last executing test programs: 16.659203986s ago: executing program 3 (id=168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r3) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x5a}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x4c}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_emit_vhci(0x0, 0x61) (async) syz_emit_vhci(0x0, 0x61) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x4, 0xb}, {0xeeee8000, 0xd000, 0x10, 0x3, 0x3, 0xb, 0x5, 0x6, 0x1, 0x6, 0xfa, 0x5}, {0xf000, 0x7000, 0x4, 0x4, 0x11, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0xa000, 0xe, 0x9, 0x11, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0x9, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0xeeef0000, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x7, 0x2, 0x8}, {0x100000, 0x405}, {0xeeef0000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x8000000, 0x1, [0x6257, 0x2, 0x8000000000000003, 0xc]}) (async) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000140)={{0xffff0000, 0x58000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0x84, 0x4, 0xb}, {0xeeee8000, 0xd000, 0x10, 0x3, 0x3, 0xb, 0x5, 0x6, 0x1, 0x6, 0xfa, 0x5}, {0xf000, 0x7000, 0x4, 0x4, 0x11, 0x81, 0x0, 0x5, 0x5, 0x4, 0x92, 0x9}, {0x40000, 0xeeef0000, 0x1b, 0x7, 0x1, 0xfa, 0x0, 0x0, 0xfa, 0x29, 0x9, 0x9}, {0xeeee8000, 0xa000, 0xe, 0x9, 0x11, 0x2, 0x7, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x4000, 0x80a0000, 0x10, 0x2, 0xad, 0x2, 0x5, 0x4, 0x1, 0x9, 0x6, 0xa}, {0x10000, 0x10000, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0xa, 0x6, 0xff, 0x6}, {0xeeef0000, 0xeeef0000, 0xb, 0xe, 0x13, 0x1e, 0x3, 0x0, 0x7f, 0x7, 0x2, 0x8}, {0x100000, 0x405}, {0xeeef0000, 0xff81}, 0xe0000031, 0x0, 0x6000, 0x61, 0x5, 0xa800, 0x8000000, 0x1, [0x6257, 0x2, 0x8000000000000003, 0xc]}) 16.519526765s ago: executing program 3 (id=169): r0 = socket$netlink(0x10, 0x3, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:dpkg_var_lib_t:s0\x00', 0x24, 0x0) socketpair(0x1, 0x100000006, 0xfffffffe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@local, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x258, 0x2e0, 0x2e0, 0x258, 0x2e0, 0x3, 0x0, {[{{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xff], [0xff000000, 0xff, 0x4e122ccdf6af8caa, 0xff000000], 'nr0\x00', 'vlan1\x00', {0xff}, {}, 0x32, 0xb, 0x4}, 0x300, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0x8, 0x7}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x20040014) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8835}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0) r7 = socket(0x11, 0xa, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r7, &(0x7f0000000000), 0x10) getsockname(r7, 0x0, &(0x7f00000000c0)) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/133, 0x85}], 0x1) r10 = dup(r2) ioctl$KVM_HAS_DEVICE_ATTR_vm(r10, 0x4018aee3, &(0x7f0000000680)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000100)=0x6) 15.629498687s ago: executing program 3 (id=183): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x4000000, 0xf, 0x40000060, 0x100007f, 0x1a, "9f940b3491d052d172e0e573229ac6de50806c"}) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}]}}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0xfffffffa, 0x3, 0x7, 0xd, "fbf05062fe7fb5f5d481a0eca5ecc13afb13d6"}) 15.440275443s ago: executing program 3 (id=184): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x26) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000240)={{0x80000001, 0x1, 0x8, 0x3, 0x5}, [{0x0, 0x8, 0x8, 0x54}, {0x7d0, 0x7fff, 0x2b, 0x8}, {0x6, 0x10001, 0x4, 0x7}]}) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0x8001, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000000)=0x8001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) close(0x4) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='vfat\x00', 0x80000, &(0x7f0000000180)='\x00') lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=@known='trusted.overlay.opaque\x00', &(0x7f0000000500)=""/239, 0xef) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r5}, 0x38) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x4b564d05, 0x0, 0x168}]}) 15.289102298s ago: executing program 3 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) (async) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="66649e043587cc54a460f4abc9be77a2eef7eb8bb3d5e09da289c98d3724e6e2ee913d0d349ec5800e6a181aaa08ab6cbc8a679cbc87a094e7ecf0207fa4cfb5fa25dc5bed085734127b5794609b8bf99d62ab5e8f71c0bc64f5f8f6de793f81f9ff70cf9634d8b1368a5a02bf80af5ac3270e84d68f76fc0178b9b97db75d2e223383203bb2c409ffff61c3e9f17bf655f8", @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES8=r0, @ANYRESHEX=r0, @ANYRESDEC=0x0]) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xffffffffffffff8e, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xffffffffffffff8e, &(0x7f0000000740)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4001) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb7852", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) (async) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f00000000c0)=0x58, 0x5) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x40880, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001200000000000000001e0000000100"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x12, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800ff008f00000000000000050012001c110000", @ANYRES32=r7, @ANYRES8=r5], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x12, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800ff008f00000000000000050012001c110000", @ANYRES32=r7, @ANYRES8=r5], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea3}, 0x94) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r6, 0x0, 0x0, 0x800) (async) r9 = accept4(r6, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 15.009988913s ago: executing program 3 (id=186): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x521902, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 14.971748449s ago: executing program 32 (id=186): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) (async) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x521902, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.76890831s ago: executing program 0 (id=207): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00'}) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0x80ae}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000300)="5052e01be2a32437397c3b244961233f6d7487e70300000000000000dcf5441089c1842b5a95b468cc80487eab4bd695ea23bfc79c748967eba7d0dd1d73", 0xffffffffffffff94, 0x0, 0x0, 0xfffffffffffffefe) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 9.679398745s ago: executing program 0 (id=234): memfd_create(&(0x7f0000000580)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x01\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86zm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf\x00\x00\x00\x00\x91.~\xf8\x11\x91\x13L:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x007\xcc\xe8\ba\x19\x00\x84\xc9\xe4a4\x83\xf1\xa1^\xcb\xb3\xd5\n\xbc\xb9\x9a\x9d?8\xe3=\xb3{\xb5\xf4\xc0\xef\xfe\xe0:\xcb\xca\x95\xc2\x0e\x89\x89\'T\xde\xd5\xba3,\xd2f\xe2\r\x96K\x83\x8a\x16 \x9a\x9200}Y\xbc\xd0\x14z\xba\xca\x10\x98\x16\xff\xa5\xa50\x96&\xfd\xb7\xb0o\x8e}\xfe\xfa$i\xc4\xa1\xde\xc8.\xc4\x1bP\x01i\xc9\x88\xb5_\x00\xfa\xc8\x8aXVF\x16\\\xac/\xb5\x88%\xebf\xaa\xc9\xf1E\xf0\x18\t\x80\xfd\xa4\xe0\xde\x14J@2U\aR\x89\xc6g(\xc8\x85\x17B\x16m\xfe\x05MR7\x16\xc1\x84l\xed\x84\x97\xc0\xda9\x9b\x11\x91\xef\xd7:\xc0@d\x0e\x14\x0f8\xf1$;\x8dcF\x03A\x1fi\xc6T\xe1\x95\x16V\x19e\x14\xd4\xdf\xfb\xba\x90\xcdyq^0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="180000f4ffffffffffffff0000000000950000000000000021fcb73895fe8f81aa3efa2cd5e79001f21579d9668e354c3e3ce53f976aeb4ca11c096e7e2aea91f76adb5d3da03774a9bb51428bed65ff868b0b8b8da0831a2acbf0ded1da30c63baf25eeea3fd30777913421199a"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r2, 0x0, 0x25, 0x0, @void}, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/comedi3\x00', 0x4100, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000180)={'pcm3724\x00', [0x100, 0x1f, 0x1, 0x4, 0x9, 0xfc, 0x3, 0xb219, 0x8, 0xb, 0x2, 0xb51, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x11fa, 0xfe9, 0x401, 0x7, 0x3, 0xd, 0x9f, 0x6169, 0x9, 0x6, 0x2, 0x5, 0x7, 0xa]}) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000340)={0x7, 0x40, 0xffffffff, 0x0, 0x4, 0x7, 0x10, 0x4, 0x40, 0x9, 0x4, 0xd, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r4 = userfaultfd(0x801) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x11) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000018000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f000097b000/0x2000)=nil, 0x2000, 0xb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x290042, 0x0) r10 = socket(0xa, 0x5, 0x0) sendto$inet6(r10, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast1, 0x9}}, 0x4026, 0xfa85}, &(0x7f0000000280)=0x90) ioctl$PTP_PEROUT_REQUEST2(r9, 0x40383d0c, &(0x7f0000000100)={{0x9, 0x7f}, {0x9, 0x1003ff}, 0xfeffffff, 0x1}) write$vga_arbiter(r8, &(0x7f0000000040)=ANY=[], 0x13) 8.809870566s ago: executing program 0 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000000}}], 0x20}) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000004c0)={0x9, 0x0, [{0xa27, 0x0, 0xffffffff7fffffff}, {0x98c, 0x0, 0x6}, {0x13, 0x0, 0xfb6}, {0x330, 0x0, 0x3ff}, {0x87e, 0x0, 0x12}, {0x25d, 0x0, 0x2}, {0xb3a}, {0x89d, 0x0, 0x9}, {}]}) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5, &(0x7f0000000240)=0xffffffffffffffff, 0x85, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) (async, rerun: 32) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) (async, rerun: 32) syz_emit_ethernet(0x72, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x3c, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x2f, 0x0, @mcast1, @empty, [], "2b2888be6783937f22d39b28"}}}}}}}, 0x0) (async, rerun: 32) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) (rerun: 32) write$UHID_INPUT(r6, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) (async, rerun: 64) setresgid(0xffffffffffffffff, 0x0, 0xee01) (rerun: 64) r7 = ioctl$KVM_GET_STATS_FD_cpu(r3, 0xaece) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x12) r8 = socket(0x11, 0x3, 0x0) setsockopt(r8, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendmsg(r8, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r9, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000800", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) (async, rerun: 64) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @win={{0xfff, 0x4bf, 0x0, 0x3}, 0x9, 0xfff, &(0x7f0000000280)={{0x6, 0x9, 0x7, 0x6}, &(0x7f0000000200)={{0x7fffffff, 0x1, 0x5}, &(0x7f00000001c0)={{0xffffffff, 0x1, 0x0, 0x53}, &(0x7f0000000180)={{0x3, 0x2, 0x100}}}}}, 0x100, &(0x7f00000002c0)="57b8daa9355be756482d2ee5431e0b85e9adf3ff2226e3467294b43522a3ee374e3200be2f4df107f28844fd64a3f7a82a35c5286560c04b9369ac3169e1b0988e0a22333ad4c1b31e5512db10cf76d07c5008d1b5ca021cb7b5ee459dc8121b1a2efac926b05107a7752049a4496fcb982e", 0x4}}}) (rerun: 64) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x2}) (async) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.669039941s ago: executing program 0 (id=247): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x8007, 