}}}}, 0x3a) syz_usb_connect$midi(0x0, 0x59, &(0x7f0000000000)=ANY=[], &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0}) r6 = syz_usb_connect$cdc_ecm(0x5, 0x78, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0x1, 0x4, 0x40, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x0, "83506d"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x400, 0x3, 0x6}, [@ncm={0x6, 0x24, 0x1a, 0x800, 0x38}, @obex={0x5, 0x24, 0x15, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x5, 0x1, 0x9}, @dmm={0x7, 0x24, 0x14, 0x7, 0x8001}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x6, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x0, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x2, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x398, 0x8, 0x3a, 0x1, 0x10, 0x6}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xd, "d7460390dbf47995d4d751f755264b03"}]}, 0x6, [{0xa7, &(0x7f0000000100)=@string={0xa7, 0x3, "cccbb69b41db02fcd36c0dca58f7c7f1e8d2fe3780eedbbdf4045b2d30732ffae63e9ec6d51cf4945ff3a15866f857476d6cf87df14e68b28ffd910cb9540c4ac4941f0c4cbe5b3b91156c3372ce03df5a0848e3f047171704bfb82c2e061919a1950621c6987aa694f0b714efa94afc2bbd4fc67f9fe45f0f351505fc28a003946a7b6611258d69f9f7828ea389218978cd7e3a5ba11359d58c32863868cf8de82f1b6d96"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1401}}, {0x1d, &(0x7f0000000240)=@string={0x1d, 0x3, "a7a6abd25501a45891e094c2159591e30f6f38d3e4fe180e0ea129"}}, {0x6e, &(0x7f0000000280)=@string={0x6e, 0x3, "a33878019c4ac1c8c14c5cef43fe0bf083f9abc2cb8cb1de9a68f75e64e0c08078cff920edfd81ed3d46ecac3f2ba021a1ceb463a170859851d2b085d6af3abde1b583018d464e7147b9daa1ea7f0aac9ba2b568bc0d5f7527c2f17f3bb834d2fcdf6565976b240aa8ce39e3"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_ep_write(r6, 0x8, 0x81, &(0x7f00000003c0)="0acacdee29318fdb6c7bdf6d0ad91b35513a6b4e5e1fcb4c59cad900f4cf1618099d6a0ea4423b73c933d1ca4168104cfa8cd97a2ccc8bc4169e6b8af9ccc9944fe9c39c960c731025cecf40b44d869cb2bfa5de5caffba801f8b61cae63ee3fc08d2f1ed3cccc51c5b3cd0b9ce3a7172c3f2f0381b428e4f8809045cf8d9a29fc") 1.709416256s ago: executing program 1 (id=22): r0 = socket(0x10, 0x803, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x88ce359bdb0818bc, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b", @ANYRES64], 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0xf) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r4, &(0x7f0000000400)=""/19, 0x13) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x21, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000011c0), r5) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000001280)={0x0, 0x324, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r6, 0x301, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40004) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0x8001) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x48b}, {{0x0, 0x0, 0x0}, 0xb22d}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000001a80)=""/264, 0x108}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000280)=""/155, 0x9b}], 0x8}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2100, 0x0) 1.525567472s ago: executing program 3 (id=23): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000000)={&(0x7f00000001c0)=""/154, 0x9a, 0x101, 0x7ad}) mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000480)={[{@gid}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0xfffd, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) recvfrom(r0, &(0x7f00000004c0)=""/206, 0xce, 0x10160, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.467355851s ago: executing program 3 (id=24): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x7, @empty}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x7, @empty}, 0x1c) listen(r0, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r1, 0x112, 0x3, 0x0, 0x0) (async) getsockopt$bt_hci(r1, 0x112, 0x3, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r3, &(0x7f00000005c0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x2000000, 0x5e, 0xffff0000, 0x0, 0x8, 0x0, 0x603d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0xda2], [0x10, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x4], [0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x0, 0x80000000], [0x10003, 0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x758, 0x0, 0x0, 0x0, 0x20000005, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = dup(r3) read$FUSE(r4, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x692940, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x4) (async) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) getpid() (async) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) (async) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x2}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) r9 