0x20000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)=0x60) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[0x0], &(0x7f0000000640), 0x0, 0x1, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000340)={0xfffffbfc, 0xffff4257, 0x7, 0xb8, &(0x7f00000000c0)=""/184, 0xd7, &(0x7f0000000180)=""/215, 0xb7, &(0x7f0000000280)=""/183}) (async) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r0, 0xc01064ab, &(0x7f0000000000)={0x5, r4, r3}) (async) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 8.608863896s ago: executing program 0 (id=249): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x40, 0xb, 0x2, '<('}, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x4}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000000c0), 0x4) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4044840) 3.609057709s ago: executing program 4 (id=279): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sigaltstack(&(0x7f0000000040)={0xffffffffffffffff, 0x80000000}, &(0x7f0000000080)={0x0}) (async) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000100), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) (async) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="d3000000060097fb14d94ffd6f1db2fa7f7857a8c1cdb3c02d408853272a055964ea3210949040223eac60d3d2b1f4195abf0145fc9fa59457f0ae6eb030375f3adb82c4bc2900f7c5e2a0d4f213066f858a62af5f740f6b38f29469ccba3899c75740fce9d44d065b98308b4aaec155b4ff0d32cbaa436a959072efd52685a51b43472517415c06d28c999b7c025a4050c8c9a852f67cb1b233"]) 3.608719932s ago: executing program 4 (id=280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x1, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x100, 0x30, 0x48b, 0xfffffffe, 0x0, {}, [{0xec, 0x1, [@m_nat={0xb0, 0x41, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}, @multicast2, @remote, 0x0, 0x20000}}]}, {0x60, 0x6, "3693769a8380457a21de9a9b770ab53cc915f0dce585c487c56eebd706dbe06216bc2eab45ec44f7bb8d67c34d01585e2108ff2967b40abd051537e433180b88324867ced12d6b64ac204434954c12c155d69e2d2fec5e01ea123694"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0x38, 0x2, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x100}}, 0x4004010) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext4\x00', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './cgroup\x00'}) sendmsg$key(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x6, 0xa, 0x2, 0xc, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0x3c, 0xa0, 0x0, @in={0x2, 0x4e24, @empty}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d3}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e22, @local}}]}, 0x60}}, 0x20044001) 3.498942317s ago: executing program 4 (id=283): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42a01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x121583, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.538258881s ago: executing program 4 (id=286): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) (async) close(r2) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '@\x00', 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) 2.479670908s ago: executing program 4 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000002000010000000040fbdbdf250a14000001000008150003001400010020010000000000000000000000000000adbbb2e0d8771f3a790d6ab138c1a55ba736637caae0f15ba285cb32f3955bd5f98e22e09a2fb52c67c7f3b54cfbadb8a1d5ddc3d70aa4bf5881b39d275d015d489e1983b0"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000340)={0x7, 0x0, [{0xacb, 0x0, 0xffffffff}, {0x800}, {0xaf6, 0x0, 0x6}, {0x2be, 0x0, 0x9}, {0x2e1, 0x0, 0x81}, {0x9aa, 0x0, 0x8000000000000000}, {0x40f, 0x0, 0x6be}]}) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000004c0)={r7, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r11, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r11, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000240)={r7, 0xc89, 0xd, 0xfffffffa, 0x1, [0x0], [0x20000005, 0x5, 0xffffffff, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffff8, 0xa679, 0x1, 0x7f]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r13}) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000480)={0x7, 0x0, [{0xa, 0xffffffff, 0x1, 0x7f, 0x800, 0x6, 0x48d4}, {0xb, 0x4, 0x1, 0x7, 0x7, 0x7, 0x5}, {0xc0000001, 0x8, 0x1, 0x403, 0x7ffffdff, 0x8005, 0xffff}, {0x80000019, 0x2, 0x1, 0x7, 0xdf1, 0x2, 0x80000001}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x8}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0x2, 0xb, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRESDEC=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc"], 0x5c}}, 0x0) 2.40939015s ago: executing program 2 (id=290): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x2, 0x9ee, 0x0, &(0x7f00000006c0)="1fa7ee12b1bfb9a3e0b08d70326dfbf2aa92c1e505fbfcca24eba468a852aabe72c31d051b6b2049da0e70f8030ec8", 0x0, 0x2f}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0xb, 0x100a}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "87fb89", 0x18, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, {[@dstopts={0x0, 0x2, '\x00', [@enc_lim, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x76cc5ae9}, @padn, @padn]}]}}}}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.289785588s ago: executing program 4 (id=291): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, 'D{('}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '(,-'}]}, 0x3c}}, 0x889726a6bf76d0ab) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r5, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000380), 0x4) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r5, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000200)={'syz0\x00', {0x7, 0x7fff, 0x3, 0x8}, 0x15, [0x8001, 0x10000000, 0x8, 0xfff, 0x7, 0x6, 0x10000, 0x3, 0x9, 0xb, 0x401, 0xb, 0x2, 0x8, 0x22, 0x9, 0x9, 0x8, 0x4, 0x10, 0x20000, 0x800, 0xffffff91, 0x5, 0x5, 0x3, 0x9136, 0x7, 0x200, 0xa, 0xe91, 0x3, 0x7, 0x8, 0xfffffff6, 0xaa, 0x7, 0x3, 0x2, 0x0, 0x3ff, 0x6, 0x6, 0xc, 0x20003605, 0xff, 0x7, 0x401, 0x401, 0x2, 0x0, 0x8000, 0x8, 0xc, 0x6338bf2e, 0x7, 0x1, 0x80000001, 0x9, 0x1, 0x5a2c, 0x5, 0x0, 0x9], [0x80, 0x200, 0x5, 0x8, 0xff, 0x6, 0x200, 0xc9, 0x7f, 0x7fffffff, 0x0, 0x6, 0xbe64, 0x6, 0x2, 0x0, 0x1, 0xfffffffb, 0xfffffe01, 0x5, 0x6e3b06eb, 0x5, 0x5, 0x8, 0x7, 0xff, 0xa000000, 0x9, 0x10000, 0x40, 0xd, 0x8, 0x0, 0x7fffffff, 0x3, 0x1, 0x3, 0x8001, 0x5, 0x9, 0x4, 0x80, 0x7, 0x8, 0xb, 0x8, 0x5, 0x3, 0x7, 0x0, 0x1, 0x7, 0x0, 0x16000, 0x7, 0x1ff, 0xfffe, 0x50000, 0xa70a, 0x8, 0x5, 0x1, 0x4, 0xca4a], [0x3, 0x1ff, 0xe, 0x0, 0x4f811fe9, 0x5, 0xffff, 0xa, 0xfff, 0x2, 0x9, 0x8, 0xfffffff2, 0x2eafbbad, 0x7, 0x3, 0xa, 0x2, 0x8, 0x8, 0x9, 0x6, 0x7fffffff, 0x70, 0x3, 0xb78, 0x3, 0x1, 0x0, 0x8, 0x7d, 0x5, 0x3, 0x5, 0x3, 0x4, 0x400000, 0x7, 0x8, 0x2c91, 0x0, 0x8, 0x9, 0x8, 0x289, 0x80000000, 0x7, 0x800, 0x707bbb7d, 0x8, 0x7, 0x4, 0x0, 0x4, 0x3, 0xb8, 0x4, 0x2, 0x7, 0x8001, 0xe, 0x533, 0xffffff7f, 0x2], [0x2, 0xace, 0xfff, 0x83, 0xc, 0x10000, 0x1, 0x8, 0x8000, 0xd, 0x8, 0x0, 0x6, 0xb6, 0x3, 0xfff, 0xe976, 0x7ff, 0x0, 0x100, 0x3, 0x7, 0x7f, 0x1c4, 0x0, 0x6, 0xfffffffe, 0x2, 0x80, 0x4, 0xa19, 0x7, 0xa38, 0x101, 0x0, 0x1, 0xfa2000, 0x10, 0x5, 0x401, 0x101, 0xccc3, 0x1000, 0x6, 0xcbb8, 0x6, 0x9, 0x16, 0x8, 0x4, 0x1, 0x61, 0xe, 0x5bc2, 0x1, 0x6, 0x6, 0x8a1, 0x3, 0x0, 0xffffffff, 0x1, 0xc, 0x10]}, 0x45c) 2.288997646s ago: executing program 2 (id=292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x25}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x20010, r0, 0xe90e4000) unlink(&(0x7f0000000000)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r3, @ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4000881}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x41511, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @bond={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e0800450200f05300248086dd0000000010000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) 2.198936412s ago: executing program 2 (id=293): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000000040)={0x400000000000000, 0xeeee0000, 0x8000, 0x4, 0x20}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x80200000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x40022}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r1}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4040080}, 0x0) 2.129687381s ago: executing program 0 (id=294): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x10, 0x9, 0x12, @remote, @empty, 0x20, 0x40, 0x0, 0x1}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa4c2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0x10, 0x9, 0x12, @remote, @empty, 0x20, 0x40, 0x0, 0x1}}) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa4, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa4c2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40040c1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8, 0x40}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 2.128850746s ago: executing program 2 (id=295): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket$inet(0x2, 0x803, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2.068722695s ago: executing program 2 (id=296): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)) r3 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = dup(r3) ftruncate(r3, 0xdcb) r5 = syz_open_dev$radio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r5, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x5}) copy_file_range(r3, &(0x7f0000000100)=0xb76, r4, 0x0, 0x2aad109b, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0) fcntl$addseals(r3, 0x409, 0x4) pipe2(&(0x7f00000003c0), 0x4080) 1.969087212s ago: executing program 2 (id=297): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x100000, 0x0) listen(0xffffffffffffffff, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000001100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="e955f5ea6ade", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, '/', "a74338", 0x88e7, "840f767ab0bdfcb9cc"}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r7], 0x2c}}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) 468.349104ms ago: executing program 1 (id=300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x40c0, 0x400) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000001300)=""/4096) r3 = socket(0x10, 0x803, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x1) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x5, 0xf, 0x10, 0x3, 0x2, 0x5, 0x0, 0x0, 0x4, 0xb, 0xe, 0xb, 0x4, 0xf, 0x5, 0xd], 0x1, [0x0, 0x1, 0x0, 0x3c3, 0x7f, 0x442, 0x2, 0x6, 0x9, 0x1000, 0x4, 0x3, 0xfff8, 0x5, 0xa, 0x3dd], [0x2, 0x7, 0x5, 0xfffa, 0xf, 0x1, 0x7, 0x40, 0x7, 0x4, 0x7, 0x7f, 0x5f94, 0x2, 0x9, 0xf46]}}]}}, @qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x100000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0xb0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 340.086247ms ago: executing program 1 (id=301): mkdir(&(0x7f0000000000)='./bus\x00', 0x43) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) (async) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvfrom(r2, 0x0, 0x9400, 0x10132, 0x0, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x10, 0x2, {{0x77d, 0x26d, 0x10, 0x2d82, 0x9, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20000040) (async) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000013000000830704ac14140f0011000000000000000000000001000000fc000000000000001400040000000000000000004f", @ANYRESHEX=r0, @ANYRES8=r2, @ANYRESHEX=r1, @ANYRES8=r4], 