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') (async) keyctl$restrict_keyring(0xa, r9, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') r10 = ioctl$USERFAULTFD_IOC_NEW(r4, 0xaa00) ioctl$OCFS2_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000100)={0x1, 0x1, 0x7, 0x3, 0x2, 0x8}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x400000000000247, 0x0) close(0xffffffffffffffff) 1.369220523s ago: executing program 3 (id=25): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000840)=0x3) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000240)='\x00') prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r4, 0x4068aea3, &(0x7f0000000000)={0x79}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) read$hiddev(r2, &(0x7f0000000280)=""/52, 0x34) 0s ago: executing program 0 (id=26): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, 0x0}, 0x68) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x20800, 0x38) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc0386723, &(0x7f00000000c0)) connect$inet(r0, &(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) (async) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000005000/0x3000)=nil, &(0x7f0000fed000/0x13000)=nil, 0x0}, 0x68) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) (async) openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x20800, 0x38) (async) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc0386723, &(0x7f00000000c0)) (async) connect$inet(r0, &(0x7f0000000740)={0x2, 0x4e24, @local}, 0x10) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts. [ 25.471759][ T36] audit: type=1400 audit(1773213637.300:64): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.475520][ T282] cgroup: Unknown subsys name 'net' [ 25.494834][ T36] audit: type=1400 audit(1773213637.300:65): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.522497][ T36] audit: type=1400 audit(1773213637.330:66): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.522976][ T282] cgroup: Unknown subsys name 'devices' [ 25.709776][ T282] cgroup: Unknown subsys name 'hugetlb' [ 25.715461][ T282] cgroup: Unknown subsys name 'rlimit' [ 25.831789][ T36] audit: type=1400 audit(1773213637.660:67): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.855358][ T36] audit: type=1400 audit(1773213637.660:68): avc: denied { mounton } for pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.880375][ T36] audit: type=1400 audit(1773213637.660:69): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.900706][ T284] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.912332][ T36] audit: type=1400 audit(1773213637.750:70): avc: denied { relabelto } for pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.937936][ T36] audit: type=1400 audit(1773213637.750:71): avc: denied { write } for pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.966738][ T36] audit: type=1400 audit(1773213637.790:72): avc: denied { read } for pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.968137][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.992584][ T36] audit: type=1400 audit(1773213637.790:73): avc: denied { open } for pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.869006][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.876628][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.884076][ T292] bridge_slave_0: entered allmulticast mode [ 26.890482][ T292] bridge_slave_0: entered promiscuous mode [ 26.905913][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.913067][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.920280][ T292] bridge_slave_1: entered allmulticast mode [ 26.926548][ T292] bridge_slave_1: entered promiscuous mode [ 26.958453][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.965534][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.972729][ T290] bridge_slave_0: entered allmulticast mode [ 26.979308][ T290] bridge_slave_0: entered promiscuous mode [ 26.990476][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.997605][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.004710][ T290] bridge_slave_1: entered allmulticast mode [ 27.011232][ T290] bridge_slave_1: entered promiscuous mode [ 27.032200][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.039444][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.046647][ T291] bridge_slave_0: entered allmulticast mode [ 27.053242][ T291] bridge_slave_0: entered promiscuous mode [ 27.068557][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.075639][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.082842][ T291] bridge_slave_1: entered allmulticast mode [ 27.089165][ T291] bridge_slave_1: entered promiscuous mode [ 27.140226][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.147337][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.154424][ T289] bridge_slave_0: entered allmulticast mode [ 27.160941][ T289] bridge_slave_0: entered promiscuous mode [ 