0x4c}, 0x24001850) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xb, 0xa}, {0xa, 0xfff2}, {0xffe0, 0x7}}}, 0x24}}, 0x4000010) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@redirect_dir_follow}, {@verity_on}, {@nfs_export_on}]}) 335.870498ms ago: executing program 1 (id=302): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002240), 0x20000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000004380)={0x1, 0x3, 0x101, 0x0, 0x4}) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf256d0000000c0099004000000044000000"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x40011) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0xb, 0x0, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) 140.162258ms ago: executing program 1 (id=303): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0xd4}}, 0x4000010) 139.616003ms ago: executing program 1 (id=304): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)='debugfs\x00', 0x200010, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x4, "d30f380100247612d91de4353d68b0fa0000842000", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216f2e1e000000000000804500", 0x0, 0x80, 0x4, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7, r6, 0x4}, 0x38) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xe1, 0x0, 0x35}]}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r2, 0x8b1a, &(0x7f0000000040)) r8 = openat$kvm(0x0, &(0x7f0000000040), 0xe4d577e3d05164a3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRESDEC=r9, @ANYBLOB="000005480000000700000000000000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r10, &(0x7f0000000280), &(0x7f0000000340)=""/140}, 0x20) r11 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r11, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x8, 0x0, 0x0, 0x2080, 0x6ae0}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004", @ANYRES32=0x0, @ANYBLOB="d700098160a76b12e2cd1fbd9834d67eaf0c979ffaa0399aeffb2cd03821d5ce83185e628c7d6d5b2daf01172f3d10e38d5c76ec1089820fd8dc72326ce701e45315165bf42c9f1a4ade6208109ab1217c014d91d31b076bab1f180b24568233605c2a321aaaad8fd8b35fe27c6947cd93b3554a6fbf64acb5eaf62c3e1111cbc3ce48f59a88c27395c4ef17ea973b919caa2d4590cd7b1c3924d6455120eaf7c92660964e39"], 0x60}, 0x1, 0x0, 0x0, 0x4008801}, 0x40880) 0s ago: executing program 1 (id=305): ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0xffffffef, 0x78, 0x0, 0x3, 0x8001, 0x4, 0x3, 0x0, 0xfffffff8, 0x6, 0x9, 0x0, 0x362, 0x4, 0x10, 0x1e, {0xffff, 0xed200000}, 0x5, 0x1}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x2, 0x800004, 0x0, 'queue0\x00', 0x1}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0002000000000000020000000000370500000000060015000200000014001600100008800c000280080001"], 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x18) sendmsg$nl_route(r2, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)=@bridge_getneigh={0x1ec, 0x1e, 0x800, 0x70bd2c, 0x25dfdbfe, {0x7, 0x0, 0x0, r5, 0x40208, 0x8000}, [@IFLA_VFINFO_LIST={0x174, 0x16, 0x0, 0x1, [{0x104, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x8b1, 0xffff, 0x88a8}}, {0x14, 0x1, {0x1, 0xd7d, 0x1, 0x8100}}, {0x14, 0x1, {0xd, 0xeb5, 0xd, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0x9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x5}}, @IFLA_VF_MAC={0x28, 0x1, {0x800, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0xa34, 0x9, 0x8100}}, {0x14, 0x1, {0x4, 0xe0, 0x6, 0x88a8}}]}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x8, 0x43e, 0x4, 0x88a8}}, {0x14, 0x1, {0x3c, 0x66, 0x3, 0x88a8}}, {0x14, 0x1, {0x1, 0xbf0, 0x62ba, 0x8100}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffff7, 0x1}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xc, @random="4a76f73a32bc"}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffff9, 0x3}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x0, 0xf}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x200, 0x5}}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1, 0x31e5}}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0xffffffff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x5}, @IFLA_MAP={0x24, 0xe, {0x9, 0x0, 0x9, 0x0, 0xd, 0x4}}, @IFLA_EVENT={0x8, 0x2c, 0x5}, @IFLA_MTU={0x8, 0x4, 0xf93}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x1cb38}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f00000001c0)={{0x0, @empty, 0x100, 0x80000, 'lc\x00', 0x8, 0x2, 0x1ffffff}, {@private=0xa010106, 0x0, 0x0, 0x4, 0x6, 0xab19}}, 0x44) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0x460}], 0x2) kernel console output (not intermixed with test programs): [ 49.741827][ T42] audit: type=1400 audit(1782634312.810:114): avc: denied { rlimitinh } for pid=5642 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 49.748328][ T42] audit: type=1400 audit(1782634312.810:115): avc: denied { siginh } for pid=5642 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:8062' (ED25519) to the list of known hosts. [ 50.953192][ T42] audit: type=1400 audit(1782634314.040:116): avc: denied { name_bind } for pid=5649 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 50.986746][ T42] audit: type=1400 audit(1782634314.080:117): avc: denied { execute } for pid=5650 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 50.994370][ T42] audit: type=1400 audit(1782634314.080:118): avc: denied { execute_no_trans } for pid=5650 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 51.857437][ T42] audit: type=1400 audit(1782634314.950:119): avc: denied { write } for pid=5651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.915352][ T42] audit: type=1400 audit(1782634315.000:120): avc: denied { write } for pid=5654 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.197181][ T42] audit: type=1400 audit(1782634315.290:121): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.235633][ T42] audit: type=1400 audit(1782634315.330:122): avc: denied { write } for pid=5660 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.513222][ T42] audit: type=1400 audit(1782634315.600:123): avc: denied { write } for pid=5665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.569312][ T42] audit: type=1400 audit(1782634315.660:124): avc: denied { write } for pid=5668 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.671682][ T42] audit: type=1400 audit(1782634315.760:125): avc: denied { write } for pid=5671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.630160][ T5650] cgroup: Unknown subsys name 'net' [ 53.788559][ T5650] cgroup: Unknown subsys name 'cpuset' [ 53.792306][ T5650] cgroup: Unknown subsys name 'rlimit' [ 54.000836][ T5699] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 54.813673][ T5650] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.453512][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 58.453527][ T42] audit: type=1400 audit(1782634321.540:162): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.634970][ T42] audit: type=1400 audit(1782634321.720:163): avc: denied { create } for pid=5738 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.645491][ T42] audit: type=1400 audit(1782634321.730:164): avc: denied { read write } for pid=5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.652842][ T42] audit: type=1400 audit(1782634321.730:165): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 58.662287][ T42] audit: type=1400 audit(1782634321.730:166): avc: denied { ioctl } for pid=5738 comm="syz-executor" path="socket:[809]" dev="sockfs" ino=809 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.662741][ T5746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.678797][ T5746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.680886][ T5752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.681421][ T5746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.682116][ T5753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.683823][ T5753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.684334][ T5752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.684676][ T5752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.685060][ T5752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.685496][ T5752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.685996][ T5754] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.686742][ T5746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.686973][ T5746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.690476][ T5753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.691716][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.694225][ T42] audit: type=1400 audit(1782634321.780:167): avc: denied { read } for pid=5738 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.694251][ T42] audit: type=1400 audit(1782634321.780:168): avc: denied { open } for pid=5738 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 58.694720][ T42] audit: type=1400 audit(1782634321.780:169): avc: denied { mounton } for pid=5738 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 58.695983][ T5753] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.698377][ T42] audit: type=1400 audit(1782634321.790:170): avc: denied { module_request } for pid=5738 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 58.703436][ T5753] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.707522][ T5754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.708286][ T5753] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.710228][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.720112][ T42] audit: type=1400 audit(1782634321.810:171): avc: denied { sys_module } for pid=5739 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 59.341918][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.345807][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.349917][ T5738] bridge_slave_0: entered allmulticast mode [ 59.354064][ T5738] bridge_slave_0: entered promiscuous mode [ 59.400917][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.403660][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.406460][ T5738] bridge_slave_1: entered allmulticast mode [ 59.410113][ T5738] bridge_slave_1: entered promiscuous mode [ 59.437642][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.439807][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.441970][ T5739] bridge_slave_0: entered allmulticast mode [ 59.444476][ T5739] bridge_slave_0: entered promiscuous mode [ 59.454216][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.458174][ T5747] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.460497][ T5747] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.462733][ T5747] bridge_slave_0: entered allmulticast mode [ 59.465458][ T5747] bridge_slave_0: entered promiscuous mode [ 59.469202][ T5747] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.471663][ T5747] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.473899][ T5747] bridge_slave_1: entered allmulticast mode [ 59.476755][ T5747] bridge_slave_1: entered promiscuous mode [ 59.479284][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.481517][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.483720][ T5739] bridge_slave_1: entered allmulticast mode [ 59.487092][ T5739] bridge_slave_1: entered promiscuous mode [ 59.502653][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.529501][ T5747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.539284][ T5747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.544240][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.548617][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.594788][ T5738] team0: Port device team_slave_0 added [ 59.598315][ T5738] team0: Port device team_slave_1 added [ 59.606580][ T5739] team0: Port device team_slave_0 added [ 59.609881][ T5739] team0: Port device team_slave_1 added [ 59.638425][ T5747] team0: Port device team_slave_0 added [ 59.642581][ T5747] team0: Port device team_slave_1 added [ 59.653532][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.656292][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.658558][ T5741] bridge_slave_0: entered allmulticast mode [ 59.661236][ T5741] bridge_slave_0: entered promiscuous mode [ 59.664935][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.667556][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.669836][ T5741] bridge_slave_1: entered allmulticast mode [ 59.672733][ T5741] bridge_slave_1: entered promiscuous mode [ 59.704105][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.706386][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.716393][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.729152][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.731967][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.742373][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.757442][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.760103][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.769748][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.774731][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.777711][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.787716][ T5747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.793201][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.796314][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.806517][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.814535][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.823788][ T5747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.826581][ T5747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.835995][ T5747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.846329][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.888465][ T5738] hsr_slave_0: entered promiscuous mode [ 59.890824][ T5738] hsr_slave_1: entered promiscuous mode [ 59.894761][ T5741] team0: Port device team_slave_0 added [ 59.921561][ T5741] team0: Port device team_slave_1 added [ 59.927473][ T5747] hsr_slave_0: entered promiscuous mode [ 59.931182][ T5747] hsr_slave_1: entered promiscuous mode [ 59.934078][ T5747] debugfs: 'hsr0' already exists in 'hsr' [ 59.937506][ T5747] Cannot create hsr debugfs directory [ 59.945882][ T5739] hsr_slave_0: entered promiscuous mode [ 59.949063][ T5739] hsr_slave_1: entered promiscuous mode [ 59.951922][ T5739] debugfs: 'hsr0' already exists in 'hsr' [ 59.954339][ T5739] Cannot create hsr debugfs directory [ 60.011083][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.013910][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.022575][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.054456][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.057372][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.067494][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.211560][ T5741] hsr_slave_0: entered promiscuous mode [ 60.214524][ T5741] hsr_slave_1: entered promiscuous mode [ 60.217659][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 60.220080][ T5741] Cannot create hsr debugfs directory [ 60.394434][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.402983][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.426443][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.433238][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.436985][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.443380][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.455096][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.460894][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.503944][ T5739] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.511618][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.514318][ T5739] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.518717][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.521628][ T5739] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.527335][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.531035][ T5739] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.536561][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.596159][ T5747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.600949][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.603680][ T5747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.608454][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.611012][ T5747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.614711][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.618017][ T5747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.626492][ T5747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.698155][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.702711][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.708588][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 60.712418][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.716348][ T5743] Bluetooth: hci1: command tx timeout [ 60.717344][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 60.717796][ T5754] Bluetooth: hci0: command tx timeout [ 60.725786][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.732337][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 60.735972][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.740907][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 60.771299][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.794537][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.795911][ T5743] Bluetooth: hci2: command tx timeout [ 60.795932][ T5754] Bluetooth: hci3: command tx timeout [ 60.797768][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.810062][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.813138][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.826467][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.851914][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.868753][ T141] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.871035][ T141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.887458][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.889665][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.898152][ T5747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.942230][ T5747] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.957465][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.960542][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.979860][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.982857][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.991158][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.043802][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.070659][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.072936][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.080752][ T5747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.088014][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.090817][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.243646][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.303729][ T5738] veth0_vlan: entered promiscuous mode [ 61.312980][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.321520][ T5738] veth1_vlan: entered promiscuous mode [ 61.359096][ T5738] veth0_macvtap: entered promiscuous mode [ 61.371790][ T5738] veth1_macvtap: entered promiscuous mode [ 61.388523][ T5739] veth0_vlan: entered promiscuous mode [ 61.403107][ T5747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.408829][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.413695][ T5739] veth1_vlan: entered promiscuous mode [ 61.419202][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.441744][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.444688][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.448109][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.457639][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.460406][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.486197][ T5739] veth0_macvtap: entered promiscuous mode [ 61.507645][ T5739] veth1_macvtap: entered promiscuous mode [ 61.522835][ T5747] veth0_vlan: entered promiscuous mode [ 61.536094][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.557285][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.566854][ T5747] veth1_vlan: entered promiscuous mode [ 61.578949][ T5741] veth0_vlan: entered promiscuous mode [ 61.582256][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.585275][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.594140][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.594902][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.597955][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.601241][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.617693][ T5741] veth1_vlan: entered promiscuous mode [ 61.637277][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.641547][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.669590][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.672918][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.700367][ T5741] veth0_macvtap: entered promiscuous mode [ 61.704974][ T5738] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.711811][ T5747] veth0_macvtap: entered promiscuous mode [ 61.712541][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.718268][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.721746][ T5741] veth1_macvtap: entered promiscuous mode [ 61.728190][ T5747] veth1_macvtap: entered promiscuous mode [ 61.743295][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.763255][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.774770][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.778995][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.784827][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.790200][ T5747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.793137][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.808892][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.824975][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.828628][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.837368][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.840252][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.927488][ T5895] sctp: [Deprecated]: syz.0.1 (pid 5895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.927488][ T5895] Use struct sctp_sack_info instead [ 61.933798][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.936953][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.941178][ T5896] syzkaller0: entered promiscuous mode [ 61.944341][ T5896] syzkaller0: entered allmulticast mode [ 61.958341][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.962730][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.009785][ T5898] macvtap0: entered allmulticast mode [ 62.012672][ T5898] veth0_macvtap: entered allmulticast mode [ 62.027914][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.031080][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.034104][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.037207][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.094426][ T5902] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 62.327393][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12'. [ 62.351633][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13'. [ 62.399664][ T5936] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 62.712381][ T5940] __vm_enough_memory: pid: 5940, comm: syz.0.16, bytes: 4503599627366400 not enough memory for the allocation [ 62.795513][ T5743] Bluetooth: hci1: command tx timeout [ 62.805772][ T5743] Bluetooth: hci0: command tx timeout [ 62.875958][ T5743] Bluetooth: hci2: command tx timeout [ 62.876176][ T5754] Bluetooth: hci3: command tx timeout [ 62.990145][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 62.996198][ T5955] erspan0: entered promiscuous mode [ 63.072544][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.26'. [ 63.087687][ T5963] team0: Port device team_slave_0 removed [ 63.125780][ T5975] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 63.129596][ T5975] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 63.146695][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.151591][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 63.194838][ T5979] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 63.194838][ T5979] program syz.3.29 not setting count and/or reply_len properly [ 63.339645][ T5988] Zero length message leads to an empty skb [ 63.370380][ T5754] Bluetooth: hci2: Malformed Event: 0x02 [ 63.372026][ T5994] dummy0: entered allmulticast mode [ 63.434460][ T6003] netlink: 72 bytes leftover after parsing attributes in process `syz.0.37'. [ 63.478507][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 63.478518][ T42] audit: type=1400 audit(1782634326.570:289): avc: denied { write } for pid=6004 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.486976][ T5819] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 63.490038][ T42] audit: type=1400 audit(1782634326.570:290): avc: denied { nlmsg_write } for pid=6004 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.499129][ T42] audit: type=1400 audit(1782634326.570:291): avc: denied { read write } for pid=5997 comm="syz.1.35" name="uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.501884][ T5819] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 63.509847][ T6006] netlink: 104 bytes leftover after parsing attributes in process `syz.0.38'. [ 63.517272][ T42] audit: type=1400 audit(1782634326.570:292): avc: denied { open } for pid=5997 comm="syz.1.35" path="/dev/uhid" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 63.565552][ T42] audit: type=1400 audit(1782634326.650:293): avc: denied { bind } for pid=6009 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.565757][ T6010] Bluetooth: MGMT ver 1.23 [ 63.580750][ T42] audit: type=1400 audit(1782634326.670:294): avc: denied { ioctl } for pid=6009 comm="syz.0.39" path="socket:[10605]" dev="sockfs" ino=10605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 63.581379][ T5754] Bluetooth: Frame is too long (len 12, expected len 4) [ 63.592971][ T42] audit: type=1400 audit(1782634326.670:295): avc: denied { name_bind } for pid=6009 comm="syz.0.39" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 63.592996][ T42] audit: type=1400 audit(1782634326.670:296): avc: denied { node_bind } for pid=6009 comm="syz.0.39" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 63.601043][ T42] audit: type=1400 audit(1782634326.690:297): avc: denied { view } for pid=6009 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 63.686023][ T6020] ufs: You didn't specify the type of your ufs filesystem [ 63.686023][ T6020] [ 63.686023][ T6020] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 63.686023][ T6020] [ 63.686023][ T6020] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 63.696266][ T6020] ufs: ufstype=old is supported read-only [ 63.699956][ T6020] ufs: ufs_fill_super(): bad magic number [ 63.751542][ T42] audit: type=1400 audit(1782634326.840:298): avc: denied { map } for pid=6023 comm="syz.0.41" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.808535][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41'. [ 63.812117][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.41'. [ 63.815169][ T6024] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 64.297009][ T6069] xt_l2tp: missing protocol rule (udp|l2tpip) [ 64.339275][ T6067] netlink: 'syz.3.52': attribute type 5 has an invalid length. [ 64.382920][ T6074] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 64.389753][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 64.875720][ T5743] Bluetooth: hci1: command tx timeout [ 64.956576][ T5743] Bluetooth: hci2: command tx timeout [ 64.956624][ T5753] Bluetooth: hci3: command tx timeout [ 65.194159][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.60'. [ 65.281596][ T6076] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 65.284746][ T10] cfg80211: failed to load regulatory.db [ 65.284875][ T6076] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 65.292885][ T6076] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 65.297794][ T6076] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 65.300019][ T6076] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.303368][ T6076] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 65.306639][ T6076] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 65.309249][ T6076] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 65.312791][ T6076] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 65.319311][ T6076] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 65.322167][ T6076] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 65.326171][ T6076] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 65.401106][ T6108] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.406235][ T6108] fuse: Unknown parameter '' [ 65.440462][ T6105] gfs2: error -5 reading superblock [ 65.456824][ T6108] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.63' sets config #1 [ 66.086734][ T6164] dlm: no local IP address has been set [ 66.096788][ T6164] dlm: cannot start dlm midcomms -107 [ 66.106728][ T6165] dlm: no local IP address has been set [ 66.118148][ T6165] dlm: cannot start dlm midcomms -107 [ 66.395732][ T5753] Bluetooth: hci4: command 0x1003 tx timeout [ 66.400447][ T5754] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 66.543087][ T6203] Invalid source name [ 66.544439][ T6203] UBIFS error (pid: 6203): cannot open "/dev/sg0", error -22 [ 66.602596][ T6207] fuse: Unknown parameter 'fޣU&00000000000000000003' [ 66.636195][ T5754] Bluetooth: hci0: command 0x0419 tx timeout [ 66.825824][ T6208] ======================================================= [ 66.825824][ T6208] WARNING: The mand mount option has been deprecated and [ 66.825824][ T6208] and is ignored by this kernel. Remove the mand [ 66.825824][ T6208] option from the mount to silence this warning. [ 66.825824][ T6208] ======================================================= [ 66.866851][ T10] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 67.051954][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 67.056553][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 156, changing to 4 [ 67.061853][ T10] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 67.068596][ T10] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 67.076513][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 67.082853][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.086440][ T10] usb 8-1: Product: ⠉ [ 67.088174][ T10] usb 8-1: Manufacturer: э [ 67.089994][ T10] usb 8-1: SerialNumber: syz [ 67.172739][ T6228] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 67.205834][ T6228] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 67.210625][ T6228] overlayfs: failed to look up (tracing) for ino (-66) [ 67.229946][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.311445][ T6199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.319605][ T6199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.349442][ T10] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 67.360479][ T10] usb 8-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 67.365478][ T5754] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.368739][ T5753] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.371752][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.427212][ T10] usb 8-1: USB disconnect, device number 2 [ 67.531071][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.531769][ T6237] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 67.539940][ T6237] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 67.546904][ T6238] IPVS: length: 120 != 24 [ 67.558153][ T6237] vhci_hcd vhci_hcd.0: Device attached [ 67.561556][ T6242] vhci_hcd: connection closed [ 67.565261][ T13] vhci_hcd vhci_hcd.1: stop threads [ 67.570712][ T13] vhci_hcd vhci_hcd.1: release socket [ 67.572833][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 68.276259][ T6250] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 68.283253][ T6267] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 68.308914][ T6250] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 68.315563][ T6250] overlayfs: failed to look up (tracing) for ino (-66) [ 68.479745][ T6271] misc userio: No port type given on /dev/userio [ 68.634951][ T42] kauditd_printk_skb: 104 callbacks suppressed [ 68.634961][ T42] audit: type=1400 audit(1782634331.720:403): avc: denied { open } for pid=6280 comm="syz.0.97" path="/dev/ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.648875][ T42] audit: type=1400 audit(1782634331.730:404): avc: denied { ioctl } for pid=6280 comm="syz.0.97" path="/dev/ptyq5" dev="devtmpfs" ino=132 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 68.682049][ T42] audit: type=1400 audit(1782634331.770:405): avc: denied { bind } for pid=6285 comm="syz.0.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.701702][ T42] audit: type=1400 audit(1782634331.790:406): avc: denied { watch } for pid=6287 comm="syz.1.99" path="/25/file1" dev="tmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 68.715436][ T5753] Bluetooth: hci0: command 0x0419 tx timeout [ 68.755133][ T42] audit: type=1400 audit(1782634331.840:407): avc: denied { getopt } for pid=6287 comm="syz.1.