27.170031][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.177161][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.184333][ T289] bridge_slave_1: entered allmulticast mode [ 27.190706][ T289] bridge_slave_1: entered promiscuous mode [ 27.294889][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.302119][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.309603][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.316654][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.336582][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.343701][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.351113][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.358769][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.383919][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.391032][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.398375][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.405427][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.436521][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.443736][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.451177][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.458349][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.488143][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.495665][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.503642][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.511331][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.519163][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.526382][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.533804][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.541237][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.555918][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.563032][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.589158][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.596246][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.613143][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.620238][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.628115][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.635167][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.645373][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.652458][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.664755][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.672276][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.685133][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.692248][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.700315][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.707502][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.773790][ T289] veth0_vlan: entered promiscuous mode [ 27.786365][ T291] veth0_vlan: entered promiscuous mode [ 27.792932][ T292] veth0_vlan: entered promiscuous mode [ 27.811609][ T289] veth1_macvtap: entered promiscuous mode [ 27.820893][ T290] veth0_vlan: entered promiscuous mode [ 27.828524][ T291] veth1_macvtap: entered promiscuous mode [ 27.860603][ T292] veth1_macvtap: entered promiscuous mode [ 27.874716][ T290] veth1_macvtap: entered promiscuous mode [ 27.903763][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.956843][ T333] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.001367][ T341] Zero length message leads to an empty skb [ 28.024645][ T344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 28.115613][ T359] fuse: Bad value for 'rootmode' [ 28.194677][ T364] usb usb8: usbfs: process 364 (syz.3.11) did not claim interface 0 before use [ 28.317177][ T331] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.338446][ T378] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 28.345627][ T378] overlayfs: failed to set xattr on upper [ 28.358358][ T378] overlayfs: ...falling back to redirect_dir=nofollow. [ 28.365655][ T378] overlayfs: ...falling back to index=off. [ 28.372993][ T378] overlayfs: ...falling back to uuid=null. [ 28.401707][ T378] SELinux: failed to load policy [ 28.478983][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.490041][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.500123][ T331] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 28.509393][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.520236][ T331] usb 2-1: config 0 descriptor?? [ 28.636766][ T386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.646061][ T386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.897147][ T46] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 28.929579][ T349] process 'syz.1.5' launched './file0' with NULL argv: empty string added [ 28.938526][ T349] Invalid argument reading file caps for ./file0 [ 29.048997][ T46] usb 4-1: config 4 has an invalid interface number: 121 but max is 0 [ 29.057563][ T46] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 