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.825767][ T6294] xt_socket: unknown flags 0xc [ 68.826072][ T6295] xt_socket: unknown flags 0xc [ 68.827502][ T6297] netlink: 'syz.3.101': attribute type 12 has an invalid length. [ 68.831743][ T6295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6295 comm=syz.1.102 [ 68.832389][ T6299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=6299 comm=syz.1.102 [ 68.882855][ T6302] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 68.885489][ T6302] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 68.888982][ T6302] vhci_hcd vhci_hcd.0: Device attached qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 68.915676][ T42] audit: type=1400 audit(1782634332.000:408): avc: denied { write } for pid=6305 comm="syz.3.104" name="/" dev="9p" ino=75006663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.921987][ T6302] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 68.927329][ T42] audit: type=1400 audit(1782634332.010:409): avc: denied { add_name } for pid=6305 comm="syz.3.104" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 68.928531][ T6302] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.929879][ T6302] vhci_hcd vhci_hcd.0: Device attached [ 68.939054][ T42] audit: type=1400 audit(1782634332.010:410): avc: denied { create } for pid=6305 comm="syz.3.104" name="blkio.bfq.io_service_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.948479][ T6308] vhci_hcd: connection closed [ 68.951702][ T42] audit: type=1400 audit(1782634332.010:411): avc: denied { associate } for pid=6305 comm="syz.3.104" name="blkio.bfq.io_service_bytes" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.952777][ T13] vhci_hcd vhci_hcd.1: stop threads [ 68.954557][ T42] audit: type=1400 audit(1782634332.040:412): avc: denied { read append open } for pid=6305 comm="syz.3.104" path="/15/file0/blkio.bfq.io_service_bytes" dev="9p" ino=75006743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 68.963920][ T13] vhci_hcd vhci_hcd.1: release socket [ 68.964504][ T6303] vhci_hcd: connection closed [ 68.979939][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 68.984380][ T13] vhci_hcd vhci_hcd.1: stop threads [ 68.986578][ T13] vhci_hcd vhci_hcd.1: release socket [ 68.988893][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 69.382019][ T6323] syzkaller0: entered promiscuous mode [ 69.383774][ T6323] syzkaller0: entered allmulticast mode [ 69.447250][ T5753] Bluetooth: hci1: command 0x0c1a tx timeout [ 69.447395][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.447448][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.351776][ T6347] vlan0: entered promiscuous mode [ 70.365736][ T6348] vlan0 (unregistering): left promiscuous mode [ 70.476974][ T6356] cgroup: name respecified [ 70.479010][ T6355] __nla_validate_parse: 3 callbacks suppressed [ 70.479019][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 70.487844][ T6355] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 70.493316][ T6355] bond1 (unregistering): Released all slaves [ 70.578347][ T6364] tmpfs: Unknown parameter 'mx] 1 [ 74.626042][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 74.626281][ T5745] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.632793][ T5745] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.642952][ T5745] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.648043][ T5745] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.650884][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.751077][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.839245][ T42] audit: type=1400 audit(1782634337.930:487): avc: denied { append } for pid=6596 comm="syz.2.191" name="frontend0" dev="devtmpfs" ino=952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 74.961508][ T13] bridge_slave_1: left allmulticast mode [ 74.964969][ T13] bridge_slave_1: left promiscuous mode [ 74.968480][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.981720][ T13] bridge_slave_0: left allmulticast mode [ 74.984705][ T13] bridge_slave_0: left promiscuous mode [ 74.987600][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.062203][ T9] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 75.070672][ T6607] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 75.072234][ T9] em28xx 5-1:0.0: board has no eeprom [ 75.188944][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.194510][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.203281][ T13] bond0 (unregistering): Released all slaves [ 75.232884][ T6607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.261117][ T42] audit: type=1400 audit(1782634338.350:488): avc: denied { read } for pid=6613 comm="syz.2.193" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 75.267942][ T6614] SELinux: Context system_u:object_r:smartcard_device_t:s0 is not valid (left unmapped). [ 75.294660][ T6609] vlan2: entered allmulticast mode [ 75.296348][ T6609] bond3: entered allmulticast mode [ 75.338965][ T6607] bond3: (slave geneve2): making interface the new active one [ 75.342014][ T6607] geneve2: entered allmulticast mode [ 75.352088][ T6607] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 75.594041][ T6624] dlm: no locking on control device [ 75.675485][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.692985][ T5449] 8021q: adding VLAN 0 to HW filter on device eth2 [ 75.701645][ T6635] __nla_validate_parse: 13 callbacks suppressed [ 75.701660][ T6635] netlink: 32 bytes leftover after parsing attributes in process `syz.1.196'. [ 75.712711][ T6635] ocfs2: Unknown parameter 'grpquota' [ 75.758977][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.762348][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.765991][ T6584] bridge_slave_0: entered allmulticast mode [ 75.769955][ T6584] bridge_slave_0: entered promiscuous mode [ 75.776942][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.779288][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.781556][ T6584] bridge_slave_1: entered allmulticast mode [ 75.784400][ T6584] bridge_slave_1: entered promiscuous mode [ 75.855255][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.862477][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.900190][ T6584] team0: Port device team_slave_0 added [ 75.908236][ T6584] team0: Port device team_slave_1 added [ 75.928759][ T5449] 8021q: adding VLAN 0 to HW filter on device eth3 [ 75.940427][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.943191][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.955771][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.980552][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.980996][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 75.983028][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.983417][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.034532][ T13] hsr_slave_0: left promiscuous mode [ 76.037351][ T13] hsr_slave_1: left promiscuous mode [ 76.049609][ T13] veth1_macvtap: left promiscuous mode [ 76.053369][ T13] veth0_macvtap: left promiscuous mode [ 76.058108][ T13] veth1_vlan: left promiscuous mode [ 76.059821][ T13] veth0_vlan: left promiscuous mode [ 76.160087][ T6559] em28xx 5-1:0.0: reading from i2c device at 0xa failed (error=-5) [ 76.215858][ T9] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 76.218313][ T9] em28xx 5-1:0.0: dvb set to bulk mode. [ 76.222852][ T150] em28xx 5-1:0.0: Binding DVB extension [ 76.234795][ T9] usb 5-1: USB disconnect, device number 2 [ 76.238960][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 76.251276][ T150] em28xx 5-1:0.0: Registering input extension [ 76.254779][ T9] em28xx 5-1:0.0: Closing input extension [ 76.286890][ T9] em28xx 5-1:0.0: Freeing device [ 76.290968][ T13] team0 (unregistering): Port device team_slave_1 removed [ 76.306623][ T13] team0 (unregistering): Port device team_slave_0 removed [ 76.325786][ T50] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 76.380533][ T6584] hsr_slave_0: entered promiscuous mode [ 76.382763][ T6584] hsr_slave_1: entered promiscuous mode [ 76.384827][ T6584] debugfs: 'hsr0' already exists in 'hsr' [ 76.386697][ T6584] Cannot create hsr debugfs directory [ 76.496983][ T50] usb 6-1: Invalid ep0 maxpacket: 64 [ 76.525449][ T5449] 8021q: adding VLAN 0 to HW filter on device eth4 [ 76.544856][ T6584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.554947][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.569817][ T6682] No such timeout policy "syz1" [ 76.580549][ T6584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.585616][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.589407][ T6584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.595632][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.598542][ T6584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.624404][ T6584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.655562][ T50] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 76.704007][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.715473][ T5745] Bluetooth: hci2: command tx timeout [ 76.723246][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.728463][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.731452][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.740541][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.742768][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.784854][ T5449] 8021q: adding VLAN 0 to HW filter on device eth5 [ 76.805408][ T50] usb 6-1: Invalid ep0 maxpacket: 64 [ 76.809834][ T50] usb usb6-port1: attempt power cycle [ 77.037836][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.145474][ T6487] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.165614][ T50] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 77.185794][ T50] usb 6-1: Invalid ep0 maxpacket: 64 [ 77.200800][ T6584] veth0_vlan: entered promiscuous mode [ 77.210583][ T6584] veth1_vlan: entered promiscuous mode [ 77.232139][ T6584] veth0_macvtap: entered promiscuous mode [ 77.238231][ T6584] veth1_macvtap: entered promiscuous mode [ 77.249634][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.258537][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.267108][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.270727][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.275050][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.280203][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.306760][ T6487] usb 5-1: Using ep0 maxpacket: 16 [ 77.310222][ T6487] usb 5-1: config 0 has no interfaces? [ 77.314986][ T6487] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.318861][ T6487] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.322126][ T6487] usb 5-1: Product: syz [ 77.323002][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.323440][ T6487] usb 5-1: Manufacturer: syz [ 77.326762][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.326918][ T50] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 77.328888][ T6487] usb 5-1: SerialNumber: syz [ 77.336329][ T6487] usb 5-1: config 0 descriptor?? [ 77.352518][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.354988][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.366346][ T50] usb 6-1: Invalid ep0 maxpacket: 64 [ 77.368252][ T50] usb usb6-port1: unable to enumerate USB device [ 77.397919][ T6731] capability: warning: `syz.4.187' uses deprecated v2 capabilities in a way that may be insecure [ 77.427664][ T6736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=6736 comm=syz.4.209 [ 77.431897][ T6736] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=6736 comm=syz.4.209 [ 77.458568][ T6736] binder: 6735:6736 unknown command 0 [ 77.460860][ T6736] binder: 6735:6736 ioctl c0306201 200000000680 returned -22 [ 77.709879][ T6741] xt_hashlimit: size too large, truncated to 1048576 [ 77.890605][ T6746] cgroup: Need name or subsystem set [ 77.893959][ T6747] cgroup: Need name or subsystem set [ 78.611565][ T6770] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.218'. [ 