29.068309][ T46] usb 4-1: config 4 has no interface number 0 [ 29.074638][ T46] usb 4-1: config 4 interface 121 altsetting 3 endpoint 0xE has invalid wMaxPacketSize 0 [ 29.084911][ T46] usb 4-1: config 4 interface 121 has no altsetting 0 [ 29.093744][ T46] usb 4-1: New USB device found, idVendor=6b86, idProduct=c211, bcdDevice=25.ca [ 29.103367][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.111883][ T46] usb 4-1: Product: syz [ 29.116292][ T46] usb 4-1: Manufacturer: syz [ 29.121473][ T46] usb 4-1: SerialNumber: syz [ 29.125931][ T393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 29.146247][ T331] usbhid 2-1:0.0: can't add hid device: -71 [ 29.152517][ T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 29.161554][ T331] usb 2-1: USB disconnect, device number 2 [ 29.336887][ T46] usb 4-1: USB disconnect, device number 2 [ 29.397307][ T330] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 29.527148][ T330] usb 3-1: device descriptor read/64, error -71 [ 29.777505][ T330] usb 3-1: device descriptor read/64, error -71 [ 29.866532][ T401] input: syz0 as /devices/virtual/input/input4 [ 29.907115][ T46] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 30.027175][ T330] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.088151][ T46] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 30.099272][ T46] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 30.110870][ T46] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 30.122408][ T46] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 30.132295][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.144710][ T397] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 30.167156][ T330] usb 3-1: device descriptor read/64, error -71 [ 30.237489][ T388] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.354681][ T397] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.361406][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 30.367354][ T46] usb 2-1: USB disconnect, device number 3 [ 30.398220][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.409259][ T330] usb 3-1: device descriptor read/64, error -71 [ 30.415540][ T388] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.424832][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.433636][ T388] usb 4-1: config 0 descriptor?? [ 30.517303][ T330] usb usb3-port1: attempt power cycle [ 30.642878][ T388] usbhid 4-1:0.0: can't add hid device: -71 [ 30.648941][ T388] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 30.657659][ T388] usb 4-1: USB disconnect, device number 3 [ 30.857195][ T330] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.878501][ T330] usb 3-1: device descriptor read/8, error -71 [ 31.008496][ T330] usb 3-1: device descriptor read/8, error -71 [ 31.077166][ T388] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.228375][ T388] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.239350][ T388] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 31.252294][ T330] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.259854][ T388] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 31.269036][ T388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.278167][ T388] usb 4-1: config 0 descriptor?? [ 31.298346][ T330] usb 3-1: device descriptor read/8, error -71 [ 31.345790][ T36] kauditd_printk_skb: 98 callbacks suppressed [ 31.345810][ T36] audit: type=1400 audit(1773213643.170:172): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 31.372279][ T36] audit: type=1400 audit(1773213643.180:173): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.373062][ T291] ------------[ cut here ]------------ [ 31.398177][ T291] WARNING: CPU: 1 PID: 291 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 31.406128][ T291] Modules linked in: [ 31.410208][ T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 b23d8e539197687e983ab2d539cc6949070356a5 [ 31.421983][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.432171][ T291] RIP: 0010:drop_nlink+0xce/0x110 [ 31.438128][ T291] Code: 04 00 00 be 08 00 00 00 e8 ef 16 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 48 d7 af 03 cc e8 92 28 96 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 31.457970][ T291] RSP: 0018:ffffc9000b66fc40 EFLAGS: 00010293 [ 31.464209][ T291] RAX: ffffffff81f179de RBX: ffff88812c4c8d00 RCX: ffff8881037eb900 [ 31.472314][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.480381][ T291] RBP: ffffc9000b66fc68 R08: 0000000000000003 R09: 0000000000000004 [ 31.488435][ T291] R10: dffffc0000000000 R11: fffff520016cdf80 R12: dffffc0000000000 [ 31.496569][ T291] R13: 1ffff110258991a9 R14: ffff88812c4c8d48 R15: 0000000000000000 [ 31.504612][ T291] FS: 000055557b9a9500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 31.513690][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.520379][ T291] CR2: 