78.672544][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 78.672556][ T42] audit: type=1400 audit(1782634341.760:520): avc: denied { sqpoll } for pid=6771 comm="syz.4.219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 78.733047][ T42] audit: type=1400 audit(1782634341.820:521): avc: denied { getopt } for pid=6777 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.745056][ T6778] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 78.795492][ T5745] Bluetooth: hci2: command tx timeout [ 78.854465][ T42] audit: type=1400 audit(1782634341.940:522): avc: denied { ioctl } for pid=6784 comm="syz.4.221" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 78.922904][ T6789] netlink: 80 bytes leftover after parsing attributes in process `syz.4.223'. [ 78.928843][ T6789] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0x1b [ 79.061463][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.068061][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.074473][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.080201][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.083031][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.097345][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.100831][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.103934][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.107913][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.111172][ T6487] hid-generic 0000:0000:0004.0003: unknown main item tag 0x0 [ 79.119323][ T6487] hid-generic 0000:0000:0004.0003: hidraw1: HID v0.03 Device [syz1] on syz0 [ 79.162373][ T6807] fido_id[6807]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.447608][ T6487] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 79.556709][ T42] audit: type=1400 audit(1782634342.640:523): avc: denied { unlink } for pid=6815 comm="syz.1.230" name="#9" dev="tmpfs" ino=324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 79.598257][ T6487] usb 9-1: Using ep0 maxpacket: 32 [ 79.712763][ T6822] netlink: 164 bytes leftover after parsing attributes in process `syz.1.232'. [ 79.750471][ T6825] syzkaller0: entered promiscuous mode [ 79.752661][ T6825] syzkaller0: entered allmulticast mode [ 79.776326][ T51] usb 5-1: USB disconnect, device number 3 [ 79.848739][ T42] audit: type=1400 audit(1782634342.940:524): avc: denied { read write } for pid=6829 comm="syz.0.234" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 79.866408][ T42] audit: type=1400 audit(1782634342.940:525): avc: denied { open } for pid=6829 comm="syz.0.234" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 79.913738][ T42] audit: type=1400 audit(1782634343.000:526): avc: denied { create } for pid=6839 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.922197][ T42] audit: type=1400 audit(1782634343.000:527): avc: denied { bind } for pid=6839 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.928952][ T42] audit: type=1400 audit(1782634343.000:528): avc: denied { write } for pid=6839 comm="syz.1.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.988879][ T6834] ceph: No mds server is up or the cluster is laggy [ 80.003167][ T6846] 9pnet_fd: p9_fd_create_tcp (6846): problem binding to privport [ 80.214520][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 80.217396][ T6855] openvswitch: netlink: EtherType 0 is less than min 600 [ 80.555629][ T6860] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 80.561193][ T6860] netlink: 'syz.2.242': attribute type 9 has an invalid length. [ 80.700489][ T6862] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 80.875873][ T5745] Bluetooth: hci2: command tx timeout [ 81.074694][ T6887] binder: 6886:6887 ioctl 4008662c 200000000440 returned -22 [ 81.080515][ T6887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6887 comm=syz.1.252 [ 81.085225][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 81.089418][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 81.103938][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 81.104108][ T5845] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.108743][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.252'. [ 81.112528][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 81.115072][ T5845] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.122603][ T5845] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.122822][ T6887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6887 comm=syz.1.252 [ 81.207323][ T50] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.220274][ T42] audit: type=1400 audit(1782634344.310:529): avc: denied { bind } for pid=6891 comm="syz.1.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.265520][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 81.271941][ T35] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 81.274908][ T35] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.278423][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.282180][ T35] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.290702][ T35] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.295868][ T35] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 81.299195][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.355519][ T50] usb 7-1: device descriptor read/64, error -71 [ 81.495419][ T51] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 81.508770][ T35] usb 5-1: usb_control_msg returned -32 [ 81.511345][ T35] usbtmc 5-1:16.0: can't read capabilities [ 81.605758][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 81.657220][ T51] usb 6-1: unable to get BOS descriptor or descriptor too short [ 81.659762][ T51] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 81.663568][ T51] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 81.666011][ T51] usb 6-1: can't read configurations, error -61 [ 81.745395][ T50] usb 7-1: device descriptor read/64, error -71 [ 81.815350][ T51] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.858489][ T50] usb usb7-port1: attempt power cycle [ 81.998370][ T51] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.000978][ T51] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 82.004717][ T51] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 82.007147][ T51] usb 6-1: can't read configurations, error -61 [ 82.009313][ T51] usb usb6-port1: attempt power cycle [ 82.189326][ T6487] usb 9-1: unable to get BOS descriptor or descriptor too short [ 82.192357][ T6487] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 82.194732][ T6487] usb 9-1: can't read configurations, error -71 [ 82.205418][ T50] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 82.236399][ T50] usb 7-1: device descriptor read/8, error -71 [ 82.345471][ T51] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 82.367671][ T51] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.370995][ T51] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 82.375030][ T51] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 82.377722][ T51] usb 6-1: can't read configurations, error -61 [ 82.495644][ T50] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 82.505380][ T51] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 82.516031][ T50] usb 7-1: device descriptor read/8, error -71 [ 82.527359][ T51] usb 6-1: unable to get BOS descriptor or descriptor too short [ 82.529859][ T51] usb 6-1: too many configurations: 48, using maximum allowed: 8 [ 82.533514][ T51] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 82.536078][ T51] usb 6-1: can't read configurations, error -61 [ 82.538261][ T51] usb usb6-port1: unable to enumerate USB device [ 82.625667][ T50] usb usb7-port1: unable to enumerate USB device [ 82.965376][ T5745] Bluetooth: hci2: command tx timeout [ 83.284310][ T6910] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 83.332928][ T6912] trusted_key: encrypted_key: insufficient parameters specified [ 83.338828][ T6912] trusted_key: encrypted_key: insufficient parameters specified [ 83.609095][ T6920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.261'. [ 84.161727][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 84.164773][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 84.291396][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 84.291406][ T42] audit: type=1400 audit(1782634347.380:535): avc: denied { read write } for pid=6928 comm="syz.1.263" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.301057][ T42] audit: type=1400 audit(1782634347.380:536): avc: denied { open } for pid=6928 comm="syz.1.263" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.557740][ T6949] netlink: 'syz.1.267': attribute type 1 has an invalid length. [ 84.590185][ T6949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 84.608045][ T6949] bond4: (slave geneve3): making interface the new active one [ 84.612513][ T6949] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 84.679031][ T42] audit: type=1400 audit(1782634347.770:537): avc: denied { read } for pid=6950 comm="syz.4.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 84.681138][ T6956] fuse: Bad value for 'fd' [ 84.885547][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 85.064606][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.065410][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 85.071350][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 85.074754][ T9] usb 6-1: config 0 has no interface number 0 [ 85.077339][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 85.081645][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 85.083256][ T6959] bridge_slave_0 (unregistering): left allmulticast mode [ 85.086320][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 85.086343][ T9] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 85.086378][ T9] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 85.089956][ T6959] bridge_slave_0 (unregistering): left promiscuous mode [ 85.093527][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.095833][ T9] usb 6-1: config 0 descriptor?? [ 85.100825][ T6959] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.109582][ T9] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 85.287050][ T42] audit: type=1400 audit(1782634348.380:538): avc: denied { mount } for pid=6962 comm="syz.2.271" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 85.403016][ T9] usb 6-1: USB disconnect, device number 10 [ 85.431700][ T42] audit: type=1400 audit(1782634348.520:539): avc: denied { ioctl } for pid=6969 comm="syz.2.273" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 85.510545][ T42] audit: type=1400 audit(1782634348.590:540): avc: denied { map } for pid=6975 comm="syz.4.274" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 85.539299][ T42] audit: type=1326 audit(1782634348.630:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6975 comm="syz.4.274" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10e9d9ce59 code=0x0 [ 85.651759][ T6977] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 85.653840][ T6977] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 85.655806][ T6977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 85.674815][ T6977] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 85.677753][ T6977] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.683154][ T6977] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 85.837907][ T42] audit: type=1400 audit(1782634348.930:542): avc: denied { create } for pid=6992 comm="syz.2.