000055557b9d4988 CR3: 00000001300f8000 CR4: 00000000003526b0 [ 31.528417][ T291] Call Trace: [ 31.531720][ T291] [ 31.534658][ T291] simple_rmdir+0x153/0x260 [ 31.539222][ T291] vfs_rmdir+0x3e0/0x560 [ 31.543500][ T291] incfs_kill_sb+0x109/0x230 [ 31.548199][ T291] deactivate_locked_super+0xd8/0x2a0 [ 31.553613][ T291] deactivate_super+0xb8/0xe0 [ 31.558347][ T291] cleanup_mnt+0x406/0x4a0 [ 31.562832][ T291] __cleanup_mnt+0x1d/0x40 [ 31.567355][ T291] task_work_run+0x1e8/0x260 [ 31.571992][ T291] ? __cfi_task_work_run+0x10/0x10 [ 31.577167][ T291] ? __x64_sys_umount+0x12e/0x180 [ 31.582247][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.587696][ T291] ? __kasan_check_read+0x15/0x20 [ 31.592852][ T291] resume_user_mode_work+0x35/0x50 [ 31.598158][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 31.603665][ T291] do_syscall_64+0x63/0xf0 [ 31.608150][ T291] ? clear_bhb_loop+0x50/0xa0 [ 31.612964][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.618911][ T291] RIP: 0033:0x7ff2fd99d9d7 [ 31.623351][ T291] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.643038][ T291] RSP: 002b:00007fffab775428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.651532][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff2fd99d9d7 [ 31.659564][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffab7754e0 [ 31.667703][ T291] RBP: 00007fffab7754e0 R08: 00007fffab7764e0 R09: 00000000ffffffff [ 31.675714][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffab7765d0 [ 31.683962][ T291] R13: 00007ff2fda32050 R14: 00000000000071de R15: 00007fffab7776a0 [ 31.692118][ T291] [ 31.695161][ T291] ---[ end trace 0000000000000000 ]--- [ 31.700790][ T291] ================================================================== [ 31.708987][ T291] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 31.715294][ T291] Write of size 4 at addr 0000000000000168 by task syz-executor/291 [ 31.723311][ T291] [ 31.725162][ T388] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 31.725677][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G W syzkaller #0 b23d8e539197687e983ab2d539cc6949070356a5 [ 31.725779][ T291] Tainted: [W]=WARN [ 31.725806][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.725854][ T291] Call Trace: [ 31.725881][ T291] [ 31.725911][ T291] __dump_stack+0x21/0x30 [ 31.726005][ T291] dump_stack_lvl+0x140/0x1c0 [ 31.726090][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.726164][ T291] print_report+0x3d/0x70 [ 31.726217][ T291] kasan_report+0x162/0x1a0 [ 31.726269][ T291] ? ihold+0x24/0x70 [ 31.726350][ T291] ? _raw_spin_unlock+0x45/0x60 [ 31.726414][ T291] ? ihold+0x24/0x70 [ 31.726489][ T291] kasan_check_range+0x25a/0x2b0 [ 31.726542][ T291] __kasan_check_write+0x18/0x20 [ 31.726604][ T291] ihold+0x24/0x70 [ 31.726688][ T291] vfs_rmdir+0x26a/0x560 [ 31.726752][ T291] incfs_kill_sb+0x109/0x230 [ 31.726827][ T291] deactivate_locked_super+0xd8/0x2a0 [ 31.726890][ T291] deactivate_super+0xb8/0xe0 [ 31.726944][ T291] cleanup_mnt+0x406/0x4a0 [ 31.727028][ T291] __cleanup_mnt+0x1d/0x40 [ 31.727103][ T291] task_work_run+0x1e8/0x260 [ 31.727173][ T291] ? __cfi_task_work_run+0x10/0x10 [ 31.727263][ T291] ? __x64_sys_umount+0x12e/0x180 [ 31.727341][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 31.727411][ T291] ? __kasan_check_read+0x15/0x20 [ 31.727475][ T291] resume_user_mode_work+0x35/0x50 [ 31.727555][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 31.727639][ T291] do_syscall_64+0x63/0xf0 [ 31.727703][ T291] ? clear_bhb_loop+0x50/0xa0 [ 31.727769][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.727831][ T291] RIP: 0033:0x7ff2fd99d9d7 [ 31.727883][ T291] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 31.727934][ T291] RSP: 002b:00007fffab775428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 31.727998][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff2fd99d9d7 [ 31.728039][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffab7754e0 [ 31.728091][ T291] RBP: 00007fffab7754e0 R08: 00007fffab7764e0 R09: 00000000ffffffff [ 31.728133][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffab7765d0 [ 31.728167][ T291] R13: 00007ff2fda32050 R14: 00000000000071de R15: 00007fffab7776a0 [ 31.728206][ T291] [ 31.728227][ T291] ================================================================== [ 31.739659][ T330] usb 3-1: device descriptor read/8, error -71 [ 31.753668][ T291] Disabling lock debugging due to kernel taint [ 31.778337][ T388] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 31.782241][ T291] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 31.807320][ T36] audit: type=1400 audit(1773213643.630:174): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.807857][ T291] #PF: supervisor write access in kernel mode [ 31.807872][ T291] #PF: error_code(0x0002) - not-present page [ 31.812965][ T36] audit: type=1400 audit(1773213643.630:175): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.816573][ T291] PGD 800000010d3dd067 P4D 800000010d3dd067 PUD 0 [ 31.816606][ T291] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 31.823058][ T36] audit: type=1400 audit(1773213643.630:176): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.825670][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G B W syzkaller #0 b23d8e539197687e983ab2d539cc6949070356a5 [ 31.831805][ T36] audit: type=1400 audit(1773213643.630:177): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.835801][ T291] Tainted: [B]=BAD_PAGE, [W]=WARN [ 31.835811][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 31.835825][ T291] RIP: 0010:ihold+0x2a/0x70 [ 31.841727][ T36] audit: type=1400 audit(1773213643.630:178): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.844853][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d 1f 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 ac 0d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d [ 31.844875][ T291] RSP: 0018:ffffc9000b66fca0 EFLAGS: 00010246 [ 31.850123][ T36] audit: type=1400 audit(1773213643.630:179): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.855012][ T291] [ 31.855020][ T291] RAX: ffff8881037eb900 RBX: 0000000000000000 RCX: ffff8881037eb900 [ 31.855039][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.861321][ T36] audit: type=1400 audit(1773213643.630:180): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.865599][ T291] RBP: ffffc9000b66fcb0 R08: ffffffff88b8f947 R09: 1ffffffff1171f28 [ 31.865621][ T291] R10: dffffc0000000000 R11: fffffbfff1171f29 R12: ffff88812c4c8d0c [ 31.877777][ T330] usb usb3-port1: unable to enumerate USB device [ 31.881257][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 31.881277][ T291] FS: 000055557b9a9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 31.881299][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.144641][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (kworker/1:4) [ 32.150362][ T291] CR2: 0000000000000168 CR3: 00000001300f8000 CR4: 00000000003526b0 [ 32.328908][ T291] Call Trace: [ 32.332318][ T291] [ 32.335281][ T291] vfs_rmdir+0x26a/0x560 [ 32.339558][ T291] incfs_kill_sb+0x109/0x230 [ 32.344202][ T291] deactivate_locked_super+0xd8/0x2a0 [ 32.349626][ T291] deactivate_super+0xb8/0xe0 [ 32.354371][ T291] cleanup_mnt+0x406/0x4a0 [ 32.358848][ T291] __cleanup_mnt+0x1d/0x40 [ 32.363318][ T291] task_work_run+0x1e8/0x260 [ 32.368046][ T291] ? __cfi_task_work_run+0x10/0x10 [ 32.373204][ T291] ? __x64_sys_umount+0x12e/0x180 [ 32.378284][ T291] ? __cfi___x64_sys_umount+0x10/0x10 [ 32.383713][ T291] ? __kasan_check_read+0x15/0x20 [ 32.388779][ T291] resume_user_mode_work+0x35/0x50 [ 32.393939][ T291] syscall_exit_to_user_mode+0x63/0xb0 [ 32.399463][ T291] do_syscall_64+0x63/0xf0 [ 32.403947][ T291] ? clear_bhb_loop+0x50/0xa0 [ 32.408664][ T291] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 32.414585][ T291] RIP: 0033:0x7ff2fd99d9d7 [ 32.419045][ T291] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 32.438694][ T291] RSP: 002b:00007fffab775428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 32.447142][ T291] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff2fd99d9d7 [ 32.455155][ T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffab7754e0 [ 32.463148][ T291] RBP: 00007fffab7754e0 R08: 00007fffab7764e0 R09: 00000000ffffffff [ 32.471150][ T291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffab7765d0 [ 32.479144][ T291] R13: 00007ff2fda32050 R14: 00000000000071de R15: 00007fffab7776a0 [ 32.487153][ T291] [ 32.490201][ T291] Modules linked in: [ 32.494140][ T291] CR2: 0000000000000168 [ 32.498317][ T291] ---[ end trace 0000000000000000 ]--- [ 32.503890][ T291] RIP: 0010:ihold+0x2a/0x70 [ 32.508443][ T291] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d 1f 96 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 ac 0d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d [ 32.528080][ T291] RSP: 0018:ffffc9000b66fca0 EFLAGS: 00010246 [ 32.534211][ T291] RAX: ffff8881037eb900 RBX: 0000000000000000 RCX: ffff8881037eb900 [ 32.542229][ T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.550243][ T291] RBP: ffffc9000b66fcb0 R08: ffffffff88b8f947 R09: 1ffffffff1171f28 [ 32.558255][ T291] R10: dffffc0000000000 R11: fffffbfff1171f29 R12: ffff88812c4c8d0c [ 32.566264][ T291] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 32.574609][ T291] FS: 000055557b9a9500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 32.583581][ T291] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.590186][ T291] CR2: 0000000000000168 CR3: 00000001300f8000 CR4: 00000000003526b0 [ 32.598178][ T291] Kernel panic - not syncing: Fatal exception [ 32.604849][ T291] Kernel Offset: disabled [ 32.609190][ T291] Rebooting in 86400 seconds..