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 85.874179][ T42] audit: type=1400 audit(1782634348.960:543): avc: denied { setopt } for pid=6994 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.937705][ T6999] EXT4-fs (nbd4): unable to read superblock [ 86.032722][ T7003] Bluetooth: MGMT ver 1.23 [ 86.039655][ T42] audit: type=1400 audit(1782634349.130:544): avc: denied { getopt } for pid=7002 comm="syz.2.282" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.047002][ T7003] netlink: 'syz.2.282': attribute type 10 has an invalid length. [ 86.059093][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.064673][ T7003] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 86.071513][ T7004] binder: 7002:7004 ioctl c00c620f 200000000040 returned -22 [ 86.399808][ T7010] hfsplus: unable to find HFS+ superblock [ 87.028161][ T7036] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 87.062578][ T7031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.288'. [ 87.229835][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 87.242398][ T7052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.250983][ T7054] input: syz0 as /devices/virtual/input/input6 [ 87.287104][ T6898] usbtmc 5-1:16.0: usb_control_msg returned -110 [ 87.291602][ T9] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 87.316195][ T5819] usb 5-1: USB disconnect, device number 4 [ 87.519073][ T7077] vlan2: entered promiscuous mode [ 87.521164][ T7077] hsr0: entered promiscuous mode [ 87.522953][ T7077] vlan2: entered allmulticast mode [ 87.524987][ T7077] hsr0: entered allmulticast mode [ 87.528275][ T7077] hsr_slave_0: entered allmulticast mode [ 87.530056][ T7077] hsr_slave_1: entered allmulticast mode [ 87.588477][ T7082] gretap1: entered promiscuous mode [ 87.590653][ T7082] batman_adv: batadv0: Adding interface: gretap1 [ 87.592595][ T7082] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.600994][ T7082] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 87.675500][ T5745] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.675548][ T5753] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.675598][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.675635][ T5743] Bluetooth: hci0: command 0x0419 tx timeout [ 87.681493][ T5754] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 87.682923][ T49] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 87.693971][ T49] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 87.904109][ T7095] 0x000000000003-0x100000000000005 : "" [ 87.906382][ T7095] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1fffd [ 87.914385][ T7095] ftl_cs: FTL header corrupt! [ 87.946903][ T7095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.298'. [ 87.956773][ T7095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.298'. [ 88.071391][ T7098] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 88.260858][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 89.755428][ T49] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 89.755474][ T5754] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.757369][ T49] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 89.765397][ C3] ------------[ cut here ]------------ [ 89.767555][ C3] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 89.769722][ C3] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#3: swapper/3/0 [ 89.772881][ C3] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.774561][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 89.777334][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.780321][ C3] RIP: 0010:__queue_work+0xd31/0x12b0 [ 89.781997][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d b3 07 30 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 89.787851][ C3] RSP: 0018:ffffc90000708be0 EFLAGS: 00010046 [ 89.789690][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100690394e [ 89.792071][ C3] RDX: ffff88802330d170 RSI: ffffffff8a905330 RDI: ffffffff90feee40 [ 89.794504][ C3] RBP: ffff88803481ca58 R08: 0000000000000005 R09: 0000000000000000 [ 89.797127][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88802330d000 [ 89.799451][ C3] R13: 0000000000000000 R14: ffffffff81ceec20 R15: 0000000000000001 [ 89.801769][ C3] FS: 0000000000000000(0000) GS:ffff8880d63e0000(0000) knlGS:0000000000000000 [ 89.804403][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.806579][ C3] CR2: 00007fb8671456b8 CR3: 000000004bf51000 CR4: 0000000000352ef0 [ 89.808951][ C3] Call Trace: [ 89.809968][ C3] [ 89.810953][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 89.813019][ C3] call_timer_fn+0x19a/0x610 [ 89.814501][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 89.816149][ C3] ? __run_timers+0x560/0xb00 [ 89.817613][ C3] ? __run_timers+0x560/0xb00 [ 89.819053][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 89.820801][ C3] __run_timers+0x570/0xb00 [ 89.822199][ C3] ? __pfx___run_timers+0x10/0x10 [ 89.823786][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 89.825596][ C3] run_timer_base+0x114/0x190 [ 89.827158][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 89.828738][ C3] run_timer_softirq+0x1a/0x50 [ 89.830227][ C3] handle_softirqs+0x1ea/0x9b0 [ 89.831720][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 89.833359][ C3] ? _raw_spin_unlock+0x28/0x50 [ 89.834893][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 89.836659][ C3] __irq_exit_rcu+0x162/0x210 [ 89.838106][ C3] irq_exit_rcu+0x9/0x30 [ 89.839411][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 89.841120][ C3] [ 89.842032][ C3] [ 89.842942][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.844788][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 89.846846][ C3] Code: b6 a4 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 b9 2e 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 89.853655][ C3] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000202 [ 89.855843][ C3] RAX: 00000000000b3867 RBX: ffff88801eeb0000 RCX: ffffffff8b9ce2d5 [ 89.858626][ C3] RDX: 0000000000000000 RSI: ffffffff8e15d8b0 RDI: ffffffff8c3e9b80 [ 89.861385][ C3] RBP: ffffed1003dd6000 R08: 0000000000000001 R09: ffffed100d4e678d [ 89.864006][ C3] R10: ffff88806a733c6b R11: 0000000000000000 R12: 0000000000000000 [ 89.866773][ C3] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 89.869549][ C3] ? ct_kernel_exit+0x125/0x180 [ 89.871286][ C3] default_idle+0x9/0x10 [ 89.872787][ C3] default_idle_call+0x6c/0xb0 [ 89.874505][ C3] do_idle+0x3a7/0x5b0 [ 89.875965][ C3] ? __pfx_do_idle+0x10/0x10 [ 89.877563][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 89.879650][ C3] cpu_startup_entry+0x4f/0x60 [ 89.881356][ C3] start_secondary+0x21d/0x2d0 [ 89.883056][ C3] ? __pfx_start_secondary+0x10/0x10 [ 89.884945][ C3] common_startup_64+0x13e/0x158 [ 89.886719][ C3] [ 89.887825][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.890390][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted syzkaller #0 PREEMPT(full) [ 89.893475][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.896845][ C3] Call Trace: [ 89.897917][ C3] [ 89.898832][ C3] dump_stack_lvl+0x100/0x190 [ 89.900309][ C3] vpanic+0x552/0x970 [ 89.901581][ C3] ? __pfx_vpanic+0x10/0x10 [ 89.903014][ C3] panic+0xd1/0xe0 [ 89.904334][ C3] ? __pfx_panic+0x10/0x10 [ 89.906111][ C3] ? check_panic_on_warn+0x1f/0x90 [ 89.908055][ C3] check_panic_on_warn.cold+0x19/0x34 [ 89.910120][ C3] ? __queue_work+0xd2d/0x12b0 [ 89.912058][ C3] __warn.cold+0x191/0x318 [ 89.913837][ C3] __report_bug+0x30f/0x440 [ 89.915722][ C3] ? __queue_work+0xd2d/0x12b0 [ 89.917585][ C3] ? __pfx___report_bug+0x10/0x10 [ 89.919388][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 89.921287][ C3] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 89.923488][ C3] ? __pfx_sched_balance_find_src_group+0x10/0x10 [ 89.926070][ C3] ? look_up_lock_class+0x64/0x120 [ 89.928164][ C3] report_bug_entry+0xe1/0x290 [ 89.930088][ C3] ? __queue_work+0xd31/0x12b0 [ 89.931503][ C3] handle_bug+0x1cd/0x2a0 [ 89.932845][ C3] exc_invalid_op+0x17/0x50 [ 89.934329][ C3] asm_exc_invalid_op+0x1a/0x20 [ 89.935836][ C3] RIP: 0010:__queue_work+0xd31/0x12b0 [ 89.937490][ C3] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d b3 07 30 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 89.943535][ C3] RSP: 0018:ffffc90000708be0 EFLAGS: 00010046 [ 89.945433][ C3] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100690394e [ 89.948020][ C3] RDX: ffff88802330d170 RSI: ffffffff8a905330 RDI: ffffffff90feee40 [ 89.950452][ C3] RBP: ffff88803481ca58 R08: 0000000000000005 R09: 0000000000000000 [ 89.953068][ C3] R10: 0000000000000100 R11: 0000000000000000 R12: ffff88802330d000 [ 89.955615][ C3] R13: 0000000000000000 R14: ffffffff81ceec20 R15: 0000000000000001 [ 89.958145][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 89.960104][ C3] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 89.961789][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 89.963602][ C3] call_timer_fn+0x19a/0x610 [ 89.965195][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 89.966780][ C3] ? __run_timers+0x560/0xb00 [ 89.968343][ C3] ? __run_timers+0x560/0xb00 [ 89.969852][ C3] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 89.971649][ C3] __run_timers+0x570/0xb00 [ 89.973281][ C3] ? __pfx___run_timers+0x10/0x10 [ 89.974867][ C3] ? _raw_spin_lock_irq+0x45/0x50 [ 89.976451][ C3] run_timer_base+0x114/0x190 [ 89.977917][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 89.979507][ C3] run_timer_softirq+0x1a/0x50 [ 89.980971][ C3] handle_softirqs+0x1ea/0x9b0 [ 89.982452][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 89.984057][ C3] ? _raw_spin_unlock+0x28/0x50 [ 89.985553][ C3] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 89.987253][ C3] __irq_exit_rcu+0x162/0x210 [ 89.988702][ C3] irq_exit_rcu+0x9/0x30 [ 89.990015][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 89.991707][ C3] [ 89.992621][ C3] [ 89.993542][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.995398][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 89.997095][ C3] Code: b6 a4 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 63 b9 2e 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 90.002836][ C3] RSP: 0018:ffffc900001a7e00 EFLAGS: 00000202 [ 90.004704][ C3] RAX: 00000000000b3867 RBX: ffff88801eeb0000 RCX: ffffffff8b9ce2d5 [ 90.007086][ C3] RDX: 0000000000000000 RSI: ffffffff8e15d8b0 RDI: ffffffff8c3e9b80 [ 90.009475][ C3] RBP: ffffed1003dd6000 R08: 0000000000000001 R09: ffffed100d4e678d [ 90.011864][ C3] R10: ffff88806a733c6b R11: 0000000000000000 R12: 0000000000000000 [ 90.014174][ C3] R13: 0000000000000000 R14: 1ffff92000034fc4 R15: dffffc0000000000 [ 90.016507][ C3] ? ct_kernel_exit+0x125/0x180 [ 90.017962][ C3] default_idle+0x9/0x10 [ 90.019197][ C3] default_idle_call+0x6c/0xb0 [ 90.020656][ C3] do_idle+0x3a7/0x5b0 [ 90.021895][ C3] ? __pfx_do_idle+0x10/0x10 [ 90.023274][ C3] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 90.025034][ C3] cpu_startup_entry+0x4f/0x60 [ 90.026483][ C3] start_secondary+0x21d/0x2d0 [ 90.027932][ C3] ? __pfx_start_secondary+0x10/0x10 [ 90.029515][ C3] common_startup_64+0x13e/0x158 [ 90.030995][ C3] [ 90.032524][ C3] Kernel Offset: disabled [ 90.033788][ C3] Rebooting in 86400 seconds..